laps Archives • Vulndev

20NovNovember 20, 2021

LDAP, WebDAV, LAPS & Unintended Solutions – Hutch @ PG Practice

We are solving Hutch from PG-Practice. For user, we will get credentials from LDAP & use them to upload a web shell via Webdav. For root, we will read a LAPS password for the intended way & then explore other methods.

By xctCTFaspx, laps, ldap, pg practice, rubeus, webdav, windows

Active Directory, Reverse Engineering & Unintended Solutions – Pivotapi @ HackTheBox

We are solving Pivotapi, a 50-point Windows machine on HackTheBox. This one involves some Reverse Engineering, MSSQL, and Active Directory Attacks like Kerberoasting, ASREPRoasting, and various misconfigurations. In the end, we will explore some unintended ways to root this box.

By xctCTFactive directory, asreproast, hackthebox, kerberoast, laps, mssql, seimpersonate, semanagevolume, windows

Tag - laps