secretmyth secretmyth secretmyth secretmyth

an anomaly

  • 2026-09-05 Read the Bits, Not the Integer: msPKI-Certificate-Name-Flag and the ESC4➜ESC1 Chain
    msPKI-Certificate-Name-Flag adcs esc1 esc4 certifried cve-2022-26923 ms-crtd ms-wcce
  • 2026-09-17 Dead Men Tell No SPNs: From a Leaky Printer to the Master Ledger
    netexec windows-ad ntlm-relay rbcd kcd mssql ntds
  • 2026-09-14 The 12 Labours of Kerberos: Relocating Objects, Restricted Officers, and SPN-less RBCD
    hackthebox windows-ad kerberos adcs esc3 shadow-credentials rbcd u2u adminsdholder modrdn
  • 2026-09-11 The Ghost SPN Attack — Constrained Delegation to Nowhere
    goad dracarys windows-ad kerberos rbcd
  • 2026-09-08 HackSmarter: Westbridge University (Range)
    hacksmarter windows-ad range trusted-header-bypass ldap-injection asrep-roast no-preauth cross-principal-tgs kerberoast forest-trust shadow-credentials silver-ticket crystalpotato seimpersonate esc4 adcs bloodhound tombstone rbcd ksu keytab constrained-delegation
  • 2026-09-08 Cerberus in a File
    keytab kerberos kinit keytabextract linux plaintext-equivalent
  • 2026-08-21 NetExec Lab: BarbHack 2024 (Gotham City)
    netexec windows-ad pyinstaller rid-brute asrep-roasting kerberoasting dll-hijacking gmsa-abuse printnightmare backup-operators
  • 2026-08-12 GOAD: Dracarys
    goad dracarys windows-ad sql-injection glpi rbcd ghost-spn constrained-delegation keepass ssh-gssapi
  • 2026-07-19 HackTheBox: Logging
    hackthebox windows-ad shadow-credentials wsus-spoofing adcs esc17 dns-hijacking dll-hijacking laps
secretmyth · an anomaly · info · everything else is pwn