Pwning Lanfeust's Active Directory18 September 2026·28 minsCTF Active Directory CTF Active Directory Netexec Adcs Kerberos Wsus Adidns Dpapi Esc7 Writeupmpgn’s Expedition CTF, a Lanfeust themed Active Directory lab across two domains. 12/12 flags plus both optional detours in 8h50. Every chain, every command, every dead end.