$#active-directory

2 writeups

HackTheBoxMedium24 Jul 2026

HTB Academy: Password Attacks — Skills Assessment

Chained credential attacks across a segmented AD network: SSH user enumeration, cleartext creds in a Password Safe backup, a SOCKS pivot through a jump host, and an LSASS dump feeding a DCSync.

#active-directory
#password-attacks
#credential-access
#pivoting

Stylized illustration of a server rack with a green binary pattern on its drive bays

TryHackMeHard17 Jul 2026

TryHackMe: Operation Endgame

Active Directory chain: guest-account Kerberoasting, password reuse, a targeted Kerberoast via GenericWrite, and hardcoded creds in a PowerShell script leading to a SYSTEM shell.

#active-directory
#kerberoasting
#password-spraying
#privesc