A single Windows Server 2019 domain controller for change.me with random users and chained attack paths: anonymous LDAP and a public SMB share for a first foothold, password spraying, Kerberoasting, AS-REP roasting, ACL abuse chains, DnsAdmins, DCSync rights and open WinRM permissions.
Not startedVMcommit f6bd3fax86_64Secret
Compromise the change.me domain and reach Domain Admin.
The brief for this lab lives in its repository.