R3d Buck3T

domain escalation from a low-privileged user to a domain admin

Trust this user/computer for delegation to specified services only

Trust this user/computer for delegation to any service

Forge Service Tickets (TGS) with Kerberoasting MITRE ATT&CK ID: T1558.003, Active HTB machine

Lateral Movement Attack in Active Directory Environment, MITRE ATT&CK — ID: T1550.00

Inject Server-Side XSS into dynamically generated PDFs

Injection Attacks, SQL Truncation, OWASP Top 10

Automatically add headers to all Burp requests to bypass basic WAF rules

Collection of useful features in Burp Suite Application

Enumeration, Data Exfiltration, and SSRF Attacks

Recently working on the Sniper machine on hack the box, I came across a technique of exploiting a remote file inclusion on a PHP…

Basic Server-Side Request Forgery on Selenium Grid Framework

Why should we care !! How to leveraging this flaw in social engineering attacks?

Basic methodology to approach LFI vulnerability when Pentesting a Web Application