HackTheBox: VulnCicada Writeup
Windows AD machine where NFS exposes a credential in a sticky note photo, NTLM is disabled forcing Kerberos throughout, and ESC8 lets us relay the DC machine account to ADCS for a certificate-based takeover.
🔒 Protected Content
This post is password protected. Please enter the password to view the content.
Incorrect password. Please try again.
Connect With Me
HTB: Garfield Writeup
You may also like
HackTheBox: Authority Writeup
Medium Windows Active Directory box where Ansible Vault secrets on an SMB share lead to PWM credential theft, then ESC1 ADCS abuse for domain admin.
HackTheBox: Jeeves Writeup
A medium Windows box featuring an unauthenticated Jenkins instance, a KeePass database holding an NTLM hash, and a flag hidden inside an NTFS Alternate Data Stream.