Categories
Tags
101Labs Active Directory AI Abuse AI Agents AI Engineering AI Security AI Systems AI Testing CEH CMS Security CompTIA CVEs Cybersecurity CySA+ DFIR Digital Forensics eAIS eCDFP eCIR eCPPTv3 eCTHP eCTHPv2 eJPTv2 Enumeration eWPTv2 Hack The Box HTB Pro Labs Incident Response Investigation KodeKloud Labs Linux Linux PrivEsc Linux+ LLM LLM Security Malware Analysis Network Forensics Network Security Network+ Networking OSCP OSINT OverTheWire Password Attacks Penetration Testing PortSwigger Privilege Escalation Prompt Injection Recon Risk Management Secure AI Security Security Architecture Security Testing Security+ SIEM SOC Splunk Sysmon Threat Hunting Tool Abuse Toolkit TryHackMe Validation Vulnerability Management Web Application Security Web Security Windows PrivEsc
Golden Ticket & Scheduled Tasks: Domain Persistence Through Kerberos Exploitation
Deep dive into combining Golden Ticket attacks with scheduled tasks for persistent domain compromise, covering Kerberos exploitation, ticket forging, and automated persistence mechanisms
632 words
|
3 minutes
Impersonation Token Attack: Exploiting SE_IMPERSONATE_PRIVILEGE for Privilege Escalation
Deep dive into the Impersonation Token attack technique, from gaining SE_IMPERSONATE_PRIVILEGE to executing commands as a privileged user.
548 words
|
3 minutes
Exploiting SQL Server TRUSTWORTHY Property: From Database Access to sysadmin
Deep dive into TRUSTWORTHY property exploitation, demonstrating how attackers leverage this setting for privilege escalation and full database server compromise
709 words
|
4 minutes
Weaponizing Splunk Universal Forwarder: From Log Collection to System Compromise
Deep dive into exploiting Splunk Universal Forwarder for stealthy data exfiltration, remote code execution, and maintaining persistent access
569 words
|
3 minutes
Exploiting Active Sessions Management Vulnerabilities
Deep dive into session management exploits, from session hijacking to advanced token manipulation and defensive strategies.
699 words
|
3 minutes
Abusing Trusted Domain Controllers: From Privilege Escalation to Domain Domination
Exploiting misconfigurations and vulnerabilities in trusted Domain Controllers to escalate privileges and compromise the entire domain.
607 words
|
3 minutes
The VSSAdmin Dumping Attack: Extracting Sensitive Data via Shadow Copies
Exploiting Windows Volume Shadow Copies to extract deleted files and sensitive data while evading detection.
552 words
|
3 minutes
Exploiting CVE-2021-42278 & CVE-2021-42287 – From User to Domain Admin
Simulating a real-world privilege escalation attack using CVE-2021-42278 and CVE-2021-42287 in Active Directory to gain Domain Admin access from a low-privileged user
345 words
|
2 minutes
