1024

@ntds.bsky.social

🌌

I learned so much about Kerberos solving Rebound. It was very difficult, but such a great experience. There's Kerberoasting without auth, cross session with RemotePotato0, and abusing delegation, both constrained and RBCD! 0xdf.gitlab.io/2024/03/30/h...

HTB: Rebound

Rebound is a monster Active Directory / Kerberos box. I’ll start off with a RID-cycle attack to get a list of users, and combine AS-REP-Roasting with Kerberoasting to get an crackable hash for a servi...

0xdf.gitlab.io