DarkZero - HTB Machine Writeup

Difficulty: Hard | OS: Windows | Status: Completed

DarkZero presents a sophisticated Active Directory environment with two separate domains connected via trust relationships. The attack chain involves exploiting MSSQL linked server misconfigurations, pivoting into an internal network using Ligolo-ng, escalating privileges through a kernel exploit, and finally capturing Kerberos tickets to compromise the domain controller.

Tags: MSSQL Linked Server, Internal Network Pivoting, Kerberos Credential Theft