Home

Extend

Hashnode Pro
Hashnode for Agents

Resources

The foreword
Hashnode gql skill

Buildful - AI coding agent that delivers frontier-level results at a fraction of the cost Bug0 - The AI-native e2e QA regression testing Hackathons Changelog Brand @hashnode on X Hashnode on LinkedIn Support - hello+support@hashnode.com Code of Conduct Terms Privacy Sitemap

Sign in

Search Hashnode

Search posts, tags, users, and pages

Discussion on "HackTheBox: LustrousTwo Writeup" | Hashnode

Discussion

Yogeshwar Peela

Jul 2

HackTheBox: LustrousTwo Writeup

Summary This box is a Windows Active Directory domain controller that only accepts Kerberos authentication (NTLM is disabled). Initial access starts with anonymous FTP exposing a valid username list,

exploitnotes.hashnode.dev21 min read

#hackthebox #active-directory #ntlm-coercion #spnego #velociraptor #s4u2self #kerberos-delegation #bloodhound #penetration-testing #windows-server-2022 #lfi #asp-net-core #lustrous2 #cybersecurity #path-traversal

Responses

Markdown supported · ⌘↵ to post

No responses yet.