How I Got My First Official High Severity CVE That Leads to Admin Account Hijacking
M1H
Command Palette
Search for a command to run...
Archive
15 posts published so far
Active Directory Compromise via ACL Chains & ESC4 Certificate Template Abuse
M1H
Leveraging RDP Access and PowerShell History to Escalate Privileges on a Windows Host
M1H
Application Security Review: Implicit-Grant Identity Confusion
M1H
Pivoting in Penetration Testing: A Beginner's Guide to Ligolo-ng
M1H
OSCP-LK: Achieving System Administrator Privileges via Credential Harvesting, MSSQL Impersonation, and Registry Extraction
M1H
LDAP Enumeration & NFS Misconfiguration To Privilege Escalation as Root
M1H
From Guest WiFi to Root: How One API Leak + SSTI Destroyed a Luxury Resort
M1H
Chained Exploitation: From WordPress Vulnerable Plugin to Docker Container Breakout Achieving Root
M1H
BloodHound Enumeration, ACL Abuse & ADCS Attacks on Active Directory.
M1H
Breached Credentials Lead to Admin Account Compromise via stored XSS
M1H
AWS Cognito Account Takeover: Exploiting update-user-attributes to Hijack Admin Access
M1H
From SMB Null Session to Domain Controller Compromise via Kerberoasting
M1H
Active Directory: Domain Controller Compromise Through ADCS ESC8 NTLM Relay attack chain
M1H
Threat Hunting & Splunk Analysis: Investigating a data leak
M1H