/ tags
#active-directory
4 writeups tagged active-directory.
Pirate hard featured
Active HackTheBox machine. Full writeup published after retirement.
windowsactive-directorypre2kgmsakerberosntlm-relayrbcdconstrained-delegationspn-jackingligolo-ngprivesc
01 Mar 2026
HTB
DarkZero hard featured
Active Directory box featuring MSSQL lateral movement across two domains, kernel exploitation (CVE-2024-30088) via Metasploit, and Golden Ticket via Rubeus + PetitPotam to compromise the forest.
windowsactive-directorymssqlkerberosCVE-2024-30088golden-ticketrubeusprivesc
05 Oct 2025
HTB
Return easy featured
LDAP credential capture from a printer web panel, followed by Server Operators privilege escalation via service binary path modification.
windowsactive-directoryldapprivescserver-operators
04 Oct 2025
HTB
Cicada easy
Beginner-friendly Windows AD box: anonymous SMB enumeration leads to default credentials, password spraying finds a foothold, and SeBackupPrivilege escalates to Administrator via SAM dump.
windowsactive-directorysmbpassword-spraySeBackupPrivilegepass-the-hash
03 Oct 2025
HTB