From host discovery to Active Directory attacks
Full security assessment walkthrough for Manager on HackTheBox. Includes reconnaissance, e…
Complete Nmap mastery guide — scan types, timing, OS detection, NSE script categories, out…
AD CS is the quietest road to Domain Admin: one mis-set checkbox on a certificate template…
Full walkthrough of the HackTheBox AWS Fortress. Covers S3 public bucket credential leakag…
Hard Windows AD box. Chains writable SYSVOL → Logon Script Hijack → ForceChangePassword pi…
Passive and active subdomain enumeration with Subfinder and Amass.
MSFVenom combines msfpayload and msfencode for generating custom shellcode and payloads.
Netcat and Socat for reverse shells, port forwarding, file transfer, and network debugging…
John the Ripper — versatile password cracker with hash extraction helpers for common file …
Hashcat is the world's fastest password recovery tool supporting 300+ hash types and GPU a…