YYogeshwar PeelaOct 17 · 27 min readHackTheBox: Odori WriteupSummary Odori ships as an offline forensics box: the only live services are SSH and Samba, and an anonymously readable backup share just points to a BitLocker-encrypted VMDK handed out with the machinexploitnotes.hashnode.dev
NNguyễn Đăng HưngJul 22 · 36 min readBeyond the Archive: CVE-2025-8088 Stealer Targeting Ukraine0. Overview This report details a targeted cyber-espionage campaign conducted by the Russia-aligned threat actor group APT SHADOW-EARTH-066 (also tracked by CERT-UA as UAC-0226), delivering an updatedbluecyber.hashnode.dev
RRCE.0psFeb 27 · 12 min readCredential Dumping with NetExec (nxc)In modern enterprise environments, Active Directory credentials are the ultimate prize for attackers. Whether you’re a red teamer, penetration tester, or adversary simulation professional, gaining accrceops.hashnode.dev