An OPSEC way to pwn the domain via ESXi
Extract hives and NTDS from a running Windows VM inside a VMWare ESXi
570 words
|
3 minutes
Build your own Kerberos relay DNS entry
How to build your own Kerberos relay DNS entry, for example to exploit the CVE-2025-33073
1082 words
|
5 minutes
Root on ESXi means root on the domain
Extract secrets from a running VM inside a VMWare ESXi
943 words
|
5 minutes
