Becoming the Authority: An AD CS Exploit on HTB 'Authority'

Walkthrough of a medium-rated Windows AD box involving LDAP manipulation, cracking an Ansible vault, and escalating to Domain Admin via the AD CS ESC1 exploit.

November 20, 2025 · 14 min · 2969 words