ESC1

HTB: DanglingTree

DanglingTree is a Medium-difficulty Windows machine focusing on Windows Admin Center (WAC) exploitation and cryptographic analysis. The foothold involves …

August 9, 2026 · 10798 words · 51 min

Medium Windows Season 11 Season of the Punk CVE-2026-26119 CVE-2026-23760 CVE-2026-24423 DLL Decompilation DPAPI ESC4 ESC1 PKINIT

VULNLAB: Shibuya

Shibuya is a Medium Windows machine that starts of with the SMB port exposed. Enumerating possible usernames through Kerberos an attacker is able to find the …

November 21, 2024 · 8678 words · 41 min

Medium Windows Kerberos pre-authentication Timeroasting SMB share Windows imaging format Password spray Command execution Cross-session relay ESC1

VULNLAB: Ifrit

Ifrit is an Assumed-Breach scenario with the main objective is getting domain administrator privileges in the ifrit.vl Domain. It designed for those with …

September 15, 2024 · 19819 words · 94 min

Easy Windows VDHX Firefox C2 UAC bypass Pleasant Password Server MSSQL SeImpersonatePrivilege ADCS ESC8 RBCD ESC1 Browser

VULNLAB: Sendai

Sendai is a medium-difficulty Windows Active Directory machine focused on weak account hygiene, GMSA abuse, and ADCS misconfigurations. Initial access is gained …

March 15, 2024 · 6251 words · 30 min

Medium Windows SMB share Weak password GMSA GenericAll ADCS ESC4 ESC1

VULNLAB: Retro

Retro is an Easy Windows machine that showcases an Active Directory Domain Controller. Through SMB enumeration and pre-created machine account exploitation, we …

August 11, 2023 · 2333 words · 11 min

Easy Windows SMB share ADCS ESC1

VULNLAB: Hybrid

Hybrid is an Easy-rated, simplified Active Directory chain with 2 servers MAIL01 (Roundcube webmail) and DC01. Exploited a vulnerable Roundcube plugin via a …

June 22, 2023 · 4576 words · 22 min

Easy Windows NFS Roundcube RCE Keepass ADCS ESC1

No posts match this tag.