April 19, 2022 at 5:10 PM ASREPRoast
Use the first cred.
After getting the password of svc account. Try to enumerate valid user with that cred. U will find a valid user use that to login in smb. Get the excel file. In that file u can see the password. Again brute force for valid username with ur new password. U will get the user flag. In that user share u can see the certificate. Import that into ur browser and login with previous cred.