https://book.llcczz.org/categories/pentesting/Recent content in Pentesting on lcz's BlogHugoen-USTue, 09 Jun 2026 00:00:00 +0000https://book.llcczz.org/posts/ai-assisted-pentesting/Tue, 09 Jun 2026 00:00:00 +0000https://book.llcczz.org/posts/ai-assisted-pentesting/After a couple of years of using language models in real engagements, a candid assessment of the tasks they are genuinely good at and the ones they quietly make worse.https://book.llcczz.org/posts/cicd-github-actions-secrets/Fri, 28 Nov 2025 00:00:00 +0000https://book.llcczz.org/posts/cicd-github-actions-secrets/Build pipelines hold credentials to everything, run code from untrusted contributors, and are rarely in scope. That combination is why they get compromised.https://book.llcczz.org/posts/ssrf-cloud-metadata-imds/Tue, 19 Nov 2024 00:00:00 +0000https://book.llcczz.org/posts/ssrf-cloud-metadata-imds/Why a server-side request forgery in a cloud workload is usually a full credential compromise, and how the three major providers differ.https://book.llcczz.org/posts/hashcat-password-cracking-workflows/Tue, 30 Jul 2024 00:00:00 +0000https://book.llcczz.org/posts/hashcat-password-cracking-workflows/How to pick the right attack mode for a given hash set, and why the wordlist matters far less than the rule file.https://book.llcczz.org/posts/container-escape-techniques/Fri, 25 Nov 2022 00:00:00 +0000https://book.llcczz.org/posts/container-escape-techniques/The misconfigurations and kernel issues that turn ‘we run containers’ into ’the container is a perimeter you don’t have’.https://book.llcczz.org/posts/kerberoasting-spn-enumeration/Tue, 08 Dec 2020 00:00:00 +0000https://book.llcczz.org/posts/kerberoasting-spn-enumeration/Why requesting service tickets for accounts with SPNs is still one of the most reliable ways to escalate from a domain user to plaintext credentials.https://book.llcczz.org/posts/subdomain-recon-amass-subfinder/Sun, 20 Sep 2020 00:00:00 +0000https://book.llcczz.org/posts/subdomain-recon-amass-subfinder/A practical pipeline for building and maintaining an accurate external asset inventory before you touch a single target.https://book.llcczz.org/posts/home-pentest-lab-virtualbox-kali/Sun, 15 Mar 2020 00:00:00 +0000https://book.llcczz.org/posts/home-pentest-lab-virtualbox-kali/How I set up a repeatable home lab for practising internal network attacks without touching anything I don’t own.