Trophies of the long nights
LAPS misconfiguration leading to admin access in AD. Writable SMB share with .ps1 abused for reverse shell, then SeMachineAccountPrivilege + LAPS reset to land Administrator.
Read ✧Node.js insecure deserialization via crafted cookie for RCE, followed by privilege escalation through sudo npm without password using a GTFOBins preinstall trick.
Read ✧Curabitur sodales ligula in libero. Sed dignissim lacinia nunc. Curabitur tortor. Pellentesque nibh. Aenean quam. In scelerisque sem at dolor.
Read ✧