#active-directory-attack

TCH MDA

KA Karim roshdy

Investigating Credential Dumping Activity Using Mimikatz

Introduction

Jul 24, 2026 · 2 min read · 0 claps #cybersecurity #elasticsearch #active-directory-attack

MDA AI

AK Akchhat

CRTP Exam Experience

Certified Red Team Professional | Altered Security

Jul 16, 2026 · 4 min read · 1 claps #active-directory-attack #active-directory-security #crt-p

TCH MDA GEN AI

AR Aruvasaga chithan A · InfoSec Write-ups

How I Abused a Group Policy Object (GPO) in Active Directory (And How to Fix It)

Group Policy Objects (GPOs) are one of the most powerful features in Active Directory. They allow administrators to manage settings across…

Jul 10, 2026 · 2 min read · 50 claps #gpo-abuse #active-directory-security #active-directory-attack

TCH MDA

R3 !R3M

ADCS — ESC4: İzinleri Değiştirdim, Sertifika İstedim, Domain Admin Oldum

ESC1'in temel mantığını bilmeden ESC4' ü takip etmek biraz zorlaşabilir. Henüz okumadıysanız önce ESC1‘i okumanızı öneririm.

Jun 09, 2026 · 6 min read · 0 claps #active-directory-attack #adcs-attacks #esc4

MDA

NA Nazarov Samir

HTB: StreamIO

Machine Link: https://app.hackthebox.com/machines/StreamIO

Jun 03, 2026 · 9 min read · 51 claps #htb-walkthrough #streami̇o #active-directory-attack

MDA

ED edbert sumicad

TryHackMe: Ledger Write-up

Introduction

May 26, 2026 · 11 min read · 1 claps #active-directory-attack #tryhackme #tryhackme-walkthrough

TCH MDA

JO Jose Praveen

Intro to AD Breaching | TryHackMe | practical challenge

Explore AD breaching including username enumeration, password spraying, coercion, and mitigations.

May 13, 2026 · 3 min read · 1 claps #tryhackme-walkthrough #active-directory #active-directory-attack

MDA

MO Mohamad Salaheldin

Windows Security Descriptors

Every time a process touches a file, opens a registry key, or talks to a service, Windows asks one question: does this caller have…

Apr 30, 2026 · 8 min read · 0 claps #windows-security #sddl #active-directory-attack

TCH MDA

RS ɧrιsнi rajeeѵ

Pass-the-Hash & Mimikatz : Stealing Credentials and Owning a Domain Controller

Simulating a Pass-the-Hash Attack and Catching It in Wazuh — An Attacker and SOC Analyst Perspective

Apr 09, 2026 · 6 min read · 1 claps #active-directory-attack #securityoperationscenter #cybersecurity

MDA

DU DuckWrites

Two Ways to Pop Reverse Shells on DCs Across Forests

PsExec is one of the most useful tools for lateral movement in Active Directory. Its real value shows up once we have a Golden Ticket and…

Jan 23, 2026 · 3 min read · 4 claps #osep #reverse-shell #oscp

MDA

DU DuckWrites

3 cool ways to move files from Windows To Kali

Moving Files

Oct 29, 2025 · 2 min read · 6 claps #file-transfer #impacket #evil-winrm

TCH HUM MDA

PR Pranav V

Setting Up an Evil-WinRM Lab with Kali & Windows on VirtualBox

If you’re learning Windows post-exploitation or penetration testing, Evil-WinRM is one of the most powerful tools in your arsenal. It…

Aug 30, 2025 · 3 min read · 0 claps #active-directory-attack #evil-winrm

TCH MDA

DU DuckWrites

From Machine Account to Domain Admin

The most common way to move laterally in Active Directory pentesting is via user account. But there’s a less obvious path — through a…

Jul 15, 2025 · 5 min read · 6 claps #esc1 #adcs-attacks #windows-privilege-esc

SCI TCH MDA

DU DuckWrites

Careful with with Spaces on Kerberos Tickets

Rubeus is a powerful post-exploitation tool for Kerberos ticket manipulation, commonly used in penetration testing. However, when…

Mar 14, 2025 · 2 min read · 3 claps paywalled #genericall #oscp-preparation #oscp

TCH MDA

DU DuckWrites

Breaking In Windows: 3 Techniques to Connect Remotely

When pentesting Active Directory, knowing what alternatives you have for remote connectivity can make the difference between getting an…

Jan 31, 2025 · 4 min read · 8 claps paywalled #winrm #evil-winrm #psexec

MDA

SA Saniye Nur

AD CS Güvenliği - Tespit ve Önleme Yöntemleri

Active Directory Güvenlik İhlallerini Tespit Etme ve Önleme

Dec 01, 2024 · 16 min read · 2 claps #active-directory-security #active-directory-attack #blue-team

TCH MDA SOC ECO

AB Abhishek M L

Pivoting 101: How Attackers Use Compromised Systems to Explore Networks

Hope this blog makes the topic “PIVOTING” easily understandable.

Nov 22, 2024 · 4 min read · 0 claps #hacking #pivoting #cysec

TCH MDA

DU DuckWrites

NXC’s PowerShell -X Option: A Stealthy Pentesting Technique

When the PowerShell -X option is used, nxc performs several behind-the-scenes actions to ensure both functionality and stealth. Let’s dig…

Nov 21, 2024 · 2 min read · 17 claps paywalled #crackmapexec #netexec #nxc

MDA

DU DuckWrites

Conquering Active Directory for OSCP+: Essential Techniques and Strategies — Part 2

This is the second of a series of short articles written to assist with the Active Directory (AD) portion of the new OSCP+ exam format…

Nov 04, 2024 · 3 min read · 13 claps paywalled #active-directory-attack #oscp #oscp-preparation

TCH MDA

DO Doozy

Active Directory enumeration and exploitation for beginners

#beginners #activedirectory #AD #enumeration #exploitation

Jan 27, 2023 · 6 min read · 7 claps #active-directory #active-directory-attack #windows