https://domainsecurity.agency/tags/asreproast/Recent content in Asreproast on Domain SecurityHugoenThu, 10 Sep 2026 00:00:00 +0000https://domainsecurity.agency/posts/htb-sauna/Thu, 10 Sep 2026 00:00:00 +0000https://domainsecurity.agency/posts/htb-sauna/A retired easy Windows box where the whole chain grows out of a corporate website: employee names become usernames, one account has Kerberos pre-authentication disabled, and an autologon password in the registry leads to a DCSync and full domain compromise.