Easy
Hack The Box - Active - Writeup
Abusing Group Policy Preferences credentials and Kerberoasting to compromise an Active Directory domain on Hack The Box Active.
Offensive Security Research
Abusing Group Policy Preferences credentials and Kerberoasting to compromise an Active Directory domain on Hack The Box Active.
Abusing exposed SMB shares, MSSQL credentials, NTLM capture, and credential discovery to compromise Querier.