// ctflover.gitlab.io
HACK
STUFF.
writeups · red team notes · AD attack chains
by @ctflover — breaking things so you don't have to figure it out alone.
ACTIVE DIRECTORY RED TEAM MALDEV HTB CTF SHERLOCK
filter:
// posts
APR 19, 2026 Hard
HTB: Redelegate
FTPKEEPASS2JOHN ACL ABUSE SeEnableDelegationPrivilege DELEGATION
read writeup →
APR 11, 2026 Hard
HTB: DarkZero
MSSQLSESERVICELOGONRIGHT SEIMPERSONATE DELEGATION TRUST
read writeup →
APR 04, 2026 Maldev
MALDEV: Beginner
MESSAGE_BOXREAD_PROCESS PROCESS_INJECTIONDLL_INJECION
read writeup →
APR 02, 2026 INSANE
HTB: Rebound
AS-REP ROASTKERBEROAST SHADOWCREDSRBCDDCSYNC
read writeup →
MAR 08, 2026 EASY
HTB: Down
PHPRCEPYTHON CRYPTOMODULE
read writeup →
FEB 05, 2026 MEDIUM
HTB: Monteverde
AZURE ADPASSWORD SPRAYWINRM
read writeup →
JAN 18, 2026 HARD
HTB: Flight
LFINTLM HASHRUBEUSDCSYNC
read writeup →
DEC 29, 2025 MEDIUM
HTB: StreamIO
SQL INJECTIONLFIBLOODHOUNDLAPS
read writeup →
NOV 23, 2025 HARD
HTB: Snoopy
LFIDNSXXECVE-2023-20052
read writeup →
SEP 05, 2025 REVIEW
Zero Point Security: CRTO Review
RED TEAMCOBALT STRIKEAD
read review →
AUG 10, 2025 EASY
HTB: OpenAdmin
OPENNETADMINLATERAL MOVEMENTSUDO
read writeup →
JUL 25, 2025 MEDIUM
HTB: Nocturnal
IDORPHPSQLITECVE-2023-46818
read writeup →
JUN 28, 2025 EASY
HTB: Reset
LOG POISONINGRCERSERVICESTMUX
read writeup →
MAY 18, 2025 EASY
HTB: Data
CVE-2021-43798PATH TRAVERSALGRAFANADOCKER
read writeup →
APR 25, 2025 EASY
HTB: Retro
ADPRE-CREATED COMPUTERPRIVILEGE ESCALATION
read writeup →
MAR 30, 2025 REVIEW
HTB: CPTS Review
CPTSPENTESTCERTIFICATION
read review →
MAR 25, 2024 HARD
HTB: Conceal
IPSECIKEFTPPRIVESC
read writeup →
MAR 14, 2024 HARD
HTB: Drive
IDORSQLITEGITEAPRIVESC
read writeup →
MAR 12, 2024 INSANE
HTB: Pikaboo
LFINGINXPERLLDAP
read writeup →
MAR 06, 2024 MEDIUM
HTB: Scrambled
KERBEROSSILVER TICKETMSSQLAD
read writeup →
FEB 29, 2024 MEDIUM
HTB: GIDDY
MSSQLNTLM CAPTUREUNIFIVIDEO
read writeup →
FEB 24, 2024 MEDIUM
HTB: AI
SQLI VIA SPEECHJDWPRCE
read writeup →
FEB 20, 2024 MEDIUM
HTB: Pit
SNMPSEEDDMSCOCKPIT
read writeup →
FEB 13, 2024 MEDIUM
HTB: Timing
LFISOURCE CODE REVIEWGIT
read writeup →
FEB 06, 2024 MEDIUM
HTB: Spooktrol
C2CUSTOM PROTOCOLREVERSE ENGINEERING
read writeup →
FEB 06, 2024 MEDIUM
HTB: Authority
ANSIBLE VAULTADCSPASS THE CERT
read writeup →
JAN 26, 2024 EASY
HTB: Admirer
FTPADMINERPYTHON LIBRARY HIJACK
read writeup →
JAN 24, 2024 MEDIUM
HTB: Interface
DOMPDFCSS INJECTIONSUID
read writeup →
JAN 22, 2024 ENDGAME
HTB Endgame: XEN
ENDGAMEADFULL CHAIN
read writeup →
JAN 19, 2024 ENDGAME
HTB Endgame: P.O.O.
ENDGAMEADMSSQL
read writeup →
JAN 16, 2024 MEDIUM
HTB: Cascade
LDAPVNCAD RECYCLE BIN
read writeup →
JAN 15, 2024 INSANE
HTB: Sizzle
SCF FILEADCSKERBEROASTDCSYNC
read writeup →
JAN 14, 2024 HARD
HTB: Reel
PHISHINGRTFACL ABUSEAD
read writeup →
JAN 13, 2024 MEDIUM
HTB: Resolute
PASSWORD IN DESCRIPTIONDNSADMINSDCSYNC
read writeup →
JAN 12, 2024 HARD
HTB: BlackField
AS-REP ROASTBLOODHOUNDBACKUP OPERATORSDCSYNC
read writeup →
JAN 11, 2024 EASY
HTB: Active
GPP PASSWORDKERBEROASTAD
read writeup →
JAN 10, 2024 EASY
HTB: Forest
AS-REP ROASTEXCHANGE GROUPSDCSYNC
read writeup →
JAN 08, 2024 EASY
HTB: Sau
SSRFMALTRAILSUDO
read writeup →
DEC 30, 2023 MEDIUM
HTB: Jarvis
SQLIPHPMYADMINSUDOSUID
read writeup →
DEC 25, 2023 EASY
HTB: Paper
WORDPRESSROCKET CHATCVE-2019-17671
read writeup →
DEC 21, 2023 MEDIUM
HTB: Undetected
PHPBACKDOORELF ANALYSIS
read writeup →
DEC 17, 2023 SHERLOCK
HTB Sherlock: TickTock
DFIRLOG ANALYSISFORENSICS
read writeup →
DEC 14, 2023 SHERLOCK
HTB Sherlock: Knock Knock With Zeek
DFIRZEEKNETWORK FORENSICS
read writeup →
DEC 12, 2023 MEDIUM
HTB: Noter
JWTFTPMYSQLRCE
read writeup →