ctfsec

HackTheBox: Freelancer - Blind SQLi to Domain Admin

Freelancer is a medium-rated HackTheBox machine that chains a blind SQL injection vulnerability into full Active Directory compromise. Here's my full walkthrough. Reconnaissance Starting with a standa