<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0"
     xmlns:atom="http://www.w3.org/2005/Atom"
     xmlns:media="http://search.yahoo.com/mrss/">
  <channel>
    <title>HTB: Garfield on Arbaaz breaks stuff | Incident Response, Threat Modeling, offensive security, CTF writeups, Security Projects, Certifications, Log analysis, SIEM</title>
    <link>https://arbaazjamadar.com/tags/htb-garfield/</link><description>Recent content in HTB: Garfield  on Arbaaz breaks stuff | Incident Response, Threat Modeling, offensive security, CTF writeups, Security Projects, Certifications, Log analysis, SIEM</description>

    <generator>Hugo -- gohugo.io</generator>
    <language>en</language><managingEditor>reachout@arbaazjamadar.com (Arbaaz Jamadar)</managingEditor>
      <webMaster>reachout@arbaazjamadar.com (Arbaaz Jamadar)</webMaster><copyright>©2025 arbaazjamadar.com</copyright><lastBuildDate>Mon, 06 Apr 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://arbaazjamadar.com/tags/htb-garfield/rss.xml" rel="self" type="application/rss+xml" /><item>
        <title>HackTheBox: Garfield</title>
        <link>https://arbaazjamadar.com/htb/hackthebox-garfield/</link>
        <pubDate>Mon, 06 Apr 2026 00:00:00 +0000</pubDate>
        <author>reachout@arbaazjamadar.com (Arbaaz Jamadar)</author>
        <guid isPermaLink="true">https://arbaazjamadar.com/htb/hackthebox-garfield/</guid>

        <description>Initial Foothold via batch script, abusing ForceChangePassword privilege to move laterally. Ligolo to pivot to RODC, Domain compromise via RODC Keylist Abuse.</description><category domain="tags">Security</category><category domain="tags">Security Writeup</category><category domain="tags">Cloud Security</category><category domain="tags">HTB writeup</category><category domain="tags">HTB Garfield writeup</category><category domain="tags">Garfield Writeup</category><category domain="tags">Misconfigurations</category><category domain="tags">security writeup</category><category domain="tags">HTB</category><category domain="tags">Garfield</category><category domain="tags">Windows</category><category domain="tags">Active Directory</category><category domain="tags">Golden Ticket</category><category domain="tags">rbcd</category><category domain="tags">rbcd abuse</category><category domain="tags">rodc</category><category domain="tags">ForceChangePassword</category><category domain="tags">RODC KeyList</category><category domain="tags">Keylist attack</category><category domain="tags">Lateral Pivoting</category><category domain="tags">HTB</category><category domain="tags">HackTheBox</category><category domain="tags">HackTheBox: Garfield</category><category domain="tags">HTB: Garfield</category><category domain="tags">Information Gathering</category><category domain="tags">Initial Enumeration</category><category domain="tags">msDS-RevealOnDemandGroup</category><category domain="tags">Privilege Escalation</category><category domain="tags">BloodyAD</category><category domain="tags">BloodHound</category><category domain="tags">Privilege Abuse</category><category domain="categories">Box Writeups</category><category domain="categories">Cloud Security</category><category domain="categories">Network Security</category><category domain="categories">Web Security</category><category domain="categories">Browsed Security</category><category domain="categories">API Security</category></item>
  </channel>
</rss>
