RTOCT 0113m
NTLM relay to ADCS: ESC8 from a standing start
Relaying NTLM to Active Directory Certificate Services web enrollment to mint a DC certificate and DCSync.
- #ADCS
- #ESC8
- #NTLMRelay
IndexAll entries
newest first.
Adversary emulation, identity abuse, and the operational discipline that separates a finding from a story.
CVE ROOT CAUSE◆IMPLANT ENGINEERING◆AD ATTACK PATHS◆DETECTION FIRST◆LAB-DERIVED ONLY◆NO CLIENT DATA◆CVE ROOT CAUSE◆IMPLANT ENGINEERING◆AD ATTACK PATHS◆DETECTION FIRST◆LAB-DERIVED ONLY◆NO CLIENT DATA◆
Red Team
Adversary emulation, identity abuse, and the operational discipline that separates a finding from a story.
RTSEP 1211m
Kerberoasting without the noise
Requesting and cracking service tickets while keeping the opsec footprint low and the detection path visible.
- #Kerberos
- #Kerberoasting
- #Opsec
No index is complete without the next one.
The dispatch carries one long-form writeup, roughly twice a month. Same standard, same lab, no drip feed.