HTB Blackfield Writeup — LSASS Dump & VSS Shadow Copies (2026)
Box AD Hard. AS-REP Roasting -> BloodHound -> ForceChangePassword -> lsass.DMP -> SeBackupPrivilege -> VSS snapshot -> NTDS.dit -> Domain Admin.
As-Rep-Roasting
HTB Forest Writeup — AS-REP Roasting, BloodHound & DCSync (2026)
Segunda box AD. AS-REP Roasting sem creds, caminho de ataque no BloodHound por 5 grupos nested, ACL abuse até DCSync.