03-19

【season-7】 htb TheFrizz wp

#wp #AD #GSSAPI #GPO #Gbbion #WriteGPlink #OU #RECYCLE.BIN #wapt

03-13

Tracks-AD-Acute

#wp #AD #Powershell #pswa #Configuration #HKLM

02-21

【season-7】 htb Darkcorp wp

#wp #dpapi #AD #SQL injection #efspotato #smb_krbrelayx #krbrelayx #dnschef #postgresql #GSSAPI #pfishing #Roundcube Webmail #dnsadmin #ntlmrelayx #PetitPotam #bypass AMSI #sssd #gpo

01-16

【season-7】 htb EscapeTwo wp

#wp #AD #WriteOwner #ESC4 #ESC1 #PKINIT #msDS-KeyCredentialLink

01-15

Tracks-AD-Object

#wp #AD #WriteOwner #powerview #firewall #Jenkins #SPN #powershell #logon script #GenericAll #ForceChangePassword

01-09

Tracks-AD-Flight

#wp #fishing #AD #php #smbmap #cme #smb #psexec #runascs #asp #defaultapppool #SeImpersonatePrivilege #efspotato

01-06

Tracks-AD-Intelligence

#wp #kcd #AD #fuzz #dnstools #GMSA #username-anarchy

01-04

Tracks-AD-Scrambled

#wp #AD #mssql #C# #ldaps #tgt #impacket-GetUserSPNs #sliver ticketer #impacket-smbclient #NTHASH #DLL #ysoserial.net

01-04

Tracks-AD-Return

#wp #AD #ldap #Server Operators #SeBackupPrivilege

12-31

Tracks-AD-StreamIO

#wp #AD #SQL injection #laps #mssql #php #fuzz #sqlcmd #browser #WriteOwner