LeHack 2024 - NetExec/AD LabThis lab was originally presented at the 2024 LeHack Conference. The lab features an intentionally vulnerable Active Directory environment where it's possible to escalate from zero credentials to full domain compromise using only a single tool; NetExec.14 min read·twisted007.com1Apr 11
HackTheBox: TombWatcherIntroduction TombWatcher is a medium difficult Windows box from HackTheBox. This machine follows an assumed breach scenario wherein we start with a set of domain credentials rather than finding an initial entry point just through the VPN connection. ...7 min read·twisted007.comOct 31, 2025
HackTheBox: GreenhornGuided Walkthrough of Greenhorn from HackTheBox. Includes enumeration of vulnerable webserver, sensitive information leakage, privilege escalation4 min read·twisted007.comDec 9, 2024
HackTheBox: PermXWalkthrough explaining test methodology, website exploit and privilege escalation. For educational purposes only.4 min read·twisted007.comNov 2, 2024
HackTheBox: JabIntroduction Jab is rated as a medium difficulty machine on the HackTheBox platform. Without giving too much away, we'll need to leverage Kerberos for our initial access vector, move laterally, and eventually escalate privileges through an insecure p...9 min read·twisted007.comAug 30, 2024