WriteUp Overview¶
Medium Windows HTB
Escape
Complete domain compromise via certipy-ad, ESC1 and PassTheCert Medium Windows AD machine.
Read Writeup → Medium Windows HTB
Jeeves
Initial access through the Jenkins Script Console, followed by KeePass cracking, Pass-the-Hash privilege escalation, and Alternate Data Stream discovery.
Read Writeup → Medium Windows HTB
Authority
Complete domain compromise via certipy-ad, ESC1 and PassTheCert Medium Windows AD machine.
Read Writeup → Medium Windows HTB
Administrator
Complete domain compromise via ACL abuse — GenericAll, ForceChangePassword, Targeted Kerberoasting, DCSync. Medium Windows AD machine.
Read Writeup →