A single Windows Server 2019 domain controller for bufu-sec.local built by xbufu's ADLab module: random users in three groups with weak passwords, Kerberoastable accounts, and a GenericAll ACL chain from ordinary users up to Domain Admins.
Not startedVMcommit 29b2555x86_64Secret
Compromise the bufu-sec.local domain and reach Domain Admin.
The brief for this lab lives in its repository.