ESC8 3 NTLM Relay to AD CS: The ESC8 Attack Explained Aug 25, 2026 AD CS Beyond ESC1: ESC2 Through ESC8 Explained Aug 4, 2026 Hack The Box VulnCicada Writeup Nov 21, 2025