Home

Search ...

Ask why. Learn how.

Its all about learning new things and figuring out how systems works.

Web Exploitation

Cross-Site Scripting (XSS)
SQL Injection
Server-Side Request Forgery
Server-Side Template Injection
OAuth Security

Windows Security

Active Directory Certificate Services
Resource-Based Constrained Delegation
DCSync Attack
Local Administrator Password Solution
Kerberos Attacks

Penetration Testing

Network Reconnaissance
Credential Hunting
System Enumeration
Mimikatz Commands
BloodHound Analysis

Scripts & Tools

JWT Token Creator
Forward Shell Script
LDAP Data Exfiltration
Quick Setup Ligolo
PBKDF2 Hash Cracking

Hack the Box Medium - Breach

Breach is a medium difficulty Windows machine focussing on Active Directory
Read more

Hack the Box Hard - Scepter

Scepter is a hard difficulty Windows machine focussing on Active Directory
Read more

Havoc SSRF chained RCE

Chaining SSRF using websockets to get remote code execution.
Read more