smbmap

Linux machine chaining SMB enumeration, new-line command injection on an in-development router panel, cron job abuse, and a patched Diamorphine LKM rootkit for root.

Active Directory box where exposed SMB shares leak credentials that get reused, then Backup Operators membership is abused to dump domain hashes.

Active Directory machine covering AS-REP Roasting, BloodHound-guided lateral movement, LSASS credential extraction, and Backup Operators abuse.

Machine built around an Azure AD Connect misconfiguration that leaks credentials and leads to domain compromise.

Classic Active Directory box where GPP credential exposure opens the door to Kerberoasting and full domain compromise.