skip to content
~/bokkapig
_
hack the box machine writeups
[1]
machines
[2]
refs
[3]
cheatsheet
[4]
search
[5]
pdf-inject
← cd ../tags
grep -l "Backup-Operators" ./machines
[1]
sorted: date ▼
$ grep
/
difficulty
easy
clear ✕
name
diff
os
date
tags
Baby
easy
windows
2025-11-18
LDAP anonymous bind leaks an initial password in a user description; the target user (Caroline.Robinson) has STATUS_PASSWORD_MUST_CHANGE set, allowing password reset via SAMR; Backup Operators group membership enables direct flag read via FILE_OPEN_FOR_BACKUP_INTENT over SMB.
active-directory
·
ldap
·
password-must-change
·
backup-operators
·
sebackupprivilege
·
windows-server-2022
no machines match that filter
