2026-08-14 5 min
[notes]
AWS IAM for Pentesters: AssumeRole and PassRole Paths
AWS IAM for pentesters: reading policies as relationships, sts:AssumeRole and iam:PassRole paths, permissions boundaries and resource policies.
tail -f /var/log/hos
retired boxes, exploit notes, tooling we wrote because nothing else did the job.
324
posts
11
authors
weekly
cadence
grep all HackTheBox OSCP Preparation Privilege Escalation Linux Web Windows RCE Easy Active Directory Information Disclosure SSH Medium
> latest
2026-08-11 5 min
[notes]
MSSQL in Active Directory: Linked Servers and Privesc
MSSQL inside Active Directory: impersonation with EXECUTE AS, xp_cmdshell, linked server chains, the double hop problem and coerced authentication.
2026-08-07 3 min
[notes]
Hack The Box DanglingTree Stats (Medium Windows)
HTB DanglingTree: active medium Windows box, Season 11 week 12. Rated 4.2/5 from 158 reviews, 2,953 user owns. Difficulty read and prep, spoiler-free.
AD
2026-08-07 2 min
[notes]
Hack The Box Cohort Stats (Easy Linux)
HTB Cohort: active easy Linux box, Season 11 week 11. Rated 3.8/5 from 286 reviews, 6,617 user owns. Difficulty read and prep, spoiler-free.
AD
2026-08-07 3 min
[notes]
Hack The Box DarkZeroReturns Stats (Hard Windows)
HTB DarkZeroReturns: active hard Windows box, Season 11 week 10. Rated 4.7/5 from 118 reviews, 2,071 user owns. Difficulty read and prep, spoiler-free.
AD