/ tags/ GPO

# TheFrizz

Hack-The-Box 67 / 72
11 min read

Windows Easy machine - TheFrizz.

HTB Active Directory Microsoft's directory service for managing users, computers, and permissions across a Windows domain. Windows RCE Remote Code Execution — the ability to run arbitrary commands on a target system remotely. Sudo Linux command for running as another user — misconfigured sudo rules are a common privilege escalation path. SSH Secure Shell — encrypted remote login, targeted via key theft, brute force, or misconfigured access. Nmap A network scanner used to enumerate open ports, services, and versions on a target. CVE A publicly catalogued, known vulnerability with a unique identifier (Common Vulnerabilities and Exposures). DNS The Domain Name System — translates hostnames to IPs; often leaks subdomains and internal naming during recon. PHP GPO Group Policy Object — a Windows domain-wide configuration mechanism, abusable for code execution across all machines. SMB Server Message Block — Windows file-sharing protocol, frequently abused for enumeration and lateral movement. BloodHound A tool that maps Active Directory trust relationships as a graph to reveal hidden attack paths to Domain Admin. LDAP Lightweight Directory Access Protocol — used to query Active Directory; often vulnerable to injection or anonymous binds. Password Spraying Trying one common password against many usernames to avoid account lockouts. LFI Local File Inclusion — a web vulnerability letting an attacker read arbitrary files on the server. MySQL
Read

# Access

Hack-The-Box 6 / 72
3 min read

Windows Easy machine - Access.

HTB Windows Nmap A network scanner used to enumerate open ports, services, and versions on a target. NTLM Windows' legacy authentication protocol — vulnerable to relay and pass-the-hash attacks. GPO Group Policy Object — a Windows domain-wide configuration mechanism, abusable for code execution across all machines. FTP File Transfer Protocol — frequently misconfigured with anonymous access, exposing sensitive files. Telnet An unencrypted remote login protocol — credentials and traffic are sent in cleartext.
Read