
The OSCP Toolkit: bloodyAD
Executing the Active Directory attack paths BloodHound finds, from a Linux box. What bloodyAD is, and where it fits BloodHound is very good at one thing: showing you what's possible in an Active Direc

Craft — Proving Grounds Practice Walkthrough Author: Deonte Spencer Platform: OffSec Proving Grounds Practice Difficulty: Intermediate Category: Standalone (Windows — Web Upload to SYSTEM) Introducti

Nagoya — Proving Grounds Practice Walkthrough Author: Deonte Spencer Platform: OffSec Proving Grounds Practice Difficulty: Hard Category: Active Directory (Full Domain Compromise) Table of Contents

1. Target Overview Machine Name: LovePlatform: HackTheBoxOperating System: WindowsTarget IP: 10.129.48.103 Objective:Love was a straightforward Windows machine built around a vulnerable web applicatio

1. Target Overview Machine Name: CertifiedPlatform: HackTheBoxOperating System: WindowsTarget IP: 10.129.231.186Objective: Use the provided low-privileged domain credentials to enumerate the Active Di

1. Target Overview Machine Name: EscapeTwoPlatform: HackTheBoxOperating System: WindowsTarget IP: 10.129.232.128Objective: Obtain Domain Administrator access This was an Active Directory environment p

1. Target Overview Machine Name: Jarvis Platform: HackTheBox Operating System: Linux Target IP: 10.129.229.137 Objective: Obtain initial access and escalate privileges to root Jarvis was a box