This Windows box is all about Active Directory (AD) pentesting, featuring AS-REP Roasting, Kerberoasting, and hash cracking . It kicks off with anonymous read access to the IPC$ SMB share, allowing us to enumerate domain users. Then, we dive into AS-REP Roasting, crack the hash, and move on to a Kerberoasting. With some creds in hand, we access another share, find a VB script with hard-coded credentials for a domain admin, and use Evil-WinRM and escalate to Administrator. This is a great way to lean active directory pentesting **For educational purposes only ** Subscribe for more