Archives

2026  2

June  1

AI-Assisted Pentesting: Where LLMs Help and Where They Fail

2026-06-09 · 4 min · 738 words · lcz

January  1

Kerberos Delegation Abuse: Unconstrained, Constrained, and RBCD

2026-01-20 · 4 min · 743 words · lcz

2025  2

November  1

CI/CD Pipeline Attacks: Hunting Secrets in GitHub Actions

2025-11-28 · 4 min · 695 words · lcz

August  1

Building a Home Detection Lab with Sysmon, Zeek, and Sigma

2025-08-11 · 4 min · 643 words · lcz

2024  4

December  1

Active Directory Certificate Services: ESC1 Through ESC8 in Practice

2024-12-18 · 4 min · 659 words · lcz

November  1

SSRF to Cloud Metadata: Stealing IMDS Credentials

2024-11-19 · 3 min · 561 words · lcz

July  1

Password Cracking at Scale: Hashcat Modes, Rules, and Masks

2024-07-30 · 3 min · 592 words · lcz

April  1

XZ Utils Backdoor (CVE-2024-3094): A Supply Chain Post-Mortem

2024-04-05 · 4 min · 665 words · lcz

2023  3

October  1

EDR Telemetry: What Your Defenses Actually See

2023-10-27 · 3 min · 635 words · lcz

June  1

MOVEit Transfer (CVE-2023-34362): From SQL Injection to Web Shell

2023-06-05 · 3 min · 605 words · lcz

February  1

Enumerating Azure AD with ROADtools and AzureHound

2023-02-18 · 3 min · 545 words · lcz

2022  3

November  1

Container Escapes: From Docker Socket Exposure to Host Compromise

2022-11-25 · 3 min · 513 words · lcz

August  1

NTLM Relay Attacks: Coercion, Poisoning, and Defenses

2022-08-14 · 3 min · 530 words · lcz

March  1

Spring4Shell (CVE-2022-22965): A Practical Exploitation Walkthrough

2022-03-30 · 3 min · 492 words · lcz

2021  3

December  1

Log4Shell (CVE-2021-44228): Exploitation, Detection, and Mitigation

2021-12-15 · 3 min · 505 words · lcz

July  1

BloodHound and SharpHound: Mapping Active Directory Attack Paths

2021-07-22 · 3 min · 517 words · lcz

March  1

ProxyLogon (CVE-2021-26855): Dissecting the Exchange SSRF Chain

2021-03-10 · 3 min · 524 words · lcz

2020  3

December  1

Kerberoasting: From SPN Enumeration to Offline Cracking

2020-12-08 · 3 min · 449 words · lcz

September  1

Subdomain Reconnaissance at Scale with Amass, Subfinder, and massdns

2020-09-20 · 3 min · 465 words · lcz

March  1

Building a Home Pentest Lab: VirtualBox, Kali, and Network Segmentation

2020-03-15 · 3 min · 438 words · lcz