BadSuccessor attack by creating a malicious dMSA object in AD

There is no excerpt because this is a protected post.

Exploit Kubernetes cluster & container abuse

Transform XSLT to HTML with extensions → special XML “SSTI”

There is no excerpt because this is a protected post.

Ticket Forgery & Token Abuse with a service account in Win AD

From bi-directional MSSQL linked servers in to CVE-2024-30088 LPE

Pwn heap UAF, IO FILE exploit, VM, serialization, protobuf

XSS pivot to pyAescrypt brute forcing

Exploit IKE IPSec via UDP discovery & the SUDO binex privesc