Retro 671
RETIRED MACHINE
Windows
Easy
Retro
Windows
Easy
4.8
MACHINE RATING517
USER OWNS404
SYSTEM OWNS24/06/2025
RELEASEDMachine Synopsis
`Retro` is an Easy Windows machine that showcases an Active Directory Domain Controller. Through SMB enumeration and pre-created machine account exploitation, we gain access to the system. Through the exploitation of the Active Directory Certificate Service and specifically by using the `ESC1` attack, which involves exploiting certificate templates to impersonate the Administrative user, privilege escalation is achieved.
Machine Matrix
