HackTheBox Pro Lab: Tengu — .NET Deserialization, Neo4j Cypher Injection & Unconstrained Delegation

Full walkthrough of HackTheBox Tengu Pro Lab — exploiting ASP.NET ViewState deserialization for RCE, Neo4j Cypher injection to extract credentials, Kubernetes node escape, Unconstrained Delegation with PrinterBug coercion to capture the DC TGT, and DCSync for full domain compromise.

lazyhackers
Mar 28, 2026 · 1 min read · 1 views

Related Articles