/ tags/ ADCS

# HTB-Mirage

2025-11-22 8 min read

I started off by mounting the nfs share.

BloodHound kerberoasting BloodyAD ADCS forcechangepassword netexec ESC10 nats nfs

# HTB-Hercules

2025-11-19 12 min read

Starting off I tried enumerating some users but this gave no valid users.

LFI ShadowCredentialsAttack BloodyAD certipy-ad ADCS ESC3 kerbrute LDAP-Injection dotnet scripting

# HTB-TombWatcher

2025-06-26 6 min read

I can’t find anything interesting.

BloodHound kerberoasting BloodyAD certipy-ad ADCS forcechangepassword ACL ESC15