ShadowGate — Active Directory Walkthrough: Null Session to AS-REP Roast to AD CS
Active Directory walkthrough of ShadowGate (Windows Server 2022) — anonymous SMB user enumeration, AS-REP roasting a pre-auth-disabled account, and...
~$ ls ./blog
14 posts · browse by tag · by category
ShareThePain — Active Directory Walkthrough: Writable Share to Forced Auth to ACL Abuse
Active Directory walkthrough of ShareThePain (Windows Server 2022) — coercing DC authentication from a writable SMB share, cracking the hash, abusi...
BuildingMagic — Active Directory Walkthrough: Web Leak to Domain Admin
Full Active Directory walkthrough of BuildingMagic (Windows Server 2022) — chaining a web DB leak, Kerberoasting, ACL abuse, share poisoning, and P...
Kevin — Walkthrough: Default Creds to SYSTEM via HP Power Manager
Walkthrough of the Kevin machine (Windows 7) — chaining default credentials with a buffer overflow in HP Power Manager 4.2 to land a SYSTEM shell, ...
Airplane (TryHackMe) — Walkthrough: LFI to gdbserver RCE to SUID Lateral Move
TryHackMe Airplane walkthrough — turning a Flask LFI into process recon, exploiting an exposed gdbserver for RCE, then abusing a SUID euid mismatch...
OSINT Investigation: Cyber Operations in the Cambodia–Thailand Conflict (Focused on Cambodian Threat Actors)
OSINT investigation into the cyber dimension of the 2025 Cambodia–Thailand border conflict — Cambodian hacktivist operations, mass data breaches, a...
OSINT Report: Threat Actor Profile - AnonSecKH / BL4CK CYB3R
OSINT profile of AnonSecKH (aka BL4CK CYB3R / ANON-KH), a politically motivated Cambodian hacktivist group targeting Thai government, military, and...
OSINT Report: Threat Actor Profile - H3C4KEDZ
OSINT profile of H3C4KEDZ, a Cambodia-based hacktivist group targeting Thai infrastructure under #OpThailand — TTPs, affiliations, and infrastructu...
OSINT Report: Threat Actor Profile - KOLzSec Cyber Activities
OSINT profile of KOLzSec, a hacktivist group defacing and DDoSing Thai government sites, linked to NXBBSEC, AnonSecKH, and allied Southeast Asian c...
OSINT Report: Threat Actor Profile - NXBBSEC
OSINT profile of NXBBSEC, a Telegram/X-based hacktivist collective running DDoS attacks, data leaks, and system exploitation against Thai and Cambo...
OSINT Report: Threat Actor Profile - NRSTSEC
OSINT profile of NRSTSEC, a hacktivist group behind DDoS attacks, defacements, and data leaks against Thai targets from 2023-2025, tracked via Tele...
OSINT Investigation Report: Boss Ranzen
OSINT profile of Boss Ranzen, one of the world's most prolific web defacers with 13,000+ confirmed defacements, linked to D704T and Ghost Exploiter...
OSINT Threat Actor Profile – SukaLebok06 (Follow-Up Investigation)
Follow-up OSINT profile of SukaLebok06 of the Sunda Cyber collective — digital footprint, PentryzaAI links, identity traces, and threat assessment ...
OSINT Investigation Report: 7.6GB Indian Government Data Breach by SukaLebok06
OSINT investigation into the 7.6GB Indian government data breach claimed by threat actor SukaLebok06 on DarkForums — scope, impact, infrastructure,...