DarkHaven Technologies

Range (Medium) - by Ryan Yager

Hack Smarter Labswww.hacksmarter.org

The following post by 0xb0b is licensed under CC BY 4.0

---

Scenario

Objective/Scope

Darkhaven Technologies is a networking organization based throughout the world with locations in NY, CA, Japan, and more. They have segregated their network and would like to a Red Team engagement to see if a user is able to move throughout the different networks.

A Close Access Team has infiltrated Darkhaven Technologies and dropped a machine for you on the internal network that you can connect to through OpenVPN. This machine should allow you to see the entire global network, as it was dropped on a port that is within the global VLAN. The Close Access Team relayed information that they overheard about the Web Portal being worked on at this time.

Sections

web.ext.darkhaven

sql.ext.darkhaven.local

share.ext.darkhaven.local

ca.ext.darkhaven.local

dc.ext.darkhaven.local

corp.darkhaven.tech darkhaven.tech

Network Overview

Subnet 1 10.10.10.0/25

IP Address	Host	Hostname	Purpose
10.10.10.4	DC01	DC.DARKHAVEN.TECH	Domain Controller
10.10.10.5	DC02	DC02.CORP.DARKHAVEN.TECH	Child Domain Controller

Subnet 2 10.10.10.128/25

IP Address	Host	Hostname	Purpose
10.10.10.132	WEB	WEB.EXT.DARKHAVEN.LOCAL	Web Server
10.10.10.133	SQL	SQL.EXT.DARKHAVEN.LOCAL	SQL Server
10.10.10.134	CA	CA.EXT.DARKHAVEN.LOCAL	Certificate Authority
10.10.10.135	SHARE	SHARE.EXT.DARKHAVEN.LOCAL	File Server
10.10.10.136	DC	WEB.EXT.DARKHAVEN.LOCAL	Domain Controller