In this article, I step through the process of exploiting a windows machine by enumerating services running on open ports, abusing insecure… — In this article, I step through the process of exploiting a windows machine by enumerating services running on open ports, abusing insecure DNS dynamic updates, and elevating my privileges on the domain controller using PrintSpoofer exploit. …

In this article, I step through the process of exploiting a domain controller by enumerating services running on open ports, abusing a… — In this article, I step through the process of exploiting a domain controller by enumerating services running on open ports, abusing a password reset function on a website, and elevating my privileges on the domain controller using CVE-2020–12772 to gather all the challenge flags. …

In this article, I step through the process of exploiting a domain controller by enumerating RPCbind & NFS, abusing Kerberos, enumerating… — In this article, I step through the process of exploiting a domain controller by enumerating RPCbind & NFS, abusing Kerberos, enumerating SMB and elevating my privileges on the domain controller by exploiting a user belonging to the Backup Operators group. This challenge is available on the TryHackMe platform and is…

In this article, I step through the process of exploiting a domain controller by enumerating services running on open ports and exploiting… — In this article, I step through the process of exploiting a domain controller by enumerating services running on open ports and exploiting Kerberos features, to elevate my privileges. This challenge is available on the TryHackMe platform and is titled “VulnNet Roasted”, created by the user “SkyWaves”.

In this article, I step through the process of exploiting a domain controller by enumerating services running on open ports, abusing… — In this article, I step through the process of exploiting a domain controller by enumerating services running on open ports, abusing Kerberos features, and elevating my privileges on the domain controller to gather all the challenge flags. This challenge is available on the TryHackMe platform and is titled “Attacktive Directory”…

In this article, I learn how to use Open Source Intelligence (OSINT) techniques to identify a number of identifiers and other pieces of… — In this article, I learn how to use Open Source Intelligence (OSINT) techniques to identify a number of identifiers and other pieces of information in order to help catch a hypothetical cybercriminal. This challenge is available on the TryHackMe platform and is titled “Sakura Room”, created by the user “OSINTDojo”.

In this article, I learn how to use Open Source Intelligence (OSINT) techniques and tools to gather information from image or video files… — In this article, I learn how to use Open Source Intelligence (OSINT) techniques and tools to gather information from image or video files. I can then use this information to geolocate and answer context questions based on visual intelligence alone. This challenge is available on the TryHackMe platform and is…

In this article, I learn how to use Open Source Intelligence (OSINT) techniques and tools to gather information about several websites and… — In this article, I learn how to use Open Source Intelligence (OSINT) techniques and tools to gather information about several websites and understand what can be uncovered about a website just by looking at publicly available information. …

I recently took the Certified Threat Hunting Professional Version 2 (eCTHPv2) certification by eLearnSecurity and I decided to share my… — I recently took the Certified Threat Hunting Professional Version 2 (eCTHPv2) certification by eLearnSecurity and I decided to share my experience after passing the exam on my first attempt. For those who are not aware of the eCTHPv2, it is a practical certification on threat hunting and threat identification aimed…