<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>z1rov</title><link>https://www.zirov.net</link><description>Security research and community updates</description><item><title>BabyTwo HTB</title><link>https://www.zirov.net/writeups/babytwo-htb.html</link><guid>https://www.zirov.net/writeups/babytwo-htb.html</guid><description>BabyTwo is a Windows Active Directory box where guest SMB access leaks usernames, password-spraying grants a foothold, and a writable SYSVOL logon script delivers a reverse shell, leading through ACL and GPO abuse to a full NTDS dump and domain compromise.</description></item></channel></rss>