grep -l "Active-Directory" ./machines [5] sorted: date ▼

namediffosdatetags

DanglingTree medium windows 2026-08-08not yet retired

Checkpoint medium windows 2026-06-13not yet retired

Overwatch medium windows 2026-01-24 Windows AD DC with anonymous SMB share leaking .NET app credentials, MSSQL linked server DNS poisoning for credential capture, and WCF SOAP service command injection for SYSTEM access. active directory·mssql·wcf·command injection·dns poisoning·linked server·+1 Baby easy windows 2025-11-18 LDAP anonymous bind leaks an initial password in a user description; the target user (Caroline.Robinson) has STATUS_PASSWORD_MUST_CHANGE set, allowing password reset via SAMR; Backup Operators group membership enables direct flag read via FILE_OPEN_FOR_BACKUP_INTENT over SMB. active-directory·ldap·password-must-change·backup-operators·sebackupprivilege·windows-server-2022 Eighteen easy windows 2025-11-15 Windows Server 2025 DC with MSSQL impersonation leading to credential extraction, password spray for WinRM access, and BadSuccessor dMSA privilege escalation to Domain Admin. mssql·sql impersonation·pbkdf2·dmsa·badsuccessor·active directory·+1

no machines match that filter