w1zardx (Author) | w1zardx

w1zardx

(/bin/sh)

Penetration Tester (⸝⸝ᴗ﹏ᴗ⸝⸝) ᶻ 𝗓 𐰁

Posts by w1zardx

Fluffy (HackTheBox)

An easy Windows assumed breach scenario leveraging CVE-2025-24071, ACL abuse, and AD CS (ESC16) for privilege escalation.

w w1zardx
December 25, 2025
9 min read

HackTheBox Active Directory ADCS CVE-2025-24071 ESC16 Pass-The-Hash Shadow Credential Attack NTLM Cracking CPTS
VulnCicada (Vulnlab/HackTheBox)

A medium Windows AD machine focusing on AD CS abuse. The path involves extracting credentials from an image and leveraging ESC8 via Kerberos relaying to gain Domain Admin privileges.

w w1zardx
December 24, 2025
7 min read

HackTheBox Active Directory ADCS Kerberos Relay ESC8 VulnLab NFS CPTS