--- title: "#red-team articles | Hashnode" description: "Explore 76 articles tagged #red-team on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/red-team" --- Tag # #red-team 76 posts · 52 followers [TR Notes](https://hashnode.com/@trnotes) · [2d ago](https://hashnode.com/posts/from-a-client-network-to-embedding-inversion-the-full-engagement-and-ai-errors/6af1fe76a0bfc2b4b985eda2) ### [From a Client Network to Embedding Inversion: The Full Engagement and AI Errors](https://trnotes.hashnode.dev/from-a-client-network-to-embedding-inversion-the-full-engagement-and-ai-errors?utm_source=hashnode&utm_medium=feed) A complete sanitized account of an authorized client engagement, from initial access, a misleading RAG stack, and deployment remnants to local and domain privileges, SSH identity matching, vector export, candidate recovery, and ten types of AI error. 41 min read · [trnotes.hashnode.dev](https://trnotes.hashnode.dev/from-a-client-network-to-embedding-inversion-the-full-engagement-and-ai-errors?utm_source=hashnode&utm_medium=feed) [TH](https://hashnode.com/@H4p00n) · [Oct 30](https://hashnode.com/posts/not-so-common-common-sense-security-adcs-esc8/6ae4dc81505307b14a02388f) ### [Not-So-Common, Common-Sense Security: ADCS ESC8](https://operationally-insecure.hashnode.dev/not-so-common-common-sense-security-adcs-esc8?utm_source=hashnode&utm_medium=feed) ⚠️ Legal & Ethical Disclaimer The information presented in this post is provided for educational and informational purposes only. All techniques, tools, and examples discussed are intended to be used 11 min read · [operationally-insecure.hashnode.dev](https://operationally-insecure.hashnode.dev/not-so-common-common-sense-security-adcs-esc8?utm_source=hashnode&utm_medium=feed) [Yash Gulati](https://hashnode.com/@yashgulatii) · [Oct 29](https://hashnode.com/posts/post-0-intro/6ae321c406652e3301f77c08) ### [Chakravyuha: I'm Building a Purple Team AD Lab - Here's the Plan](https://yashgulatii.hashnode.dev/post-0-intro?utm_source=hashnode&utm_medium=feed) I've spent years building things - applications, websites, personal projects - but always from the builder's side. Make it work, ship it, move on. Security was never part of how I thought about those 7 min read · [yashgulatii.hashnode.dev](https://yashgulatii.hashnode.dev/post-0-intro?utm_source=hashnode&utm_medium=feed) [Coding Macaw Bootcamp](https://hashnode.com/@codingmacawbootcamp) · [Oct 20](https://hashnode.com/posts/mastering-red-and-blue-team-operations-in-2026-ai-rust-and-faang-standards/6ad7c0a9ee0507af7703eef7) ### [Mastering Red and Blue Team Operations in 2026: AI, Rust, and FAANG Standards](https://codingmacawbootcamp.hashnode.dev/mastering-red-and-blue-team-operations-in-2026-ai-rust-and-faang-standards?utm_source=hashnode&utm_medium=feed) Explore how AI, Rust, and eBPF are reshaping Red and Blue Team operations. Learn what US software engineers need to know to meet FAANG standards. 4 min read · [codingmacawbootcamp.hashnode.dev](https://codingmacawbootcamp.hashnode.dev/mastering-red-and-blue-team-operations-in-2026-ai-rust-and-faang-standards?utm_source=hashnode&utm_medium=feed) [TH](https://hashnode.com/@H4p00n) · [Oct 16](https://hashnode.com/posts/not-so-common-common-sense-security-adcs-esc1/6ad16fd746a13da62c333799) ### [Not-So-Common, Common-Sense Security: ADCS ESC1](https://operationally-insecure.hashnode.dev/not-so-common-common-sense-security-adcs-esc1?utm_source=hashnode&utm_medium=feed) ⚠️ Legal & Ethical Disclaimer The information presented in this post is provided for educational