DPAPI

HTB: DanglingTree

DanglingTree is a Medium-difficulty Windows machine focusing on Windows Admin Center (WAC) exploitation and cryptographic analysis. The foothold involves …

August 9, 2026 · 10798 words · 51 min

Medium Windows Season 11 Season of the Punk CVE-2026-26119 CVE-2026-23760 CVE-2026-24423 DLL Decompilation DPAPI ESC4 ESC1 PKINIT

VULNLAB: Odori

Odori is a medium-difficulty machine on Vulnlab that involves gaining access to a Bitlocker encrypted disk image, in order to retrieve DPAPI protected …

January 17, 2025 · 2957 words · 14 min

Medium Linux SMB share VMware BitLocker Forensics DPAPI SFTP Python cache

VULNLAB: Klendathu

Klendathu is an Insane difficulty chain hosted on Vulnlab, involved coercion with an undocumented function/procedure on MSSQL, forging a silver ticket, spoofing …

May 24, 2024 · 6058 words · 29 min

Insane Windows MSSQL Silver ticket SeImpersonatePrivilege Kerberos Remote Desktop Connection Manager DPAPI Diana

VULNLAB: Tengu

Tengu is a medium-rated chained machine on VulnLab, features a mixed environment with two Windows hosts and one Linux host. Exploiting Node-RED on Linux (with …

March 28, 2024 · 8124 words · 39 min

Medium Windows Node-RED Credential harvesting MSSQL SUDO NTLM hash gMSA Code execution DPAPI

VULNLAB: Reaper

Reaper is an Insane Windows machine that begins with an exposed FTP service. Within the FTP share resides a Windows binary vulnerable to both format-string and …

August 18, 2023 · 8779 words · 42 min

Insane Windows Buffer overflow Format string RDP DPAPI Python C Kernel exploitation Reverse engineering

VULNLAB: Reflection

Reflection is a medium-difficulty Active Directory chain that simulates a vulnerable enterprise environment and challenges users to progress from limited access …

June 10, 2023 · 4111 words · 20 min

Medium Windows SMB share NTLM hash LAPS DPAPI RBCD LSA Password spray

No posts match this tag.