CTF 6
- Compromising a full AD environment (volume shadow copying and ntds.dit dumping)
- From normal user to domain admin with exploiting Kerberos and ESC16
- HTB SteamCloud Writeup: Zero Credentials to Root Inside a Kubernetes Cluster
- HTB Cohort Writeup: SSRF to Marimo RCE to Root
- HTB Enigma Writeup: From an NFS Leak to Root via OliveTin
- From Camaleon to S3 Buckets to taking over the system.