HTB: Blackfield
Active Directory machine covering AS-REP Roasting, BloodHound-guided lateral movement, LSASS credential extraction, and Backup Operators abuse.
impacket-GetNPUsers
HTB: Sauna
Active Directory machine generating valid usernames, AS-REP Roasting an account, recovering AutoLogon credentials, and finishing with a DCSync attack.
HTB: Forest
Active Directory machine built on anonymous LDAP enumeration, AS-REP Roasting, nested group abuse, and a DCSync attack for domain compromise.