Intermediate Secdojo Overview An Active Directory enterprise environment focused on chaining vector attacks, from abusing weak permissions to compromising core enterprise services. Reconnai...

Medium HackTheBox Overview VulnCicada is a medium Active Directory box where NTLM is disabled. An NFS share exposed to everyone leaks usernames and a password hidden in an image. From there i...

Medium HackTheBox Overview Tombwatcher is a medium assumed-breach Active Directory box. Starting with low-privileged domain credentials, the path involves DPAPI credential decryption, lateral...

Easy HackTheBox Overview Forest is an easy Active Directory box. Null session LDAP enumeration gets you usernames, AS-REP roasting gives you a foothold, and bloodhound reveals a path through ...

Easy HackTheBox Overview Baby is an easy Active Directory box. Null session LDAP enumeration reveals a password in a user’s description field. A bit of digging finds two users that weren’t in...