https://chaelsoo.me/tags/autologon/Recent content in Autologon on kanyo's blogHugo -- gohugo.ioen-gbTue, 26 May 2026 00:00:00 +0000https://chaelsoo.me/writeups/hackini-it-workstation/Tue, 26 May 2026 00:00:00 +0000https://chaelsoo.me/writeups/hackini-it-workstation/<p>The second machine in the chain. A Windows workstation with WinRM exposed and nothing else obviously interesting until you&rsquo;re inside. Autologon credentials stored in plaintext in the registry handed over local Administrator, then Mimikatz pulled a cleartext domain password out of Credential Manager. That opened the door to the Active Directory machine.</p> <p><em>Ran through this one with <a href="https://www.linkedin.com/in/aymen-drid-36bba4243/">Aymen</a>. Two people piecing together a chain like this makes a real difference: every dead end gets shorter when someone&rsquo;s right there with you. Big shoutout to him.</em></p>