#Kerberoasting

HackTheBox - Search

Search is an active directory box that runs through a lot of attacks like kerberoasting, password re-use, read gMSA Password. This box requires a lot of enumeration and search to find sensitive information disclosure

HackThebox - Sizzle

Sizzle is an ADCS box where we will explore how to make a "scf file" attack, generate a certificate via certsrv, bypass CLM & AppLocker, Kerberoasting + DCSync