https://blog.msnieman.com/tags/powerview/Recent content in PowerView on Myles Nieman — BlogHugoen-usSat, 23 Aug 2025 00:00:00 +0000https://blog.msnieman.com/writeups/object/Sat, 23 Aug 2025 00:00:00 +0000https://blog.msnieman.com/writeups/object/An open Jenkins registration on port 8080 lets an attacker create a job that executes arbitrary commands as oliver; Jenkins credential files are decrypted offline to recover a WinRM password, and a multi-hop AD ACL chain — ForceChangePassword on smith, GenericWrite on maria, WriteOwner on Domain Admins — yields a full domain compromise.