HackTheBox Pro Lab: Tea — Gitea RCE, Ansible Vault Decryption & AD CS Shadow Credentials

Full walkthrough of HackTheBox Tea Pro Lab — exploiting a Gitea CVE for unauthenticated RCE, decrypting Ansible Vault secrets for domain credentials, abusing Shadow Credentials (msDS-KeyCredentialLink) for certificate-based authentication, and DCSync for complete domain compromise.