https://lukaszpastuszak.dev/tags/pfx-cracking/Recent content in Pfx-Cracking on Łukasz Pastuszak - security notesHugoen-usSat, 26 Mar 2022 00:00:00 +0000https://lukaszpastuszak.dev/writeups/timelapse/Sat, 26 Mar 2022 00:00:00 +0000https://lukaszpastuszak.dev/writeups/timelapse/Anonymous SMB access yields a password-protected zip holding a PFX; cracking the zip and PFX with John gives certificate-based WinRM access as legacyy, PowerShell history leaks svc_deploy credentials, and LAPS_Readers membership exposes the local administrator password read via bloodyAD for a psexec SYSTEM shell.