HTB Writeup – TombWatcher
Posted on 2025-06-08
Classic AD lateral and privesc with ESC15 / ESC3
CVE-2025-24071 to spoof Windows File Explorer & ESC16 in ADCS
Windows AD CS exploitation for Red Teaming practise with ESC4
Red team exploitation on some pre-Windows 2000 “old” machine.
Post-exploitation on AD CS, with PKINITtools and abusing ESC9