https://wearethebug.dev/tags/smb/Recent content on WE ARE THE BUGTradecraften-usSat, 25 Jul 2026 00:00:00 +0000https://wearethebug.dev/posts/netexec/Sat, 25 Jul 2026 00:00:00 +0000https://wearethebug.dev/posts/netexec/Swiss-army knife for Active Directory and network protocol enumeration/exploitation, successor to CrackMapExec.https://wearethebug.dev/posts/vl-phantom/Wed, 26 Feb 2025 00:00:00 +0000https://wearethebug.dev/posts/vl-phantom/Phantom is a medium-difficulty Windows AD exploitation machine. The foothold involves discovering a publicly accessible SMB share, cracking a VeraCrypt container, and abusing Resource-Based Constrained Delegation (RBCD) to escalate privileges.https://wearethebug.dev/posts/vl-baby2/Sun, 19 Jan 2025 00:00:00 +0000https://wearethebug.dev/posts/vl-baby2/Baby2 is a medium-rated Active Directory machine on Vulnlab. The attack path involves initial SMB enumeration, password spraying to gain low-privileged domain user access, replacing a login VBS script in SYSVOL for a reverse shell, and escalating privileges by abusing GPO (Group Policy Object) DACL misconfigurations.