netexec

Active Directory machine built on anonymous LDAP enumeration, AS-REP Roasting, nested group abuse, and a DCSync attack for domain compromise.

Windows box driven by macro-based phishing, hMailServer database credential recovery, lateral movement over RDP, and Veeam Backup exploitation.