Privilege Escalation
Privilege Escalation can fall under multiple categories: exploitation, post-exploitation, post-exploitation info gathering, and lateral_movement. Overall, the idea is that we already have one...
Password Attacks
Windows Password Attacks Registry Hives - HKLM\SAM - hashes for local user accounts - HKLM\SYSTEM - system boot key req'd to decrypt SAM database - HKLM\SECURITY - sensitive info used by LSA,...
Sun 05 July 2026
exploitation
Active Directory Exploitation
Username Harvesting $ kerbrute userenum --dc 10.129.201.57 --domain victim.local names.txt Password Harvesting It's possible to create a show copy of the C drive and then pull the ntds.dit from...
Wed 08 July 2026
exploitation
Active Directory Enumeration
Overview Enterprise environments tend to use active directory to manage the large number of users, devices and group policy across an organization. Misconfigurations inside of Active Directory can...
Sun 05 July 2026
information_gathering
Troubleshooting
MTU Blackholes All networks have a Maximum Transmission Unit - the largest packet that it can carry. When data is sent over multiple hops, each hop may have a different MTU. Normally, routers send...
Wed 17 June 2026
information_gathering