Active Directory - Tag - My Personal Bloghttps://f0dh1l.github.io/blog/tags/active-directory/Active Directory - Tag - My Personal BlogHugo -- gohugo.ioenbenhibafodhil@gmail.com (F0DH1L)benhibafodhil@gmail.com (F0DH1L)2025 F0DH1LTue, 10 Mar 2026 15:58:49 +0100My CRTP Experience: Preparation, Lab, and Exam Reviewhttps://f0dh1l.github.io/blog/posts/crtp_review/Tue, 10 Mar 2026 15:58:49 +0100benhibafodhil@gmail.com (F0DH1L)https://f0dh1l.github.io/blog/posts/crtp_review/CRTP Certified

I’m officially CRTP certified!

https://www.credential.net/9b36a171-479b-4885-b1c1-792528a07269#acc.ZcH7lUSE

What Is CRTP?

]]>HTB Machine Writeup "TombWatcher"https://f0dh1l.github.io/blog/posts/htb_tombwatcher/Thu, 23 Oct 2025 14:01:34 +0100benhibafodhil@gmail.com (F0DH1L)https://f0dh1l.github.io/blog/posts/htb_tombwatcher/HTB Machine: TombWatcher - Writeup

Machine Information

  • Difficulty: Medium
  • Key Concepts: Kerberoasting, LDAP Enumeration, BloodHound Analysis, Active Directory Privilege Escalation, Deleted Object Recovery, ADCS ESC15 Vulnerability

Overview

TombWatcher is a Medium Windows machine from HackTheBox that demonstrates a complex Active Directory attack path involving Kerberoasting, group membership manipulation, GMSA password extraction, ownership changes, recovering and restoring deleted AD objects, and ultimately exploiting an ADCS vulnerability (ESC15) to achieve domain administrator privileges.

]]>