Daily Writeups
@Daily_Writeups
4.01K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.01K subscribers
Daily Writeups
⤷ Title: The Final Sunset: Microsoft Lays Out the 3-Phase Plan to Kill NTLM After 30 Years
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:48:53 +0000
════════════════════════
⌗ Tags: #Microsoft #Windows #Active Directory Security #cybersecurity news #IAKerb #Kerberos authentication #Local KDC #NTLM deprecation #NTLM relay attack #Pass_the_Hash #Windows 11 24H2 #Windows Server 2025
Penetration Testing Tools
The Final Sunset: Microsoft Lays Out the 3-Phase Plan to Kill NTLM After 30 Years
Microsoft has resolved to finally relegate NTLM to the periphery of its ecosystem, decreeing that in forthcoming Windows
14 views
Daily Writeups
⤷ Title: Kerberos Attacks: Silver Ticket
════════════════════════
𐀪 Author: Hacer Dalkiran
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 11:54:48 GMT
════════════════════════
⌗ Tags: #kerberos #signed #hackthebox_writeup #active_directory_attack #silver_ticket
Medium
Kerberos Attacks: Silver Ticket
Kerberos is designed to make authentication in Active Directory seamless and secure. In practice, however, a single weak service account…
68 views
Daily Writeups
⤷ Title: Beyond the Memory: How LSA Whisperer BOF Bypasses PPL and Credential Guard Without Touching LSASS
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 03:04:12 +0000
════════════════════════
⌗ Tags: #Open Source Tool #BOF #Cloud SSO #Cobalt Strike #Credential Guard #DPAPI #Kerberos #LSA Whisperer #LsaCallAuthenticationPackage #LSASS #Pentesting #PPL #red teaming #SpecterOps #Windows Security
Penetration Testing Tools
Beyond the Memory: How LSA Whisperer BOF Bypasses PPL and Credential Guard Without Touching LSASS
Interact with Kerberos and DPAPI without opening an LSASS handle. LSA Whisperer BOF uses official APIs to bypass PPL and Credential Guard during red teaming.
25 views
Daily Writeups
⤷ Title: CRTP Outside CRTP: Do the Skills Survive in the Wild?
════════════════════════
𐀪 Author: Joshua Goossen
════════════════════════
ⴵ Time: Sat, 28 Feb 2026 17:24:15 GMT
════════════════════════
⌗ Tags: #kerberos #red_team #penetration_testing #bloodhound #crt_p
Medium
CRTP Outside CRTP: Do the Skills Survive in the Wild?
Passing CRTP proves you can execute the path. It does not prove the path exists.
45 views
Daily Writeups
⤷ Title: My write-up Attacktive Directory — TryHackMe
════════════════════════
𐀪 Author: Akbar Riffani
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 14:37:25 GMT
════════════════════════
⌗ Tags: #kerberos #capture_the_flag #tryhackme #active_directory
Medium
My write-up Attacktive Directory — TryHackMe
Task 1 :
10 views
Daily Writeups
⤷ Title: TryHackMe Writeup: Attacktive Directory — Dari Zero ke Domain Admin
════════════════════════
𐀪 Author: Muhammad Ridwan
════════════════════════
ⴵ Time: Sat, 14 Mar 2026 18:16:37 GMT
════════════════════════
⌗ Tags: #dcsync #tryhackme #active_directory #kerberos #as_rep_roasting
Medium
TryHackMe Writeup: Attacktive Directory — Dari Zero ke Domain Admin
Disclaimer: Writeup ini dibuat untuk tujuan edukasi. Semua aktivitas dilakukan di lingkungan lab yang terkontrol dan disediakan oleh…
22 views
Daily Writeups
⤷ Title: TryHackMe — Attacking Kerberos Walkthrough
════════════════════════
𐀪 Author: Nick Bayne
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 23:31:01 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #kerberos_authentication #kerberos #tryhackme
Medium
TryHackMe — Attacking Kerberos Walkthrough
Learn how to abuse the Kerberos Ticket Granting Service inside of a Windows Domain Controller
34 views
Daily Writeups
⤷ Title: Inside the Protocol: Master Kerberos Defense and Detection with Kerlab’s Rust Toolkit
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 27 Apr 2026 15:28:47 +0000
════════════════════════
⌗ Tags: #Open Source Tool #brute_force #Cyber Security 2026 #Detection Engineering #InfoSec Tool #Kerberos #Kerlab #Mimikatz #password spraying #Rubeus #Rust #TGS #TGT
Penetration Testing Tools
Inside the Protocol: Master Kerberos Defense and Detection with Kerlab’s Rust Toolkit
Explore Kerlab: A high-performance Rust tool for mastering Kerberos. From TGT/TGS requests to brute-forcing, build better detection rules with hands-on labs.
29 views
Daily Writeups
⤷ Title: Kerberoasting in 2026: Why “We Didn’t Crack It” Is Still a Critical Active Directory Finding
════════════════════════
𐀪 Author: Cameron Bardin (MDVKG)
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 14:26:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #active_directory #kerberoasting #kerberos #penetration_testing
Medium
Kerberoasting in 2026: Why “We Didn’t Crack It” Is Still a Critical Active Directory Finding
And why “we ran the wordlist and got nothing” is the most dangerous sentence in a pentest debrief.
8 views
Daily Writeups
⤷ Title: How I Set Up an Active Directory Lab, Performed a Kerberoasting Attack, and Then Locked It All Down
════════════════════════
𐀪 Author: Mahimnasinh
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 10:04:23 GMT
════════════════════════
⌗ Tags: #penetration_testing #active_directory #kerberos #cybersecurity #ethical_hacking
Medium
How I Set Up an Active Directory Lab, Performed a Kerberoasting Attack, and Then Locked It All Down
From zero AD knowledge to cracking a service account password in minutes — and then actually stopping it. A beginner’s honest walkthrough…
20 views
Daily Writeups
⤷ Title: Gaining Domain Admin: A Journey through LDAP, Kerberos, and Delegation Abuse.
════════════════════════
𐀪 Author: Yoel Yosief [ Orit01 ]
════════════════════════
ⴵ Time: Fri, 08 May 2026 08:28:09 GMT
════════════════════════
⌗ Tags: #ethical_hacking #windows_vulnerability #ldap #active_directory #kerberos_delegation
Medium
Gaining Domain Admin: A Journey through LDAP, Kerberos, and Delegation Abuse.
In penetration testing, the path to domain administrator privileges often involves a complex chain of exploitation, requiring a deep…
39 views
Daily Writeups
⤷ Title: How Attackers Abuse Active Directory's Kerberos, By an Attacker (Part I)
════════════════════════
𐀪 Author: opr3vail
════════════════════════
ⴵ Time: Sat, 09 May 2026 21:01:51 GMT
════════════════════════
⌗ Tags: #red_team #cybersecurity #azure_active_directory #penetration_testing #kerberos
Medium
How Attackers Hack Through Corporate Environments using Kerberos, by An Attacker (Part I)
This is the complete, comprehensive deep dive behind the scenes for how the Kerberos protocol is abuse by attackers in Active Directory.
100 views