One post tagged with "SMB"

In this HTB challenge, I pwned a Windows machine which had a copy of the SYSVOL SMB share, where an encrypted password was stored in a GPP. This password could be decrypted, because Microsoft published its AES key. This challenge also included the interesting Kerberoast attack, which was new to me, and I found a lot of joy looking into it.