04-04

【season-7】 htb Haze wp

#wp #AD #SeImpersonatePrivilege #efspotato #ldap #rpcclient #lsaquery #splunk #bloodhound

03-19

【season-7】 htb TheFrizz wp

#wp #AD #GSSAPI #GPO #Gbbion #WriteGPlink #OU #RECYCLE.BIN #wapt

03-13

Tracks-AD-Acute

#wp #AD #Powershell #pswa #Configuration #HKLM

02-21

【season-7】 htb Darkcorp wp

#wp #pfishing #AD #efspotato #SQL injection #smb_krbrelayx #krbrelayx #dnschef #postgresql #GSSAPI #Roundcube Webmail #dnsadmin #ntlmrelayx #PetitPotam #bypass AMSI #dpapi #sssd #gpo

01-16

【season-7】 htb EscapeTwo wp

#wp #AD #WriteOwner #ESC4 #ESC1 #PKINIT #msDS-KeyCredentialLink

01-15

Tracks-AD-Object

#wp #AD #powerview #firewall #Jenkins #SPN #powershell #logon script #GenericAll #WriteOwner #ForceChangePassword

01-09

Tracks-AD-Flight

#wp #AD #smbmap #cme #php #smb #fishing #psexec #runascs #asp #defaultapppool #SeImpersonatePrivilege #efspotato

01-06

Tracks-AD-Intelligence

#wp #AD #kcd #dnstools #GMSA #username-anarchy #fuzz

01-04

Tracks-AD-Scrambled

#wp #mssql #AD #ldaps #tgt #impacket-GetUserSPNs #sliver ticketer #impacket-smbclient #NTHASH #C# #DLL #ysoserial.net

01-04

Tracks-AD-Return

#wp #AD #ldap #Server Operators #SeBackupPrivilege