Tag: DCSync

• Forest – HackTheBox

  Forest is a much-hyped retired “Easy” Windows machine that deals with a wide variety of common AD attack vectors, both for initial entry and privilege escalation. Initially, I was able to leverage RPC to dump usernames from the domain, then ASRep-roast a service account. This was used to gain entry into the system, where I…

  Captain Nemo

  March 23, 2022

  HackTheBox

  Active Directory, ASRep-Roasting, bloodhound, DCSync, HackTheBox, hashcat, impacket, Kerberos, Kerbrute, ntlm relay, Pass-the-hash, password cracking, RPC