HTB Writeup – TombWatcher
Posted on 2025-06-08
Classic AD lateral and privesc with ESC15 / ESC3
CVE-2025-24071 to spoof Windows File Explorer & ESC16 in ADCS
Privilege Escalation practise in a Windows Active Directory
From NTLM to Kerberos Relaying Attack, Spoofing UPNs to privesc
Windows AD CS exploitation for Red Teaming practise with ESC4
Red team exploitation on some pre-Windows 2000 “old” machine.