POST-COMPROMISE STRAT

No need for shells

• Quick wins:
• Kerberoasting is quick and easy hash to crack
• Secretsdump can also get you quick hashes to crack
• Pass the cracked pass or spray the hash
• No quick wins:
• Enum!

Attacks to Research:

• Certificate Attack
• tool: certipy