PinnedMaking Diamonds from coal: Expanding Kerberoasting Targets with GenericWriteGenericWrite privilege on an account can open up new AD pentesting possibilities by allowing you to create Kerberoasting targets from…5d ago5d ago
NXC’s PowerShell -X Option: A Stealthy Pentesting TechniqueWhen the PowerShell -X option is used, nxc performs several behind-the-scenes actions to ensure both functionality and stealth. Let’s dig…1d ago1d ago
6 Powerful Things You Can Do with nxc [former crackmapexec]Pentesting tools have come a long way, and nxc (formerly known as CrackMapExec) remains a favorite among cybersecurity professionals. Its…Nov 13Nov 13
OSCP Tip: Downloading Files on Linux When wget, ssh and curl are Missing!So, you’ve compromised a Linux box and need to download a file, but there’s a problem: wget is missing. No big deal, right? Just use curl…Nov 12Nov 12
“Enjoying Your Life Insurance — While Alive? Yes, It’s Technically Possible. Here’s How!”Electronic Death Registration System (EDRS), has modernized how death certificates are managed, verified, and stored. However, this…Nov 7Nov 7
Conquering Active Directory for OSCP+: Essential Techniques and Strategies — Part 2This is the second of a series of short articles written to assist with the Active Directory (AD) portion of the new OSCP+ exam format…Nov 41Nov 41
Going Beyond the Curriculum: Why Comprehensive Teaching Matters in Cybersecurity EducationPEN200, official OSCP curriculum, has been revamped and improved over the years. But I still feel it does not fully prepare the student on…Oct 30Oct 30
Fotocopias de Pasaportes: un Riesgo para el turista que visita ColombiaEn este artículo, exploraré los riesgos ocultos de ciberseguridad detrás de la fotocopia de pasaportes y compartiré consejos para que los…Oct 29Oct 29
VHLVHL is a network pentesting platform usually aimed as an OSCP preparation. It is similar in concept to HTB, although VHL machines have a…Oct 29Oct 29
Password Spraying in Active DirectoryIf you’re working within a Windows environment, DomainPasswordSpray offers a powerful alternative with some unique advantages.Oct 24Oct 24