Tag: AS-REP Roasting
All the articles with the tag "AS-REP Roasting".
ShadowGate — HackSmarter Pro Labs
ShadowGate writeup (HackSmarter Pro Labs): anonymous AD enumeration, AS-REP Roasting, Shadow Credentials with Certipy, ESC8 and DCSync.
Infiltrator — HackTheBox
Insane difficulty HackTheBox machine focused on Active Directory, reverse engineering with Ghidra, BitLocker recovery, GMSA abuse, and ADCS ESC4 exploitation.