Becoming the Authority: An AD CS Exploit on HTB 'Authority'
Walkthrough of a medium-rated Windows AD box involving LDAP manipulation, cracking an Ansible vault, and escalating to Domain Admin via the AD CS ESC1 exploit.
AD
From GPP to Domain Admin: Cracking HTB 'Active'
Easy rated windows AD box from hackthebox comprising GPP and kerberoasting.