HTB Active Writeup — Kerberoasting & GPP Passwords (2026)

My first AD box ever. Null session on SMB → GPP password in SYSVOL → Kerberoasting the Administrator → Domain Admin.

March 24, 2026 · 2 min