XUTS LABS
Academy
OSCP, HTB, Active Directory, red team methodology, attack graph logic, and EXO-powered learning guidance in one interactive knowledge system.
Starter Attack Nodes
Kerberos
ASREP Roast
ASREP roasting abuses AD users with Kerberos pre-authentication disabled. You can request encrypted ASREP material and attempt to crack it offline.
Kerberos
Kerberoast
Kerberoasting targets domain users with SPNs. You request service tickets and crack them offline.
BloodHound Edge
GenericWrite
GenericWrite means you can modify certain attributes on the target AD object.
BloodHound Edge
GenericAll
GenericAll is effectively full control over the target AD object.
Active Directory
Resource-Based Constrained Delegation
RBCD lets a controlled machine account impersonate users to a target computer when msDS-AllowedToActOnBehalfOfOtherIdentity is writable.
Domain Escalation
DCSync
DCSync abuses directory replication rights to request password data from a domain controller.