Exploring how to leverage runas.exe with /netonly flag for Active Directory credential injection without interactive login

A deep dive into the CVE-2021-26414 exploit chain: PetitPotam, NTLM relay attacks, and ADCS misconfigurations for privilege escalation.

Deep dive into PrintNightmare vulnerability exploitation from local privilege escalation to domain admin compromise

Deep dive into CVE-2022-26923 exploitation of misconfigured ADCS Web Enrollment templates, from low-privileged certificate requests to Domain Admin impersonation.

An in-depth review of the APTLabs - Level 4 Red Team Operator challenge.

An in-depth review of Hack The Box Dante Pro Lab - enterprise-grade penetration testing environment.

An in-depth review of the RastaLabs advanced Red Team simulation environment.

An in-depth review of the P.O.O - Level 1 Red Team Operator lab.