Loading...

Vulnlab
HackTheBox
TryHackMe
HackSmarter

Mr. Dorky

Vulnlab
HackTheBox
TryHackMe
HackSmarter

Mr. Dorky

Tags

.accdb .git ADCS AI ASREPRoast ASREPRoasting Access Access Control Active Directory Active Directory Certificate Services ActiveDirectory Agent Sudo Agent T Alternate Data Streams AlwaysInstallElevated Anonymous Anonymous Share Apache AutoRecon Autologon64 BAK BOF Baby Baby2 Backup Operators BackupOperatorToDA BadSuccessor Bash Bash Reverse Shell Bastion Beep BinaryPathHijack Blog BloodHound BlueTeam Breach Brute Force Bruteforce Build Bypass CA-manager CAPE CGI CI/CD Security CI/CD integration CME CTF CVE CVE-2019-18988 CVE-2019-5029 CVE-2021-34527 CVE-2026-54121 Casper CertiGhost Certificate Authority Certify Certipy Chisel Citrix ClickOnce Coercer Constrained Delegation CrackMapExec CrackStation Credential Decryption Credential Dumping Credential Harvesting Credential Theft CredentialAccess Credentials Extraction Cronjob Cyber Defender CyberChef Cybersecurity DC DCSYNC DCSync DLL Injection DLL hijacking DNS DPAPI Decrypt Defender Bypass Delegation Abuse DevNullTavern Directory Brute-Forcing Directory Brute-forcing Dirsearch Diskshadow Docker Escape DomainEscalation DumpIt ESC1 ESC14 ESC2 ESC3 ESC4 ESC7 ESC8 EfsPotato Elastica Elastix Encrypted Files Encrypted Passwords Endgame Enumeration Escape Evil-WinRM Exhibitor ExploitDB Exploitation FTK Imager FTP FTP Exploitation Feroxbuster File Upload FileTransfer FileZilla ForceChangePassword FoxyProxy FreePBX GMSA Abuse GMSA password GPO Abuse GPP Password GTFOBins Gcore GenericAll Get-ADUser GetNPUsers.py GetUserSPNs GetUserSPNs.py Git GitLab Gitea Gobuster GodPotato Goldfynch HTB HTTP Service Ticket Hackthebox Hard Difficulty Hash Analyzer Hash Cracking Hash-identifier Hashcat Heron Hoaxshell Hybrid Hybrid Analysis Hydra IIS IIS-ShortName-Scanner IMAP Impacket InfoSecCommunity Intercept Internal Web Application JWT Jeeves Jenkins John the Ripper Jumpbox KRB5CCNAME Kaiju KeeFarceReborn KeePass KeePassXC Kerberoast Kerberoasting Kerberos KeyTabExtract Keylogger Keytab Extraction LAPS LDAP LDAP Enumeration LDAP signing LFI Lateral Movement LearningTogether LinPEAS Linux Local File Inclusion Local Privilege Escalation Lock Lustrous MSI installer MSSQL Machine Account Hash Machine Account Quota MalDev ManageCA ManageCertificates Mandiant IOC Editor Markasjunk Medium Medium Difficulty MemLabs Memory Forensics Metasploit MidGarden2 Mimikatz MySQL MySQL Injection Mythic C2 Mythical NFS NTDS Dump NTDS.dit NTLM NTLM Hash NTLM Relay NTLM hash dumping NTLM hash extraction NTLM relay NTLMv2 NetExec NetScaler Netcat Nishang Nmap NoPac Node-Red OS Command Injection OSCP OSINT OffensiveSecurity OneRuleToRuleThemStill.rule OpenSSH OpenSSL OpenVPN PDF24 PHP PHP Wrapper POP3 PSCredential Decryption PST PUSH Pass-the-Hash Pass-the-Ticket PassTheHash Password Change Password Cracking Password Reset Password Reuse Password Spraying Pelican Penetration Testing Pentesting Perl PetitPotam Phishing Pivoting Port Forwarding Port Scanning PortForwarding Portswigger Post-Exploitation PostExploitation PowerDNS PowerShell PowerUp PowerView Pre-Windows 2000 Computers PrintNightmare PrivescCheck Privilege Escalation PrivilegeEscalation ProcessInjection Project Prolab ProxyChains PsExec PuTTY PuTTYgen Puppet Puppet Manifest Abuse Python RBCD RCE RDP RDP Access RID brute force RID brute forcing RUNasCs RedTeam Redline Reflection Remmina Remote Remote Code Execution Remote File Inclusion Remote Registry Dump Responder Retro Retro2 Reverse Shell Rlogin Robocopy Roundcube Rubeus RustHound S4U2Self SAM SCCADMIN SCCM SID Enumeration SIP SMB SMB write access SMBExec