DLL Hijack

HTB: Touch

Touch is an Easy-rated Windows machine featuring a kiosk-mode device management application. Initial access stems from improperly secured credentials exposed …

October 4, 2026 · 3644 words · 18 min

Easy Windows Season 12 Special Season: Aero Exposed API RDP Kiosk Escape DLL Hijack MySQL UDF

VULNLAB: Push

Push is a Hard-rated small Windows Active Directory chain featuring a one domain controller and one member server. This chain focuses on advanced attack …

September 22, 2023 · 6428 words · 31 min

Hard Windows SMB share ClickOnce Backdoor DLL Hijack SCCM Golden certificate RBCD

VULNLAB: Trusted

Trusted is an Easy small Active Directory chain involving two domain controllers (labdc.lab.trusted.vl and trusteddc.trusted.vl) that focuses on web …

September 20, 2022 · 7056 words · 34 min

Easy Windows Apache XAMPP LFI Fuzzing MariaDB ForceChangePassword ProcMon Reverse engineering DLL Hijack Domain trusts EFS bypassing WinRM RDP

VULNLAB: Bruno

Bruno is a medium-rated Windows domain box that chains insecure application configuration and weak Active Directory hygiene to go from no access to domain …

July 2, 2022 · 4251 words · 20 min

Medium Windows ASREPRoasting Kerberoasting DLL hijack Kerberos relay RBCD CVE-2023-28252

No posts match this tag.