https://wearethebug.dev/tags/sebackupprivilege/Recent content on WE ARE THE BUGTradecraften-usTue, 28 Jul 2026 00:00:00 +0000https://wearethebug.dev/posts/htb-darkzeroreturns/Tue, 28 Jul 2026 00:00:00 +0000https://wearethebug.dev/posts/htb-darkzeroreturns/Heron is an advanced Active Directory scenario featuring complex multi-step exploitation chains including web entry points (like SSTI leading to RCE), cross-realm Kerberos trust abuses, CI/CD runner pivots, and forest trust navigation.https://wearethebug.dev/posts/vl-baby/Sat, 28 Sep 2024 00:00:00 +0000https://wearethebug.dev/posts/vl-baby/Baby is an easy difficulty Windows machine that features LDAP enumeration, password spraying and exposed credentials. For privilege escalation, the SeBackupPrivilege is exploited to extract registry hives and the NTDS.dit file. A Pass-the-Hash attack can be performed using the uncovered domain hashes ultimately achieving Administrator access.https://wearethebug.dev/posts/vl-lustrous/Sat, 25 Dec 2021 00:00:00 +0000https://wearethebug.dev/posts/vl-lustrous/Lustrous is a Hard-rated chain consisting of 2 machines on vulnlab. Cevering AS-REP roasts, Kerberoasts, the main lesson on this chain is to demonstrate how silver tickets can be used with service accounts in a Active Directory environment.