Categories
Tags
Active Directory AI AI Security CEH CMS Security CompTIA CVEs Cybersecurity CySA+ eAIS eCIR eCPPTv3 eCTHP eJPTv2 Enumeration eWPTv2 HTB Pro Labs Incident Response Investigation KodeKloud Labs Linux Linux PrivEsc Linux+ LLM Malware Analysis Network Forensics Network Security Network+ Networking OSINT Penetration Testing PortSwigger Recon Risk Management Security Architecture Security+ SIEM SOC Sysmon Threat Hunting Toolkit TryHackMe Vulnerability Management Web Application Security Web Security Windows PrivEsc
Exploiting Active Sessions Management Vulnerabilities
Deep dive into session management exploits, from session hijacking to advanced token manipulation and defensive strategies.
699 words
|
3 minutes
Abusing Trusted Domain Controllers: From Privilege Escalation to Domain Domination
Exploiting misconfigurations and vulnerabilities in trusted Domain Controllers to escalate privileges and compromise the entire domain.
607 words
|
3 minutes
The VSSAdmin Dumping Attack: Extracting Sensitive Data via Shadow Copies
Exploiting Windows Volume Shadow Copies to extract deleted files and sensitive data while evading detection.
552 words
|
3 minutes
Exploiting CVE-2021-42278 & CVE-2021-42287 – From User to Domain Admin
Simulating a real-world privilege escalation attack using CVE-2021-42278 and CVE-2021-42287 in Active Directory to gain Domain Admin access from a low-privileged user
345 words
|
2 minutes
Abusing Sudo Binaries for Privilege Escalation
Exploiting Linux sudo misconfigurations to escalate privileges from low-level user to root access
531 words
|
3 minutes
Abusing Scheduled Tasks: From Privilege Escalation to Full System Compromise
Deep dive into abusing scheduled tasks and cron jobs for privilege escalation, persistence, and system compromise across Windows and Linux environments.
1590 words
|
8 minutes
Exploiting CVE-2020-1472 Zerologon: Full Domain Compromise in 3 Commands
An in‑depth walkthrough of CVE‑2020‑1472 (Zerologon), showing how attackers can achieve full Active Directory compromise in just three commands.
1097 words
|
5 minutes
Exploiting CVE-2021-26414 PetitPotam, ADCS, and Domain Compromise
A deep dive into the CVE-2021-26414 exploit chain: PetitPotam, NTLM relay attacks, and ADCS misconfigurations for privilege escalation.
874 words
|
4 minutes
