Garfield HackTheBox Writeup- Hard Windows Active Directory Machine Walkthrough

HTB Garfield Active Machine: ACL Abuse, scriptPath Logon Script Execution, RODC Pivot, RBCD, and RODC Golden Ticket + KeyList Attack to Domain Admin

April 6, 2026 • views • 16 min read • 1,730 words

By

Havoc

hackthebox 20 htb 24 garfield windows 6 active-directory 4 rodc kerberos 5 kerberos-abuse 2 acl-abuse scriptpath logon-script rbcd 3 resource-based-constrained-delegation golden-ticket keylist-attack hackthebox-writeup 5 htb-writeup 5 machine-writeup 4 active-machine 4 hard-difficulty 2 ctf 17 penetration-testing 8 ethical-hacking 8 privilege-escalation 11 lateral-movement 4 enumeration 7 exploitation 5 red-team 6 offensive-security 5 infosec 9 cybersecurity 13 hacking 6 pentesting 13 bloodyad 2 evil-winrm 2 impacket 2 mimikatz rubeus ligolo powerview 2 netexec 2 nxc 3 winrm 2 smb 4 ldap 3 domain-controller ticket-forgery pass-the-ticket ntds-dump windows-server windows-privilege-escalation 3 tier1-admin machine-account krbtgt kerberos-ticket domain-admin