# Task 7 - Elevating Privileges within the Domain

## Task 7 <mark style="color:red;background-color:red;">Domain Privilege Escalation</mark> Elevating Privileges within the Domain

### What method allowed us to dump NTDS.DIT?

<details>

<summary>Reveal Flag <span data-gb-custom-inline data-tag="emoji" data-code="1f6a9">🚩</span></summary>

:triangular\_flag\_on\_post:`DRSUAPI`

</details>

### What is the Administrators NTLM hash?

<details>

<summary>Reveal Flag <span data-gb-custom-inline data-tag="emoji" data-code="1f6a9">🚩</span></summary>

:triangular\_flag\_on\_post:`0e0363213e37b94221497260b0bcb4fc`

</details>

### What method of attack could allow us to authenticate as the user without the password?

<details>

<summary>Reveal Flag</summary>

:triangular\_flag\_on\_post:`Pass The Hash`

</details>

### Using a tool called Evil-WinRM what option will allow us to use a hash?

<details>

<summary>Reveal Flag <span data-gb-custom-inline data-tag="emoji" data-code="1f6a9">🚩</span></summary>

:triangular\_flag\_on\_post:`-H`

</details>

## &#x20;
