Status
ISOLATED LAB
Phase
03_INITIAL_ACCESS
Egress
BLOCKED
?
Create Snapshot
Resume Session
APPRENTICESHIP // W7
Controlled Weakening
Introduce documented misconfigurations to make the lab attackable.
Set Current
Objectives
01
Add a Kerberoastable service account with a weak password.
02
Grant an unnecessary DACL on the Domain Admins group.
03
Leave a local admin credential in a GPO Preference file.
Hosts in play
DC01.LAB
FS01.LAB
WIN01.LAB
Checklist
svc_web created with SPN and 8-char dictionary password.
GenericAll granted to a low-priv user on a test group.
cpassword-style secret placed in a scratch GPP xml (lab-only).
Snapshot: weakened-baseline. This is the starting point for Ops.