Machine Synopsis

Delegate is a medium-difficulty Windows machine that involves Active Directory attacks. The machine has the guest account enabled, allowing the attacker to read files that contain hard-coded credentials. The credentials allow us to WriteProperty of a user account that is allowed to have WinRM sessions on the Domain Controller. The compromised user has the `SeEnableDelegationPrivilege` privilege assigned, which allows us to modify the `TRUSTED_FOR_DELEGATION` flag for AD objects, enabling us to perform Unconstrained Delegation.