Active Directory boxes
5 boxesAccessAD
Enumeration across 53/domain, 80/http, 88/kerberos-sec, 135/msrpc, 139/netbios-ssn. Foothold to root using evil-winrm, kerberoasting, linpeas.
53/domain80/http88/kerberos-sec135/msrpc
HeistAD
Enumeration across 53/domain, 135/msrpc, 139/netbios-ssn, 389/ldap, 445/microsoft-ds?. Foothold to root using evil-winrm, kerberoasting, linpeas.
53/domain135/msrpc139/netbios-ssn389/ldap
HokkaidoAD
Enumeration across 53/domain, 80/http, 88/kerberos-sec, 135/msrpc, 139/netbios-ssn. Foothold to root using evil-winrm, kerberoasting, linpeas.
53/domain80/http88/kerberos-sec135/msrpc
NagoyaAD
Enumeration across 53/domain, 80/http, 88/kerberos-sec, 135/msrpc, 139/netbios-ssn. Foothold to root using evil-winrm, kerberoasting, linpeas.
53/domain80/http88/kerberos-sec135/msrpc
VaultAD
Enumeration across 53/domain, 88/kerberos-sec, 135/msrpc, 139/netbios-ssn, 389/ldap. Foothold to root using evil-winrm, kerberoasting, linpeas.
53/domain88/kerberos-sec135/msrpc139/netbios-ssn