https://blog.msnieman.com/tags/winpeas/Recent content in WinPEAS on Myles Nieman — BlogHugoen-usSat, 06 Sep 2025 00:00:00 +0000https://blog.msnieman.com/writeups/sauna/Sat, 06 Sep 2025 00:00:00 +0000https://blog.msnieman.com/writeups/sauna/Staff names harvested from Egotistical Bank’s website yield an AS-REP roastable account; cracking the hash gives fsmith, whose WinRM session reveals autologon credentials for svc_loanmgr — an account with DCSync rights used to dump the Administrator hash.https://blog.msnieman.com/writeups/caring/Fri, 29 Aug 2025 00:00:00 +0000https://blog.msnieman.com/writeups/caring/An unauthenticated SMB Config share leaks a config.ini containing credentials for the user claudio; WinPEAS then surfaces Administrator credentials stored in plaintext, allowing a WinRM login and both flags.