Cicada HackTheBox Writeup
An Active Directory journey from user enumeration to domain admin via backup privilege abuse

An Active Directory journey from user enumeration to domain admin via backup privilege abuse

Overview CVE-2025-21298 is a critical vulnerability in Windows Object Linking and Embedding (OLE) technology, which enables remote code execution (RCE) with a CVSS severity score of 9.8. OLE is a proprietary Microsoft technology that allows embedding...
