Orange-Cyberdefense / GOAD

game of active directory
GNU General Public License v3.0
5.44k stars 753 forks source link

Errors Encountered in MSSQL Configuration - part 7: Impersonation Privileges and Follow-up Results #290

Closed Monishborvankar closed 3 weeks ago

Monishborvankar commented 3 weeks ago

Hello! In the seventh part of the MSSQL setup, I encountered errors after applying the recent updates. "Before jump into this chapter, i have done some small configuration on the lab, to be sure you get it, you should pull the updates and play : "ansible-playbook servers.yml" to get the last mssql configuration."

This modifications are arya.stark execute as user dbo impersonate privilege on msdb brandon.stark impersonate on jon.snow

Upon running the playbook, I received the following errors

image

After further execution, I received these additional results

image

Let me know if there are specific steps to resolve this or adjustments needed.

Thank you!

Mayfly277 commented 3 weeks ago

if you install the lab after the blog post you don't need update. since this post was write in 2022 it is certainly the case so you don't have to do that to get the features you want, they should be already there :)

Monishborvankar commented 3 weeks ago

okay!! :) thank you, and i want to ask you that, pls tell me how or where did you get jeor mormont password 'L0ngCl@w' ???cause i tried with hashcat and john but no output

Mayfly277 commented 3 weeks ago

blog is a demo of vulnerabilities exploitation so i just picked it for the demonstration ;) image