and informational purposes only. All techniques, tools, and examples discussed are intended to be used 11 min read · [operationally-insecure.hashnode.dev](https://operationally-insecure.hashnode.dev/not-so-common-common-sense-security-adcs-esc1?utm_source=hashnode&utm_medium=feed) [Marco Carola](https://hashnode.com/@marcocarola) · [Sep 8](https://hashnode.com/posts/ghostloot-part-2-the-microsoft-cookie-mess-the-inbox-and-the-google-wall/6aa028eccab6deed1c0a8b00) ### [GhostLoot part 2: the Microsoft cookie mess, the inbox, and the Google wall](https://blog.redghostops.com/ghostloot-part-2-the-microsoft-cookie-mess-the-inbox-and-the-google-wall?utm_source=hashnode&utm_medium=feed) Part 1 got the loot out of Evilginx's session list. Part 2 is what I learned the hard way after that: which Microsoft cookie is actually money, which "TTL" is a fiction, how the panel had to stop bein 8 min read · [blog.redghostops.com](https://blog.redghostops.com/ghostloot-part-2-the-microsoft-cookie-mess-the-inbox-and-the-google-wall?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/ghostloot-part-2-the-microsoft-cookie-mess-the-inbox-and-the-google-wall/6aa028eccab6deed1c0a8b00) [Amartya Jha](https://hashnode.com/@codeant-security) · [Sep 7](https://hashnode.com/posts/red-team-authorization-solving-the-paradox-of-testing-people-who-can-t-know-they-re-being-tested/6a9e6d782a36291ff0164fce) ### [Red Team Authorization: Solving the Paradox of Testing People Who Can't Know They're Being Tested](https://security-research.hashnode.dev/red-team-authorization-solving-the-paradox-of-testing-people-who-can-t-know-they-re-being-tested?utm_source=hashnode&utm_medium=feed) Here's how compartmentalized red team authorization actually works. 8 min read · [security-research.hashnode.dev](https://security-research.hashnode.dev/red-team-authorization-solving-the-paradox-of-testing-people-who-can-t-know-they-re-being-tested?utm_source=hashnode&utm_medium=feed) [404 Founders](https://hashnode.com/@404-founders) · [Sep 2](https://hashnode.com/posts/cisa-aa26-237a-adcs-adconnect-soc-detection-gaps/6a9861075bb8a49cfa1e70b8) ### [CISA AA26-237A: Two SOCs, Both Compromised](https://404-founders.com/blog/cisa-aa26-237a-adcs-adconnect-soc-detection-gaps?utm_source=hashnode&utm_medium=feed) Red team tradecraft, ADCS ESC1, ADConnect credentials, and critical infrastructure detection gaps 12 min read · [404-founders.com](https://404-founders.com/blog/cisa-aa26-237a-adcs-adconnect-soc-detection-gaps?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Aug 23](https://hashnode.com/posts/brunnerctf-2026-the-three-ways-writeup/6a8b17fec9ed6fd6e84326ef) ### [BrunnerCTF 2026 : The Three Ways Writeup](https://exploitnotes.hashnode.dev/brunnerctf-2026-the-three-ways-writeup?utm_source=hashnode&utm_medium=feed) The Three Ways BrunnerCTF 2026 writeup: exploit Gitea, Drone CI, leaked secrets, and an unsigned rollout agent to gain root access. 18 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/brunnerctf-2026-the-three-ways-writeup?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Aug 18](https://hashnode.com/posts/tryhackme-bugged-writeup/6a83d642e7083cfc6b60dcde) ### [TryHackMe : Bugged - Writeup](https://exploitnotes.hashnode.dev/tryhackme-bugged-writeup?utm_source=hashnode&utm_medium=feed) Solve TryHackMe Bugged by enumerating MQTT, decoding a hidden backdoor, abusing CMD execution, and retrieving the flag without a reverse shell 5 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/tryhackme-bugged-writeup?utm_source=hashnode&utm_medium=feed)