Hack The Box - Sauna Ghostbyt3 • July 19, 2020 • HackTheBox • 6 min readSauna is an easy AD machine, getting initial is by gathering usernames from the web and doing AS-REP Roasting, we can get a user’s hash. And winPEAS reveals svc_loanmgr’s password in plain …
