HTB: Giddy
Windows machine using MSSQL injection to force NTLM authentication, gain WinRM access, and abuse the UniFi Video service for SYSTEM.
Service Abuse
HTB: Jarvis
Linux machine chaining manual union-based SQL injection into a phpMyAdmin web shell, a Python command injection, and SUID systemctl abuse for root.
HTB: Return
Active Directory box capturing LDAP credentials through a printer admin panel, gaining WinRM access, and abusing Server Operators rights to DCSync.