Series

Active Directory / Windows

Mainly AD CTF articles

Articles in this series

[HackTheBox] Heist

Dec 22, 20246 min read

Just another CISCO 5 Password / ProcDump Leak Write-up. Machine link. Ippsec Walkthrough. Footprinting Open ports The open ports are 80 (HTTP), RPC...

[HackTheBox] Heist

[HackTheBox] Bastion

Dec 20, 202415 min read

Just another VHD Mountage / SAM Decryption / Quick AMSI Bypass / mRemoteNG Password Decryption Write-up Machine link. IppSec...

[HackTheBox] Bastion

[HackTheBox] Resolute

Dec 15, 202410 min read

Just another Null RPC / Password Spray / PowerShell Transcript Leak / DnsAdmins Privesc / CreateThread Stealthiness Write-up. Machine link. Ippsec...

[HackTheBox] Resolute

[HackTheBox] Blackfield

Dec 8, 202434 min read

Just another Anonynous-Guest / ASREPRoast / ForceChangePassword / UserEnum / LSASS / Registry Hive / NTDS_SAM-SYSTEM Decryption Write-up. There might...

[HackTheBox] Blackfield

[HackTheBox] Forest

Nov 24, 202413 min read

Just another RPC / Port ranges / NTLMSSP / ASREPRoast / User DACL Abuse (RPC passwd) / DCSync Write-up. There might be some discrepencies in this...

[HackTheBox] Forest

[HackTheBox] Sauna

Nov 10, 202428 min read

Just another ASREPRoast / WinRM / Autologon / NTDS.dit / NC / Replication Topology / PsExec / SAM LM:NT / DCSync Write-up. You may register the...

[HackTheBox] Sauna