Just finished HTB Forest and published a beginner-friendly walkthrough as part of my WhyWriteUps series — where I explain not just the commands but why each step works.

The box covers a quite interesting array of techniques: LDAP Anonymous Bind, AS-REP Roasting and Abusing Exchange Windows Permissions group membership.

The write-up is available on both Medium and GitHub Pages Feedback welcome, especially from other CPTS preppers!