Hack the Box: Forest (OSCP like boxes and beyond)

Today we will be looking at a retired HTB Machine Forest, which is an Active Directory machine. This machine is part of the Beyond this Module in Hack The Box Academy, Active Directory Enumeration and attacks. Starting off as usual with a port scan we see the following:

We utilized rustscan above with the command:

rustscan --ulimit 5000 -a 10.10.10.161 -- -Pn

We see a couple of different attack vectors that we can check for, null SMB session, anonymous RPC …

active directory forest hacking hack-the-box-writeup pass the hash