Update Get-Credentials-Hijack.tsql

NetSPI · Aug 20, 2024 · f813c06 · f813c06
1 parent 5081d43
commit f813c06
Showing 1 changed file with 10 additions and 2 deletions.
diff --git a/templates/tsql/Get-Credentials-Hijack.tsql b/templates/tsql/Get-Credentials-Hijack.tsql
@@ -2,12 +2,20 @@
 
 
 --------------------------
--- Create a new credential named 'MyCredential'
+-- Create a new credential named 'MyCredential' - for testing
 --------------------------
 CREATE CREDENTIAL [MyCredential]
-WITH IDENTITY = 'machinename\owusername', 
+WITH IDENTITY = 'machinename\osusername', 
 SECRET = 'P@ssw0rd!';
 
+EXEC sp_add_proxy 
+  @proxy_name = N'MyCredentialProxy',     -- Name of the proxy
+  @credential_name = N'MyCredential';   -- Name of the existing credential
+
+EXEC sp_grant_proxy_to_subsystem 
+  @proxy_name = N'MyCredentialProxy', 
+  @subsystem_id = 3; -- 3 represents the Operating System (CmdExec) subsystem
+
 --------------------------
 -- Get list of all credentials
 --------------------------