Windows box without kernel exploit privesc

HTB Content Machines
,
1

Hello, I am looking for HTB boxes where you can privesc through misconfigurations, and without any kernel exploit.
Does anyone have such a list, or recommendation ?

2

Pretty much all of the current live machines meet that criteria

3

For the linux boxes I do agree, but is it true for windows boxes too ? I often struggle to find misconfigurations leading to privesc, and every writeups are full of kernel exploits and/or MSF.

4

I have done 90% of the current windows machines and have never used a kernel exploit or metasploit. Maybe you have a different definition of kernel exploit…

5

Ok, I have to try harder then :slight_smile: Thanks !

6

VbScrub will make videos about active directory
you can also find documentation here (thanks minatotw):https://blog.harmj0y.net/