Tag

AD CS

Writeups, Notes und Tools mit dem Tag AD CS.

HTB

Retro

HTB Vulnlab Machines Writeup zu Retro: Anonymous SMB, Trainee-Credentials, AD CS ESC1, Schannel/LDAPS, temporäres RBCD und Administrator-CIFS-Zugriff.

HTBMachineWriteupVulnlab MachinesWindowsActive DirectorySMBAD CSESC1RBCDKerberos
published
HTB

Logging

HTB Machine Writeup zu Logging mit SMB-Log-Leak, Protected Users, gMSA, DLL-Hijack, AD CS und WSUS-Eskalation.

HTBMachineWriteupWindowsActive DirectorygMSAWSUSAD CS
planned Coming soon
HTB

Authority

Hack The Box CPTS-Track Writeup für Authority: Anonymous SMB Loot, Ansible Vault Secrets, PWM Configuration Abuse, LDAP Bind Capture, WinRM Foothold und AD CS ESC1 zu Administrator.

HTBCPTSWriteupActive DirectoryAD CSESC1PWMAnsible VaultLDAPWinRMMachineWindowsAD Exploitation
published
HTB

Fluffy

Hack The Box CPTS-Track Writeup für Fluffy: Assumed Breach, CVE-2025-24071 NTLM Capture, Shadow Credentials, WinRM und AD CS ESC16.

HTBCPTSWriteupActive DirectoryAD CSShadow CredentialsESC16MachineWindows
published
HTB

PingPong

Hack The Box Season-10 Writeup zu PingPong. Veröffentlichung folgt, sobald die Maschine retired ist.

HTBWriteupActive DirectoryAD CSRBCDMSSQLseason-10MachineWindows
planned Coming soon
HTB

TombWatcher

Hack The Box CPTS-Track Writeup für TombWatcher: AD Enumeration, WriteSPN Kerberoasting, gMSA Abuse, ACL Chain, ADCS ESC15 und Schannel LDAP Auth zu Domain Admin.

HTBCPTSWriteupActive DirectoryKerberoastinggMSAAD CSESC15MachineWindows
published
HTB

VulnCicada

Hack The Box CPTS-Track Writeup für VulnCicada: NFS-Profil-Leak, Kerberos-only Zugriff, ADCS ESC8 Kerberos Relay, DC-Maschinenzertifikat und DCSync zu Administrator.

HTBCPTSWriteupActive DirectoryNFSKerberosAD CSESC8DCSyncMachineWindows
published