← Back to Academy

Academy Node

Credential Validation

Validate creds everywhere.

Beginner100 XPOSCP Workflow

Why it matters

Password reuse wins exams.

How to identify it

  • Cred found

NetExec commands

nxc smb TARGET -u USER -p PASS
nxc ldap TARGET -u USER -p PASS
nxc winrm TARGET -u USER -p PASS
nxc mssql TARGET -u USER -p PASS

Expected output

  • Pwn3d!
  • Auth success

Success looks like

  • Shell access

Failure looks like

  • Access denied

Troubleshooting

  • Try domain/local formats

Common mistakes

  • Testing only one protocol

What to try next

  • WinRM
  • BloodHound

Recommended next lessons

ASREP Roast

ASREP roasting abuses AD users with Kerberos pre-authentication disabled. You can request encrypted ASREP material and attempt to crack it offline.

Kerberoast

Kerberoasting targets domain users with SPNs. You request service tickets and crack them offline.

GenericWrite

GenericWrite means you can modify certain attributes on the target AD object.

GenericAll

GenericAll is effectively full control over the target AD object.