Posted by Doyle, Jason \(10090\) on Sep 16
When performing an internal penetration test of a windows domain with an objective of acquiring domain administratorcredentials and/or credit card information, what is considered useful information on a Linux system? I'm in the
situation where the only vulnerability I can find and exploit is on a Linux web server. Of course, I can attempt to
crack all the local password hashes, and try to use those credentials on other systems....