We covered HackTheBox Reel machine which is part of pwn with Metasploit track. We demonstrated CVE-2017-0199 that is related to Microsoft Office and performed privilege escalation on Active Directory through different methods including Powershell runas, WriteOwner and WriteDACL over objects. This was part of HackTheBox Reel
Windows Active Directory Penetration Testing Study Notes
Reel is medium to hard difficulty machine, which requires a client-side attack to bypass the perimeter, and highlights a technique for gaining privileges in an Active Directory environment.
Video Walkthrough
Show Comments
