Fluffy
· 16 min read
HTB challenge finally retired and this is my writeup for it.
HTB challenge finally retired and this is my writeup for it.
Yet another HTB challenge finally retired and this is my writeup for it.
In this HTB challenge, I pwned a Windows machine which had a copy of the SYSVOL SMB share, where an encrypted password was stored in a GPP. This password could be decrypted, because Microsoft published its AES key. This challenge also included the interesting Kerberoast attack, which was new to me, and I found a lot of joy looking into it.