Bringing the hashes home with reGeorg & Empire

A penetration-test blog recounts chaining an SQL injection to upload a PHP web shell, using reGeorg to tunnel into the internal network, leveraging impacket psexec to gain a session on the domain controller, and deploying PowerShell Empire with mimikatz to extract and crack large numbers of domain credentials—demonstrating full domain compromise resulting from common misconfigurations and weak passwords.