HackTheBox

This writeup demonstrates enumeration and exploitation of AD and certificate services on HackTheBox Fluffy, including shadow credentials and privilege escalation.

This writeup details the enumeration and exploitation of AD services on HackTheBox Administrator, including credential attacks and privilege escalation.

This writeup covers the exploitation of DPAPI and Active Directory on HackTheBox Puppy, including credential extraction and privilege escalation.

This writeup demonstrates enumeration and exploitation of AD and Windows services on HackTheBox EscapeTwo, including credential attacks and privilege escalation.

This writeup explores vulnerabilities in an AD environment on HackTheBox Forest, including Kerberoasting, AS-REP roasting, and NOPac exploitation for domain escalation.