Kitsune: AD CS ESC13 to Domain Admin via Backup Operators

Objective You have been hired to perform an internal pentest against the client's Domain Controller. Your task is to identify all vulnerabilities and (if possible) fully compromise the Domain. CTF Lin