// Deep Dives

HTB-Blackfield: From SMB Enumeration to Memory Forensics, Crafting a Lethal Exploit Chain to the Domain Controller

August 1, 2026 · mirrorspeed@mirrorquant.com · 2 min read · 3 views

HTB-Blackfield：从 SMB 枚举到内存取证，构建通往域控的致命漏洞链

Release Date: 1 8 月, 2026 7:14 上午
Campaign: MirrorSpeed EN
Source Site: 先知安全技术社区

Summary

本文详细记录了对Hack The Box靶机Blackfield的完整渗透过程。攻击者从基础的Nmap端口扫描起步，通过SMB共享枚举提取潜在用户名，结合AS-REP Roasting攻破未启用预认证的support账户。借助BloodHound分析域内关系，利用ForceChangePassword权限接管audit2020账户，进而访问到存有LSASS进程内存转储的forensic共享。通过P

Author:

{authorlink}

Original Article: Read Full Post

Read more tech without borders — MirrorSpeed VPNFast mirror acceleration, encrypted privacy, global nodes for stable access to overseas resources.
Get MirrorSpeed