| Vulnerability | Fix | |---------------|-----| | AS-REP Roasting | Disable "Do not require Kerberos pre-authentication" for all users unless absolutely necessary. | | Weak password | Enforce strong password policy (svc-alfresco's password was weak). | | SeMachineAccountPrivilege for service accounts | Restrict this privilege to only highly trusted accounts. | | GenericWrite over domain | Review ACLs and remove unnecessary write permissions. | | No SPN protection | Monitor for unauthorized SPN modifications. |
Forest is an "Easy" difficulty Windows machine on (HTB) that serves as a fundamental introduction to Active Directory (AD) exploitation . The attack path focuses on reconnaissance, abusing Kerberos pre-authentication, and leveraging nested group permissions for domain-level privilege escalation. 1. Enumeration and Information Gathering
techniques to authenticate as the local administrator and access the