ShadowGate — Active Directory Walkthrough: Null Session to AS-REP Roast to AD CS
Active Directory walkthrough of ShadowGate (Windows Server 2022) — anonymous SMB user enumeration, AS-REP roasting a pre-auth-disabled account, and...
// offensive security · research · writeups
I break things, document how, and help you learn.
Offensive Security Consultant — penetration testing, red teaming, and adversary simulation, with a SOC and threat-detection background.
latest posts
all posts →ShareThePain — Active Directory Walkthrough: Writable Share to Forced Auth to ACL Abuse
Active Directory walkthrough of ShareThePain (Windows Server 2022) — coercing DC authentication from a writable SMB share, cracking the hash, abusi...
BuildingMagic — Active Directory Walkthrough: Web Leak to Domain Admin
Full Active Directory walkthrough of BuildingMagic (Windows Server 2022) — chaining a web DB leak, Kerberoasting, ACL abuse, share poisoning, and P...
Kevin — Walkthrough: Default Creds to SYSTEM via HP Power Manager
Walkthrough of the Kevin machine (Windows 7) — chaining default credentials with a buffer overflow in HP Power Manager 4.2 to land a SYSTEM shell, ...
Airplane (TryHackMe) — Walkthrough: LFI to gdbserver RCE to SUID Lateral Move
TryHackMe Airplane walkthrough — turning a Flask LFI into process recon, exploiting an exposed gdbserver for RCE, then abusing a SUID euid mismatch...
OSINT Investigation: Cyber Operations in the Cambodia–Thailand Conflict (Focused on Cambodian Threat Actors)
OSINT investigation into the cyber dimension of the 2025 Cambodia–Thailand border conflict — Cambodian hacktivist operations, mass data breaches, a...
topics
Web App Pentesting
Attacking OWASP Top 10, auth flaws, and real-world web bugs.
Active Directory
Kerberos abuse, lateral movement, and domain dominance.
Red Teaming
Adversary emulation, C2, and evasion tradecraft.
Bug Bounty
Recon workflows and high-impact vulnerability hunting.
Malware Analysis
Static & dynamic triage, unpacking, and IOCs.
OSINT & Threat Intel
Recon, attribution, and intelligence tradecraft.