Tag
CPTS
Writeups, Notes und Tools mit dem Tag CPTS.
Administrator
Hack The Box CPTS-Track Writeup für Administrator: Active Directory ACL Abuse, Password Reset Chain, Password Safe Loot, targeted Kerberoasting, DCSync und Pass-the-Hash zu Domain Admin.
Authority
Hack The Box CPTS-Track Writeup für Authority: Anonymous SMB Loot, Ansible Vault Secrets, PWM Configuration Abuse, LDAP Bind Capture, WinRM Foothold und AD CS ESC1 zu Administrator.
Craft
Hack The Box CPTS-Track Writeup für Craft: Vhost Enumeration, Gogs Git-History Leak, authentifizierte API eval-RCE, Container Secrets, Gogs Pivot, SSH als gilfoyle und Vault SSH OTP zu root.
Fluffy
Hack The Box CPTS-Track Writeup für Fluffy: Assumed Breach, CVE-2025-24071 NTLM Capture, Shadow Credentials, WinRM und AD CS ESC16.
Ghost
Hack The Box CPTS-Track Writeup für Ghost: LDAP-Login-Bypass, Gitea Source Disclosure, Container RCE, AD DNS Abuse, NetNTLMv2 Capture, gMSA, AD FS SAML Forgery, linked SQL, IFM Dump und Golden Ticket Forest Escalation.
Jeeves
Hack The Box CPTS-Track Writeup für Jeeves: Jenkins Script Console RCE, KeePass Credential Recovery, Pass-the-Hash und Root-Flag in Alternate Data Streams.
Media
Hack The Box CPTS-Track Writeup für Media: UNC-basierter NetNTLMv2-Capture, Credential Cracking, SSH-Foothold, NTFS Junction Webroot Write und SeTcbPrivilege Abuse.
Postman
Hack The Box CPTS-Track Writeup für Postman: unauthenticated Redis file write, SSH als redis, KeePass/SSH-Key Credential Recovery, Matt-Pivot und Webmin CVE-2019-12840.
POV
Hack The Box CPTS-Track Writeup für POV: ASP.NET Arbitrary File Read, machineKey Disclosure, ViewState Forgery, DPAPI Credential Recovery, WinRM Pivot und SeDebugPrivilege zu SYSTEM.
Redelegate
Hack The Box CPTS-Track Writeup für Redelegate: Anonymous FTP, KeePass Crack, MSSQL SID Enumeration, gezielter Password Spray, ACL Abuse, constrained delegation, DCSync und Administrator Pass-the-Hash.
Snoopy
Hack The Box CPTS-Track Writeup für Snoopy: Web File Disclosure, BIND Dynamic DNS Abuse, Mattermost Password Reset Interception, SSH Foothold, sudo git apply Symlink Abuse und ClamAV CVE-2023-20052 zu root.
StreamIO
Hack The Box CPTS-Track Writeup für StreamIO: Web Enumeration, MSSQL Injection, Credential Cracking, PHP LFI/RFI, SQL Backup Credentials, WinRM Foothold, AD ACL Abuse und LAPS zu Administrator.
TombWatcher
Hack The Box CPTS-Track Writeup für TombWatcher: AD Enumeration, WriteSPN Kerberoasting, gMSA Abuse, ACL Chain, ADCS ESC15 und Schannel LDAP Auth zu Domain Admin.
Trick
Hack The Box CPTS-Track Writeup für Trick: DNS AXFR, vHost-Discovery, Payroll SQLi, Marketing LFI, SSH-Key-Disclosure und Fail2Ban Privilege Escalation.
Voleur
Hack The Box CPTS-Track Writeup für Voleur: Kerberos-only Active Directory Enumeration, verschlüsseltes Access Review, User Restore, DPAPI, targeted Kerberoasting, WSL/SSH und Offline-NTDS zu Administrator.
VulnCicada
Hack The Box CPTS-Track Writeup für VulnCicada: NFS-Profil-Leak, Kerberos-only Zugriff, ADCS ESC8 Kerberos Relay, DC-Maschinenzertifikat und DCSync zu Administrator.
HTB-CPTS Roadmap
Eine Auswahl sinnvoller HTB-Maschinen, um gezielt die Skills zu erweitern, die für die CPTS-Prüfung nützlich sein können.