PR

Pro Labs Premium

1 weeks ago

HackTheBox: Control Pro Lab

Full walkthrough of the HackTheBox Control Pro Lab. Five-machine Windows AD environment compromised via MSSQL SQL injection authen…

#Active Directory #BloodHound #Constrained Delegation #DCSync

lazyhackers

3 · 15m

PR

Pro Labs Premium

1 weeks ago

HackTheBox: Xen Pro Lab

Full walkthrough of the HackTheBox Xen Pro Lab. Six-machine environment compromised via Citrix NetScaler ADC CVE-2019-19781 path t…

#Active Directory #ASREPRoast #BloodHound #Citrix

lazyhackers

30 · 60m

PR

Pro Labs Premium

1 weeks ago

HackTheBox: FullHouse Pro Lab

Complete walkthrough of the HackTheBox FullHouse Pro Lab. Six-machine hybrid Linux/Windows environment compromised via PHP object …

#Active Directory #BloodHound #DCSync #GenericAll ACL

lazyhackers

8 · 17m

PR

Pro Labs Premium

1 weeks ago

HackTheBox: Unintended Pro Lab

Full walkthrough of the HackTheBox Unintended Pro Lab. Six-machine environment compromised via XXE file read exposing internal cre…

#Active Directory #DCSync #Docker Escape #HackTheBox

lazyhackers

4 · 12m

PR

Pro Labs Premium

1 weeks ago

HackTheBox: P.O.O. Pro Lab

Complete walkthrough of the HackTheBox P.O.O. Pro Lab. Five-machine Windows AD environment compromised via IIS web.config.bak cred…

#Active Directory #ADCS #BloodHound #Certipy

lazyhackers

2 · 10m

PR

Pro Labs Premium

1 weeks ago

HackTheBox: Puppet Pro Lab

Complete walkthrough of the HackTheBox Puppet Pro Lab. Six-machine Windows/Linux AD environment compromised via WordPress WP File …

#Active Directory #BloodHound #Chisel #DCSync

lazyhackers

6 · 22m

PR

Pro Labs Premium

1 weeks ago

HackTheBox: Mythical Mini Pro Lab

Complete walkthrough of the Mythical HackTheBox Mini Pro Lab (FREE). Covers Apache LFI log poisoning via User-Agent injection for …

#Active Directory #AS-REP Roasting #DCSync #Free Pro Lab

lazyhackers

11 · 22m

PR

Pro Labs Premium

1 weeks ago

HackTheBox: Intercept Mini Pro Lab

Complete Mini Pro Lab walkthrough for Intercept on HackTheBox. Covers LLMNR/NBNS poisoning with Responder to capture NetNTLMv2 has…

#Active Directory #ADCS ESC8 #DCSync #HackTheBox

lazyhackers

0 · 20m

PR

Pro Labs Premium

1 weeks ago

HackTheBox: Reflection Mini Pro Lab

Complete Mini Pro Lab walkthrough for Reflection on HackTheBox. Covers Server-Side Request Forgery chained with NTLM relay to MSSQ…

#Active Directory #DCSync #HackTheBox #Impacket

lazyhackers

6 · 19m

PR

Pro Labs Premium

1 weeks ago

HackTheBox: Trusted Mini Pro Lab

Complete Mini Pro Lab walkthrough for Trusted on HackTheBox. Covers ADCS ESC1 (arbitrary SAN certificate abuse), ESC3 (enrollment …

#Active Directory #ADCS #DCSync #ESC1

lazyhackers

2 · 18m