Recently I completed my nmap post port scans room from jr pt module. and as the name suggests this room focuses on the post scans. This…

Hello, welcome to this write-up post for the Cascade Active Directory machine.

Understanding the attack that needs no exploit, no malware, and often no alert at all

Active Directory From Zero to Hero — Part 2

Introduction

Authority e o cutie AD unde furi secrete Ansible Vault, păcălești un PWM să dea o parolă LDAP în clar, apoi abuzezi ESC1 spre Domain Admin.

A full walkthrough of Fries, a Hard-difficulty Windows Active Directory box chaining web app exploitation, container escape, credential…

Active Directory From Zero to Hero — Part 5

TL;DR Researchers published full details and a proof-of-concept tool for CVE-2026-27912, called ResetNightmare. The flaw sits in the Windows Kerberos Change Password protocol. It lets an attacker …