Active Directory Responder and Internal Name-Resolution Poisoning
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
SMB
Active Directory 
Active Directory CrackMapExec/NetExec for Internal Network Assessment
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense Lateral Movement Detection: SMB, WMI, and WinRM
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Security SMB Security: Signing, Encryption, and the SMBv1 Legacy
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense Wireshark and tshark for Protocol Analysis
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Active Directory SMB Enumeration and Null Session Exploitation
A practical guide to enumerating SMB and abusing null sessions with enum4linux-ng, smbclient, rpcclient, and RID cycling.
Tools & Defense Mastering the Impacket Suite: From Lateral Movement to Credential Extraction
A practical tour of Impacket's psexec, wmiexec, secretsdump, GetUserSPNs and smbserver, plus blue-team detection.
Tools & Defense NetExec (CrackMapExec) in Practice: SMB Enumeration, SAM Dumping, and Password Spraying
A practical guide to NetExec (nxc) for SMB enumeration, SAM dumping, password spraying, and modules — plus blue-team detection.
Vulnlab Vulnlab Data Walkthrough by Yunolay (LFI with path traversal, Docker privileged user)Vulnlab Retro Walkthrough by Yunolay (RID Brute Force, pre-created computer accounts, ADCS Attacks)
OverviewRetro (Solo, Windows)Junior Level Windows Active Directory MachineYou will learn about pre-created computer acco...