bericontraster
Phantom - Cover Image

Phantom — Vulnlab Full Walkthrough (TjNull list)

This writeup covers a comprehensive, multi-step penetration testing assessment targeting a complex enterprise network. The attack path demonstrates how minor initial oversights—such as unauthenticated network shares and weak password policies—can chain together to allow a complete takeover of an Active Directory domain. The compromise lifecycle moves from basic SMB enumeration and password spraying to offline cryptographic cracking and advanced Resource-Based Constrained Delegation (RBCD) exploitation.