MM1Hinm1h.hashnode.dev·Aug 14 · 6 min readFrom SMB Null Session to Domain Controller Compromise via KerberoastingObjective: A beverage company "Martini" recently had a corporate breach and the compliance and risk team dictates they perform a penetration test at one of their branch offices. The Hack Smarter team 10
MSManu Shuklainecorpit.hashnode.dev·Jul 20 · 17 min readKerberos RC4 enforcement lands in July 2026: the 9 events that tell you what will breakKerberos RC4 enforcement lands in July 2026: the 9 events that tell you what will break Summary. Microsoft's Kerberos RC4 hardening for CVE-2026-20833 runs in 3 phases, and the third starts with the W00
RMRodrigo Martinez Nuñezincyberdefenseprocess.hashnode.dev·Jul 16 · 5 min readDetecting Kerberoasting attacks with SplunkNote: The dataset used is fictional Scenario Company IP address: 192.168.1.0/24 What is Kerberoasting? Kerberoasting is an attack that exploits Kerberos Service Tickets to obtain the password hash o00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 10 · 35 min readHackTheBox: Phantom WriteupExecutive Summary Phantom is an Active Directory box where the entire path from unauthenticated guest to Domain Admin comes down to credential reuse and secrets sitting in accessible file shares. Ther00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jun 19 · 16 min readHackTheBox: Bruno WriteupBruno is a Windows Active Directory box built around a single bad assumption: that a "malware scanner" service can safely extract whatever zip a low-privileged share drops in front of it. That assumpt00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jun 12 · 7 min readTryHackMe - Fusion Corp WriteupPlatform: TryHackMeDifficulty: Easy Reconnaissance Nmap nmap -sC -sV -A MACHINE-IP -oA nmap The scan immediately tells us this is a Domain Controller — port 88 (Kerberos), 389/3268 (LDAP), and 5985 00
RBRhythm Babu Kafleinbuddha404.hashnode.dev·May 31 · 5 min readHow Does Windows Authentication Actually Work?Every time we log into a Windows machine, or access a shared folder on the network, Windows runs an authentication process behind the scenes. It happens in milliseconds, and understanding it is the fo10
SSravaninzero-layer.hashnode.dev·Feb 20 · 8 min readUnderstanding LSASS — The Security Brain of WindowsIntroduction – What This LSASS Article Will Cover In this article, we will take a deep dive into LSASS — not from a tool perspective, but from an architectural and internal understanding standpoint. L00
BMBen Mantzurinblog.benmantzur.com·Dec 28, 2025 · 3 min readWhen Kerberos Authenticates Users but Can’t Tell You Who They AreKerberos authentication worked. Apache accepted the ticket. The backend received the request. And yet, the application had no idea which user was calling it, or which groups they belonged to. This post documents how I built a Kerberos-authenticated A...00
MRMurtuza Rangwalainmurtazarangwala.hashnode.dev·Dec 9, 2025 · 8 min readHow to choose the correct SSO Methods !Most People Use the Wrong Protocol for SSO. But you will learn in this article how to choose right one. In this Article we are going to cover about some of the most used SSO methods why they are used, what’s the purpose, their competition and current...00
