Certified, Active Directory Certificate Services (AD CS) yapılandırma hataları ve karmaşık Access Control List (ACL) zafiyetleri üzerine…

Aşama 1: Keşif ve Bilgi Toplama (Enumeration)

Adım 1: Keşif ve Bilgi Toplama (Reconnaissance)

Bastard, Hack The Box platformunda yer alan Medium zorluk seviyesinde bir Windows makinesidir. Bu makinedeki odak noktamız; web…

Forging a Kerberos Golden Ticket to Own a Domain Controller

1. Keşif ve İlk Erişim (Enumeration & Initial Access)

Simulating a Pass-the-Hash Attack and Catching It in Wazuh — An Attacker and SOC Analyst Perspective

1. Keşif ve Bilgi Toplama (Enumeration)

1. Keşif, Bilgi Toplama ve Haritalama

Explore AD breaching including username enumeration, password spraying, coercion, and mitigations.

Overview

Introduction

TL;DR Walkthrough of the TryHackMe Operation Endgame room.

Introduction

Kerberoasting, Pass-the-Hash, DCSync, and the tooling that turns one compromised laptop into Domain Admin.

AS-REP Roasting is one of the easiest ways to obtain Active Directory credentials without knowing a password. If a user has Kerberos…

Group Policy Objects (GPOs) are one of the most powerful features in Active Directory. They allow administrators to manage settings across…

This is part of my daily labs in preparation for OSCP. I am documenting everything I am learning, tools that I am using and reflections as…

A team member started an External Penetration Test and was moved to another urgent project before they could finish. The team member was…