TombWatcher

HTB: targeted Kerberoasting, a gMSA password read, WriteOwner abuse and a resurrected cert_admin for ADCS ESC15.

Media

HTB: an .asx playlist that leaks an NTLM hash, a directory junction into the web root, and GodPotato.

Administrator

HTB: a password reset chain, a Password Safe backup over FTP, Kerberoasting and DCSync.

Fluffy

HTB: SMB write access, CVE-2025-24071, shadow credentials and ADCS ESC16.

Hello World

My first post :)