TL;DR smartcards are great for anti-phishing, stopping users from writing passwords down on sticky notes, and/or sharing them. They do not however stop PtH. Welcome to Part XIV of our Back to the Basics Series! Part I: NTDS.dit vs SAM Part II: Ownership Matters Part III: Recovering from a Crash …

TL;DR how to setup a honey token, aka a honey file, to audit for those scanning all domain share drives for information useful in an attack. Welcome to Part XIII of our Back to the Basics Series! Part I: NTDS.dit vs SAM Part II: Ownership Matters Part III: Recovering from…

TL;DR Walkthrough of the TryHackMe MAL: Strings room, part of the Cyber Defense Pathway. THM Walkthroughs: Attacktive Directory (part of the Pentest+ Pathway) Credential Harvesting (part of the Red Team Pathway) AV Evasion: Shellcode (part of the Red Team Pathway) Anthem (general Practice VM) Living off the Land (part of…

TL;DR Walkthrough of the TryHackMe MAL: Malware Introductory room, part of the Cyber Defense Pathway. THM Walkthroughs: Attacktive Directory (part of the Pentest+ Pathway) Credential Harvesting (part of the Red Team Pathway) AV Evasion: Shellcode (part of the Red Team Pathway) Anthem (general Practice VM) Living off the Land (part…

TL;DR Backup Operators, offline AD backups, etc and some changes coming with the 2025 domain level. Background I had been meaning to screw around with dumping credentials from a backup of AD forever. I kept getting busy with other projects, and then recently TryHackMe incorporated it into one of their…

TL;DR setting up conflicting webs of Allows, Denys, group memberships, etc is likely to only make your Misconfiguration Debt worse. It’s not a great idea for a honey token either. Welcome to Part XII of our Back to the Basics Series! Part I: NTDS.dit vs SAM Part II: Ownership Matters …

TL;DR Walkthrough to the TryHackMe Ra practice VM, including a few things I didn’t see on the linked write-ups. THM Walkthroughs: Attacktive Directory (part of the Pentest+ Pathway) Credential Harvesting (part of the Red Team Pathway) AV Evasion: Shellcode (part of the Red Team Pathway) Anthem (general Practice VM) Living…

TL;DR Walkthrough of the TryHackMe RazorBlack, a general practice VM. THM Walkthroughs: Attacktive Directory (part of the Pentest+ Pathway) Credential Harvesting (part of the Red Team Pathway) AV Evasion: Shellcode (part of the Red Team Pathway) Anthem (general Practice VM) Living off the Land (part of the Red Team Pathway) …

TL;DR Walkthrough of the TryHackMe VulnNet: Roasted, a general practice VM. THM Walkthroughs: Attacktive Directory (part of the Pentest+ Pathway) Credential Harvesting (part of the Red Team Pathway) AV Evasion: Shellcode (part of the Red Team Pathway) Anthem (general Practice VM) Living off the Land (part of the Red Team…