Active

Verified writeups for the Active machine of Hack The Box

Active

$ tldr GPP cpassword → Kerberoasting → DA

·	·
Operating system	Windows
Difficulty	Easy
Vector	Active Directory
IP	10.10.10.100
Retirement date	2018-07-28
Skills	SMB Enumeration Abusing GPP Passwords Decrypting GPP Passwords - gpp-decrypt Kerberoasting Attack (GetUserSPNs.py) [Privilege Escalation]

Writeups

Language	Author	Format	Link
🇪🇸 ES	S4vitar	Vídeo	Open
🇪🇸 ES	El Pingüino de Mario	Vídeo	Open
🇬🇧 EN	0xdf	Texto	Open
🇬🇧 EN	IppSec	Vídeo	Open

Skill resources

Curated documentation for each technique listed in the Skills column above. Sources: HackTricks, GTFOBins, PortSwigger, etc.

Skill	Source	Link
Kerberoasting	HackTricks	Open
SMB (139/445)	HackTricks	Open
Group Policy Preferences (GPP)	HackTricks	Open

Related skills worth mastering

Active Directory · AS-REP Roasting · DCSync · BloodHound · EternalBlue (MS17-010) · MS08-067 (NetAPI)

If you liked this machine, try

• Search — Windows, Hard
• Cascade — Windows, Medium
• Sizzle — Windows, Insane
• Heist — Windows, Easy
• Resolute — Windows, Medium

---

Comments & tips

Did the official writeup not work? Found a smarter trick? Share it here — comments live in GitHub Discussions.

Last updated: 2026-06-07