HTB Medium Windows machine: a domain account that can write to a deleted AD object, a restored user with write access to a VS Code extensions share, and a malicious .vsix that returns a shell as ryan.brooks
Youssef Kessentini
Security researcher & CTF player. Escalating privileges one machine at a time.
