Easy Eighteen - HTB S9 machine Writeup From low MSSQL creds to DA via impersonation, web hash crack, and WinRM. Abuse Bad Successor (dMSA) on Server 2025 to dump NTDS and take Administrator. htb writeups activemachines hackthebox