Posts

SANS KringleCon 2023 : Linux Priv Esc

They had me in the first half, not gonna lie. I thought about this too much when I first kicked off this challenge. But, I think I found the intended…

SANS KringleCon 2023 : HASHCAT!

Ah it is that time of year again for the SANS Holiday Hack, aka. Kringlecon. I have jumped in and had a great initial couple of hours. The premise for…

THM : Dodge , Write Up

Ah 2024! Lets kick this off shall we with a write up from a room I worked on. The room is called Dodge. I decided to sharpen the axe, especially…

THM : Recovering Active Directory

This post is more of a write up than a thought piece. This post goes over the Try Hack Me Room; Recovering Active Directory. <Rant> While I write this post…

THM : Windows Hardening

This is my write up of the Try Hack Me room Microsoft Windows Hardening. I am doing this room as a pre-req recommendation to the Recovering Active Directory Room, which…

Don’t Schedule Privilege

Something that crops up time an time again is the usage of Privileged accounts to run applications on a server as part of a scheduled run, or cronjob. TL;DR DON’T…