/ tags/ ADCS

# HTB-Mirage

2025-11-228 min read

I started off by mounting the nfs share.

BloodHound kerberoasting BloodyAD ADCS forcechangepassword netexec ESC10 nats nfs

# HTB-Hercules

2025-11-1912 min read

Starting off I tried enumerating some users but this gave no valid users.

LFI ShadowCredentialsAttack BloodyAD certipy-ad ADCS ESC3 kerbrute LDAP-Injection dotnet scripting

# HTB-TombWatcher

2025-06-266 min read

I can’t find anything interesting.

BloodHound kerberoasting BloodyAD certipy-ad ADCS forcechangepassword ACL ESC15