Paths to Power in Active Directory Part 6: ESC8 – The Coerced Crown
Explore the risks of privilege escalation in Active Directory through certificate manipulation, highlighting the ESC6 attack path and its implications for security.
No Hash? No Problem! – ASERepCatcher
Learn how to capture and crack Kerberos authentication traffic with ASRepCatcher, a powerful tool for internal penetration testing and credential interception.
What Is a SIAM and Why Is One Showing Up at Your Office?
Discover how the Secure Ideas Attack Machine (SIAM) simplifies internal penetration testing, ensuring security without the need for onsite consultants.
Paths to Power in Active Directory Part 5: ESC6 – Under a False Sigil
Explore the risks of privilege escalation in Active Directory through certificate manipulation, highlighting the ESC6 attack path and its implications for security.
Encrypting a Flash Drive in Linux using LUKS
Learn how to encrypt a flash drive in Linux using LUKS, ensuring data security against loss or theft with step-by-step instructions for beginners.
Paths to Power in Active Directory Part 4: ESC3 – In The Name of The Crown
Explore how misconfigured Active Directory Certificate Services can lead to privilege escalation through delegated authority, allowing low-privileged users to obtain Domain Admin access.
Paths to Power in Active Directory Part 3: ESC2 – The Seal of Any Purpose
Power in Active Directory, much like power in Westeros, often changes hands not through force, but through misplaced trust.
Paths to Power in Active Directory Part 2: ESC1 – No One, Yet Anyone
Learn how to exploit AD CS misconfigurations for privilege escalation from a low-privileged user to Domain Admin in Active Directory.
Paths to Power in Active Directory Part 1: How AD CS Misconfigurations Become the Keys to the Kingdom
From regular domain user to Domain Admin in minutes. Discover how AD CS misconfigurations create one of Active Directory’s most abusable attack paths.
No Broadcast Traffic? No Problem! – NetExec SMB Slinky Module
Explore how the Slinky SMB module in NetExec can capture NTLM hashes and conduct relay attacks in environments without broadcast traffic.