Attacktive Directory

Attacktive Directory - tryhackme retired machine walkthrough.

Approach

Enumerated AD environment using BloodHound

Identified Kerberoastable service accounts

Extracted TGS tickets and cracked offline with hashcat

Used cracked credentials for lateral movement

Abused delegation rights for domain escalation

Loading writeup from GitHub...