FeedDiscussion
HackTheBox: LustrousTwo Writeup
Summary This box is a Windows Active Directory domain controller that only accepts Kerberos authentication (NTLM is disabled). Initial access starts with anonymous FTP exposing a valid username list,
exploitnotes.hashnode.dev21 min read
#hackthebox#active-directory#ntlm-coercion#spnego#velociraptor#s4u2self#kerberos-delegation#bloodhound#penetration-testing#windows-server-2022#lfi#asp-net-core#lustrous2#cybersecurity#path-traversal
Responses
No responses yet.