2026-09-20 3 min
[notes]
Linux Privilege Escalation and Container Escapes
Capabilities, systemd units, Unix and Docker sockets, namespaces and cgroups: where root splits into pieces and where isolation actually breaks.
tail -f /var/log/hos
retired boxes, exploit notes, tooling we wrote because nothing else did the job.
324
posts
11
authors
weekly
cadence
grep all HackTheBox OSCP Preparation Privilege Escalation Linux Web Windows RCE Easy Active Directory Information Disclosure SSH Medium
> latest
2026-09-20 4 min
[notes]
Windows Local Privilege Escalation: Seven Paths
SeImpersonatePrivilege, service permissions, scheduled tasks, DLL search order, named pipes, UAC token filtering and COM hijacking, each with its precondition.
2026-09-20 3 min
[notes]
Active Directory Trusts and Lateral Movement Paths
Forest trusts and SIDHistory, SCCM, WSUS, LDAP enumeration and the four different execution paths behind WinRM, WMI, DCOM and PsExec.
2026-09-20 4 min
[notes]
NTLM Coercion and Relay in Active Directory
PrinterBug, PetitPotam, DFSCoerce, LLMNR and DHCPv6 spoofing, SMB signing and MachineAccountQuota: how a coerced login turns into domain access.
2026-09-20 4 min
[notes]
Active Directory Credential Attacks: A Field Reference
Kerberoasting, AS-REP roasting, gMSA, pass-the-hash, DPAPI, Credential Manager and LAPS: preconditions, validation and where impact actually grows.