Valid User (No Password)
Valid User (No Password) techniques and commands for Active Directory security assessment.
Trusts
Trusts techniques and commands for Active Directory security assessment.
SCCM
SCCM techniques and commands for Active Directory security assessment.
Persistence
Persistence techniques and commands for Active Directory security assessment.
Building Windows Executables with GitHub Actions
A comprehensive explanation of how GitHub Actions compiles native Windows executables using hosted Windows runners and official build toolchains
Imagery - HTB
Medium Linux box using blind XSS for admin session theft, LFI to source read, ImageMagick command injection for RCE, pyAesCrypt backup decryption, and Charcol cron abuse for root.
Low access (Privilege escalation)
Low access (Privilege escalation) techniques and commands for Active Directory security assessment.
Previous - HTB
Medium Linux box using Next.js auth middleware bypass, LFI to extract NextAuth credentials, and Terraform provider override abuse for root.