In 2018 I began a journey to learn Windows and Active Directory. Interesting enough, I’ve noticed that most universities don’t require Windows Internals or Active Directory in their curriculums. This is peculiar to me considering the market share Microsoft has in IT infrastructure around the world. Moreover, on-premises Active Directory…

Written by malCOM — October 2021 SUMMARY: This box is a domain controller with the firewall restricting inbound access to ports typically open on a Domain Controller (DC). Impacket rpcdump shows this machine is a DC with DNS running and likely has the Active Directory Certificate Services (AD CS) server…

About two years have gone by since completing the machine Querier on hackthebox.eu made by mrh4sh and egre55. The reason I liked this box so much back then is because it opened my eyes to the many ways UNC paths can be abused to capture Windows netntlmv2 hashes.

By EricaZeli c— July 9–11, 2020 While the world may be closed due to COVID-19, there have been many great Capture the Flag (CTF) events and virtual gatherings as a result. SANS, an industry leader in cybersecurity training also known for their very popular “Holiday Hack CTF”, is no exception…