---
id: 7430
title: "RCE để chạy whoami, ifconfig?"
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/rce-de-chay-whoami-ifconfig-va-thuc-te/"
published_at: "2019-09-27T15:58:30Z"
tags: ["ai-security", "bug-bounty", "rce", "lateral-movement", "pentest", "mimikatz", "credential-dumping", "password-reuse"]
phying_url: "https://phying.com/item/7430"
lang: en
---

# RCE để chạy whoami, ifconfig?

## Summary

A pentester describes turning one RCE on an ASP.NET server into deep internal access via mimikatz dumping and password reuse, arguing real engagements must prove impact beyond running whoami.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **Published:** 2019-09-27T15:58:30Z
- **Original:** https://blog.viettelcybersecurity.com/rce-de-chay-whoami-ifconfig-va-thuc-te/
- **Phying News:** https://phying.com/item/7430