https://www.thaddeuskoenig.com/tags/active-directory/Recent content in Active Directory on Thaddeus KoenigHugoen-US© 2026 Thaddeus KoenigThu, 28 Aug 2025 12:36:31 -0400https://www.thaddeuskoenig.com/blog/20250716/Wed, 16 Jul 2025 11:22:00 -0500https://www.thaddeuskoenig.com/blog/20250716/<h2 id="01-intro">01. Intro<a href="#01-intro" class="post-heading__anchor" aria-hidden="true">#</a> </h2> <p>I was doing the Password Attacks lab in hackthebox academy and I found it pretty interesting so I figured I would redo it and step through how I did it and my thought process to help solidify concepts and because I enjoyed this one, even though it was a bit frustrating initially.</p> <h2 id="02-gathering-initial-info">02. Gathering Initial Info<a href="#02-gathering-initial-info" class="post-heading__anchor" aria-hidden="true">#</a> </h2> <p>To start this engagement we know a couple things. We have a user Betty Jade that works at Nexura LLC. We also have a password for the user <code>&lt;REDACTED&gt;</code> with a reasonable assumption that she reuses passwords. We also have the scope of this engagement with the following devices:</p>