P.O.O – HTB Pro Lab (Teaser)

Status: ✅ Completed
Platform: Hack The Box – Pro Lab
Write-up: Redacted until/unless HTB allows public solutions (Pro Labs stay secret).

🧭 Overview

P.O.O leans into Windows internals: MSSQL execution, token impersonation (potato family), and no-nonsense AD escalation without over-engineering.

🧪 What I Can Share (No Spoilers)

• xp_cmdshell/mssqlexec for initial code-exec
• SYSTEM via COM/RPC token abuse (potato)
• AD pathing with minimal touch
• Proof collection without noisy payloads

🧠 Takeaways

• When in doubt, use cmd /c and built-in tools
• Architecture mismatches are common—verify binaries
• Least-noise ops → fastest route to objective

🖼️ Proofs

POO: pwned.

HTB Pro Lab: P.O.O — Certificate of Completion

📌 Notes

No walkthrough here by design. If HTB ever green-lights public write-ups, I’ll publish a full breakdown with proper defensive countermeasures.

Author: inkedqt • Site: https://inksec.io