A VulnHub CTF challenge write-up.

Extracting credentials using built in commands.

Kerbroasting to extract service account credentials.

A demonstraton of named pipe communication using Meterpreter.

Using the NetSessionEnum API to find remotely logged in users.

Using BloodHound to exploit Active Directory based networks.