HTB Checkpoint Complete Writeup - AD Recycle Bin Abuse, Malicious VSIX Supply Chain, BadSuccessor dMSA PrivEsc & NTDS.dit Extraction from VM Backup

A comprehensive penetration testing guide covering Active Directory Recycle Bin object restoration, AS-REP roasting, malicious VS Code extension deployment via a scheduled task, BadSuccessor privilege escalation through dMSA abuse on Windows Server 2025, and offline NTDS.dit hash extraction from a VHDX backup to achieve full domain compromise.

June 14, 2026 • views • 27 min read • 2,649 words

By

Havoc

hackthebox 27 htb 31 season11 5 windows 8 active-directory 7 ad-recycle-bin as-rep-roasting vsix vscode-extension supply-chain badsuccessor kerberosting dmsa windows-server-2025 ntds-dit vhdx CVE-2025-53779 pass-the-hash privilege-escalation 18 bloodyad 5 password-reuse medium-difficulty 8 season11 5 domain-controller 4