SMTP SPN SPN-less RBCD SQL Injection SQLi SSH SSH Proxy STATUS_PASSWORD_MUST_CHANGE STH SUID SYSTEM hive SYSVOL Saved Credentials Scheduled Task SeBackupPrivilege SeImpersonate SeImpersonatePrivilege Secrets Dumping Secretsdump SecurityResearch Sendai SetOpLock Shadow Copy Shadow Credentials SharpDPAPI SharpEfsPotato SharpHound SharpSCCM Shell Restriction Shellshock Shocker Shortcut File Attack Silver Ticket Skynet Sliver SquirrelMail StandIn StegCracker Steganography StreamDivert Subdomain Brute-Forcing Sudo Sudo Abuse Sunshine TGT TGT request TeamViewer Telnet Tengu Tradecraft Trust Attack Trusted TrustedCircle Trustworthy Databases TryHackMe U2U Attack UAC UAC-BOF-Bonanza UAC-Bypass URL Encoding USF Umbraco CMS VBS Phishing VHD VirusTotal Volatility VulnLab Vulnlab Wappalyzer Web Web.config Exploitation WebAppSec WebDAV Webmin Webshell Wget Whisker WinPspy WinRM Windows Windows Server 2025 Windows Shortcut Credentials Windows shares WriteAccountRestrictions WriteDACL Writeup XEN Zerologon Zone Management Zookeeper access token addcomputer.py anonymous login assumed breach atexec.py backup enumeration beacon callback binwalk bloodyAD cert template abuse certificate abuse chain changepasswd.py client push cmdkey coercion credential change credential dumping credential harvesting cronos curl dMSA datastream delegate-access describeTicket.py dnstool.py domain administrator domain enumeration domain persistence domain trust abuse dos2unix dotnet binary credential extraction enum4linux-ng execute_assembly ffuf forensic forensics gMSA gMSADumper.py getPAC getST.py getTGT.py golden certificate guestmount hash cracking internal recon jenkins_offline_decrypt.py jq kdbx keepass2john keepass4brute keytabextract.py kinit kwProcessor lateral movement ldapsearch leak ligolo-ng mRemoteNG mRemoteNG decryptor machine account abuse make_token mdb mdbopener mdbtools meterpreter mount mremoteng-decrypt msfvenom msiexec mssqlclient.py naabu net rpc no-root-squash ntlmrelayx.py ntpdate null session pass-the-cert pass-the-ticket passthecert.py password cracking password guessing password reset password spray pfx extraction phishing privilege escalation psexec.py putty2john pyLAPS pygpoabuse rbcd.py reg reg.exe reg.py repository reverse shell rsh rsync runas scp secretsdump secretsdump.py service account share enumeration shasum shell access simple passwords slinky smb smbclient smbclient-ng smbmap smbpasswd smtp-user-enum sqlcmd sqlmap strings svmap svwar swaks tar tcpdump ticketer.py trust account attack user enumeration vsCTF win32dd wmiexec.py writeable share xp_cmdshell xp_dirtree

Abir Limon

Announcement

Navigating the Cyber Seas with Insightful Research and Write-ups.

Recent Post

Casper - HackSmarter2026-08-08

MidGarden2 - HackSmarter2026-08-08

/Dev/Null Tavern — A Quiet Place for Real Practitioners2025-11-05

Lustrous - Vulnlab2025-05-24

Heron - Vulnlab2025-05-20

Categories

Blog4
CTF5
Writeups38

Tags

pygpoabuse Local File Inclusion CrackStation mssqlclient.py Medium Difficulty Nmap Apache CertiGhost win32dd BadSuccessor Credential Harvesting CGI TrustedCircle Keylogger Remote File Inclusion xp_dirtree password reset Remmina reg.py GTFOBins CVE AlwaysInstallElevated WriteDACL swaks Hard Difficulty trust account attack ActiveDirectory RustHound Port Scanning msfvenom internal recon atexec.py UAC-Bypass Password Spraying PSCredential Decryption DPAPI LDAP signing DLL hijacking AI Windows Shortcut Credentials

Archives

August 20262
November 20251
May 20254
April 20252
March 20252
January 20251
December 20241
October 20241

Info

Article :

51

UV :

PV :

Last Update :

Search

Loading the Database