A single Windows Server 2019 domain controller for change.me with random users and chained attack paths: anonymous LDAP and a public SMB share for a first foothold, password spraying, Kerberoasting, AS-REP roasting, ACL abuse chains, DnsAdmins, DCSync rights and open WinRM permissions.
Pas commencéVMcommit f6bd3fax86_64Secret
Compromise the change.me domain and reach Domain Admin.
Le brief de ce lab se trouve dans son dépôt.