HTB Writeup – TombWatcher
Posted on 2025-06-08
Classic AD lateral and privesc with ESC15 / ESC3
CVE-2025-24071 to spoof Windows File Explorer & ESC16 in ADCS
Privilege Escalation practise in a Windows Active Directory
CVE-2024-52301 to alter Laravel environment and Linux ENV injection
Exploit CVE-2023-46818 for ISPConfig to return a root shell
There is no excerpt because this is a protected post.