Vulnerability
Kerberoasting, Silver Tickets, and Golden Tickets: Different Keys, Different Risks
How I separate Kerberoasting from Kerberos ticket forgery, check the prerequisites, and collect evidence that supports each finding.
#windows
Security Blogs
Sliver C2: Setting Up a Small Windows and Linux Lab
How I separate Sliver servers, operator clients, and implants, then build a bounded lab with evidence for each connection step.
Security Blogs
Donut Shellcode: Understanding the Loader and Testing Detection Claims
What Donut generates, how its managed-code loader works, and the evidence I need before describing any endpoint protection bypass.
All 3 posts shown