MultiMaster

Writeups verificados de la máquina MultiMaster de Hack The Box

​

MultiMaster

$ tldr SQLi unicode + WAF bypass → AD enum → privesc

·	·
Sistema operativo	Windows
Dificultad	Insano
Vector	Active Directory
IP	10.10.10.179
Fecha de retirada	2020-09-19
Skills	SQLI (SQL Injection) - Unicode Injection WAF Bypassing Advanced Python Scripting - Creation of an automation tool to handle Unicode in SQL injection Database enumeration through the previously created utility Cracking Passwords Active Directory Enumeration Enumerating domain information through SQL injection Obtaining domain RIDs through SQL injection Applying brute-force attack (SID = SID+RID) to obtain existing domain users [Python Scripting] SMB Brute Force Attack (Crackmapexec) Enumerating AD existing users (rpcclient/rpcenum) Abusing Remote Management User group Microsoft Visual Studio 10.0 Exploitation (User Pivoting) Using libwebsockets in order to connect to a CEF Debugger (RCE) AMSI Bypass - Playing with Nishang AMSI Bypass - Bypass-4MSI Alternative (evil-winrm) DLL Inspection - Information Leakage BloodHound Enumeration Abusing the GenericWrite privilege on a user Making a user vulnerable to an ASREPRoast attack - Disabling Kerberos Pre-Authentication Requesting the TGT of the manipulated user Abusing Server Operators Group Abusing an existing service by manipulating its binPATH We change the password of the administrator user after restarting the manipulated service

​

Writeups

Idioma	Autor	Formato	Enlace
🇪🇸 ES	S4vitar	Vídeo	Abrir
🇬🇧 EN	0xdf	Texto	Abrir
🇬🇧 EN	IppSec	Vídeo	Abrir

​

Recursos por skill

Documentación curada para cada técnica que aparece en la columna Skills de arriba. Fuentes: HackTricks, GTFOBins, PortSwigger, etc.

Skill	Fuente	Enlace
Information Leakage	HackTricks	Abrir
Active Directory	HackTricks	Abrir
SQL Injection	HackTricks	Abrir
SQL Injection	PortSwigger	Abrir
Brute Force / Rate-Limit Bypass	HackTricks	Abrir
BloodHound	BloodHound docs	Abrir
WebSockets Vulnerabilities	PortSwigger	Abrir
Port Forwarding / Pivoting	HackTricks	Abrir
AS-REP Roasting	HackTricks	Abrir
SMB (139/445)	HackTricks	Abrir
Remote Code Execution (RCE)	HackTricks	Abrir

​

Skills relacionadas que conviene dominar

Kerberoasting · DCSync · GetNPUsers (Impacket) · Group Policy Preferences (GPP) · Cross-Site Scripting (XSS) · EternalBlue (MS17-010) · MS08-067 (NetAPI) · Local File Inclusion (LFI)

​

Si te gustó esta máquina, prueba

• StreamIO — Windows, Medio
• Intelligence — Windows, Medio
• Bankrobber — Windows, Insano
• Fulcrum — Linux, Insano
• Blackfield — Windows, Difícil

---

​

Comentarios y truquillos

¿Algo no funcionó del writeup oficial? ¿Has encontrado un truco mejor? Compártelo aquí — los comentarios viven en GitHub Discussions.

Última actualización: 2026-06-07