Attack Paths

Misconfigured AWS Role Enables Cloud Initial Access

Pervasive CISA Known Exploited Vulnerability Enables Initial Access

A NodeZero autonomous attack that leveraged two weaknesses to achieve domain compromise in 33 minutes, 9 seconds.

Active Directory Analytics Solution Enables Domain Compromise

Combining Compromised Credentials Enables Domain Takeover

Low-Level Vulnerability Leads to Domain Compromise

Low-Level Vulnerability Leads to Domain Compromise

NodeZero compromised HTB’s Mirai machine by using default SSH creds for user pi, then escalated to root via unrestricted sudo access—gaining full control.

The Jerry machine from the Hack The Box platform nicely illustrates the danger of weak and default credentials.

NodeZero compromises the "Active" machine on Hack The Box by chaining classic Active Directory vulnerabilities: GPP password exposure, Kerberoasting, and CVE-2020-1472 (ZeroLogon). This advanced walkthrough builds on earlier feedback and demonstrates multiple escalation paths to Domain Admin.