Active Directory Kerberoasting and AS-REP Roasting Detection Deep Dive
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Yunolay
Active Directory 
Tools & Defense DNS-Based Threat Hunting
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Web Exploitation JWKS, Key Rotation, and JWT Validation Pitfalls
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense Lateral Movement Detection: SMB, WMI, and WinRM
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Web Exploitation Business Logic Vulnerabilities: A Testing Methodology
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense Windows Telemetry: Sysmon vs ETW vs the Security Log
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Web Exploitation Race Conditions in Web Applications: Limit-Overrun Attacks
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense Threat Hunting: Building and Testing Hypotheses
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Web Exploitation WebSocket Security Testing Methodology
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps Linux Namespaces and cgroups: The Building Blocks of Containers
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn Unsorted Bin Attack and Leaking libc
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn Fastbin Dup and Double-Free Attacks
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn The glibc Heap Explained: Chunks, Bins, Arenas, and tcache
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn Windows Binary Exploitation: SEH Overwrites and Modern Mitigations
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn Kernel Pwn Primer: ret2usr, SMEP/SMAP, and KASLR
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn PIE and RELRO: What They Change for Exploitation
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn ret2win and a Repeatable CTF pwn Methodology
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn Linux x86-64 Shellcoding from Scratch
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn one_gadget: Finding and Satisfying Constraints
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn Defeating ASLR: Leaks, Partial Overwrites, and Brute Force
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Security 802.1X and Network Access Control (NAC) Considerations
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Security BGP Hijacking and RPKI
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Security SMB Security: Signing, Encryption, and the SMBv1 Legacy
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Security Link-Local Name Resolution (LLMNR/NBT-NS/mDNS): Risks and Hardening
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Mobile API OSINT Android Keystore and Root Detection Internals
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Mobile API OSINT iOS Data Protection and Keychain Security
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Mobile API OSINT Android Deep Links and Intent Redirection
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Mobile API OSINT IoT Firmware Extraction and Analysis
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Mobile API OSINT Reversing Android Apps: Smali, Resources, and Obfuscation
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Mobile API OSINT Insecure Local Data Storage on Mobile Devices
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Mobile API OSINT Mobile Certificate Pinning: Implementation and Testing
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Mobile API OSINT Bluetooth Low Energy (BLE) Security: Pairing and Sniffing
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense Windows Event Log Analysis for Incident Responders
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense Memory Forensics with Volatility 3
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense NTFS Forensics: The Master File Table (MFT)
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense Windows Registry Forensics for DFIR
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense Execution Artifacts: Prefetch, Shimcache, and Amcache
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense Linux Forensics: Triage and Artifact Collection
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense Email Header Analysis and Phishing Triage
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense Deobfuscating Malicious PowerShell for Analysts
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...