Blog

A HackTheBox Windows machine involving NTLM hash capture through a firmware review workflow and privilege escalation via a vulnerable Ricoh printer driver.

An Active Directory machine involving GPP password leakage, Kerberoasting, and domain admin compromise.

A Medium difficulty Active Directory machine involving SMB enumeration, credential exposure, and privilege abuse leading to full domain compromise.

A Linux machine involving JWT authentication bypass, credential reuse, and SSH CA key abuse to gain root access.

An Active Directory machine involving SMB enumeration, credential extraction, and RBCD-based domain privilege escalation.

An in-depth Threat Intelligence investigation of the Hack The Box Sherlocks challenge Dream Job-2, focused on malware used by the Lazarus Group during Operation Dream Job. This analysis covers malware lineage, macro-based initial access, payload staging, and defensive detection opportunities

Crack the code, command the exploit! Dive into the heart of the system with just an RCE CVE as your key.

An in-depth forensic investigation of a phishing email from the HTB Sherlocks series. We analyze email headers, SPF validation, and a disguised malicious attachment used in a spearphishing attack.

A full walkthrough of the Hack The Box ‘Cypher’ challenge from Season 7

A comprehensive guide to the linux cut command