Yash Gulati·2h agoActive Directory from Zero: What I Had to Learn Before I Could Break AnythingI’d used Windows my whole life with a single account, logging straight into whatever I wanted. So when I started setting up Organizational…
Kazem Mortazavi·1d agoITDR Explained: Detecting Attackers Who Sign In With Valid CredentialsAn attacker who holds a system administrator’s password does not need to break through any wall; they simply sign in. To the firewall, the…
Jacob Cicchino·1d agoExploiting Resource-Based Constrained Delegation (RBCD) to Escalate Privileges in Active DirectoryIn this walkthrough, I’ll demonstrate how Resource Based Constrained Delegation (RBCD) can be abused to escalate privileges within an…
Huseyin KALKAN·3d agoProving Grounds: Vault — NTLM Theft and SeRestorePrivilege to SYSTEMWritable anonymous SMB share, a .lnk bait file, a cracked Net-NTLMv2 hash and a Utilman.exe swap to SYSTEM on an OffSec PG Practice Domain C
Jacob Cicchino·3d agoHacking MSSQL From an MSSQL Account to NT AUTHORITY\SYSTEMIn this walkthrough, I’ll show how I went from having access to an MSSQL account to gaining NT AUTHORITY\SYSTEM on the target machine.
Trev·3d agoI Built Gotham City’s Domain Controller on Windows Server 2025A domain controller that installs isn’t the same as a domain controller that works. Most tutorials skip the network and stop at the reboot…
Kalash Kundaliya·4d agoKerberos Port 88: Why Hackers Love This One Port (Explained Simply)If you work in cybersecurity, you’ll hear about “port 88” a lot when people talk about attacking Windows networks (Active Directory). This…
