walkthrough
Premium
HackTheBox Pro Lab: Tengu — .NET Deserialization, Neo4j Cypher Injection & Unconstrained Delegation
Full walkthrough of HackTheBox Tengu Pro Lab — exploiting ASP.NET ViewState deserialization for RCE, Neo4j Cypher injection to extract credentials, Kubernetes node escape, Unconstrained Delegation with PrinterBug coercion to capture the DC TGT, and DCSync for full domain compromise.
Members Only Content
This article is exclusively available to premium members of LazyHackers. Login or subscribe to read.