XSS-BoF-DomainAdmin

From Poor XSS to Domain Admin: How I Took Over an Admin Panel, Exploited a BoF on a Vulnerable Server, and Leveraged GPO Misconfigurations to Own the Domain.