https://wearethebug.dev/tags/webdav/Recent content on WE ARE THE BUGTradecraften-usFri, 15 Dec 2023 00:00:00 +0000https://wearethebug.dev/posts/vl-sidecar/Fri, 15 Dec 2023 00:00:00 +0000https://wearethebug.dev/posts/vl-sidecar/Sidecar is a Hard-rated small Active Directory chain that contains 2 Windows machines, however, attacks are not for beginners on Active Directory Pentesting. From initial enumeration through to full domain compromise, including Shell via a .lnk file, NTLM relay, WebDAV coercion, Shadow Credentials, PKINIT abuse, and a Silver Ticket attack.https://wearethebug.dev/posts/vl-intercept/Sat, 25 Dec 2021 00:00:00 +0000https://wearethebug.dev/posts/vl-intercept/Intercept is a small Active Directory scenario rated as Hard that provides hands-on experience with common Active Directory vulnerabilities and misconfigurations, demonstrating relay attacks and authentication coercion attacks can be used to get access to the domain.