Forest

HTB Content Machines
195

Hey guys, I just rooted Forest, however I have some questions regarding this AD vulnerability.

  1. Is there any requirement (like a certain permission, which is necessary for the user) that I can execute the doge on the VM? Or is it just possible to do this in every Active Directory with AD default configuration.
  2. Only with hint, I got to use a certain python tool together with the doge, to go further and get the juicy data. Is there any indication like “if you see this certain structure in the doge result, then try to use this tool” or is it just like “if you can get the doggy file, then always fire up this python script”.

I would be glad, if somebody could answer. Feel free to PM, instead of comment, if you think it is necessary.

Thanks!