AuthBy (OffSec PG) — Walkthrough: Anonymous FTP → WAMP Web Root → MySQL UDF SYSTEM
OffSec Proving Grounds AuthBy walkthrough — anonymous FTP leaks usernames, weak service creds land HTTP Basic and an FTP account whose home is the ...
// offensive security · research · writeups
I break things, document how, and help you learn.
Offensive Security Consultant — penetration testing, red teaming, and adversary simulation, with a SOC and threat-detection background.
latest posts
all posts →Checkpoint (HackTheBox) — Walkthrough: AD Recycle Bin → BadSuccessor → Memory Forensics → Domain Admin
HackTheBox Checkpoint walkthrough — an assumed-breach Windows Server 2025 AD chain: restore a deleted account via the AD Recycle Bin, a malicious ....
Arasaka (Hack Smarter) — Walkthrough: Kerberoast → ACL Abuse → AD CS ESC1 → Domain Admin
Hack Smarter Arasaka walkthrough — full assumed-breach AD chain: Kerberoast, BloodHound-guided ForceChangePassword and targeted Kerberoast, then AD...
Algernon (OffSec PG) — Walkthrough: SmarterMail Build 6985 RCE to Instant Admin
OffSec Proving Grounds Algernon walkthrough — exploiting SmarterMail Build 6985 .NET deserialization RCE (CVE-2019-7214) on a Windows host for an i...
Hub (OffSec PG) — Walkthrough: FuguHub 8.1 RCE to Instant Root
OffSec Proving Grounds Hub walkthrough — retargeting the FuguHub 8.1 RCE exploit (EDB 51550) from its default HTTPS/443 config to port 8082, landin...
Bratarina (OffSec PG) — Walkthrough: OpenSMTPD CVE-2020-7247 MAIL FROM RCE
OffSec Proving Grounds Bratarina walkthrough — unauthenticated RCE through OpenSMTPD CVE-2020-7247 MAIL FROM command injection, landing instant roo...
topics
Web App Pentesting
Attacking OWASP Top 10, auth flaws, and real-world web bugs.
Active Directory
Kerberos abuse, lateral movement, and domain dominance.
Red Teaming
Adversary emulation, C2, and evasion tradecraft.
Bug Bounty
Recon workflows and high-impact vulnerability hunting.
Malware Analysis
Static & dynamic triage, unpacking, and IOCs.
OSINT & Threat Intel
Recon, attribution, and intelligence tradecraft.