Andypoon·Oct 3Hack Smarter Labs : ArasakaArasaka is another easy rated Active Directory machine on Hack Smarter Labs.
c0gnit00·Aug 18Orphaned Certificate Template: From Low-Privilege User to Domain AdminMost red teamers and penetration testers are familiar with AD CS abuse through the well-documented ESC1 through ESC8 attack paths. You find…
Gilo·Jul 23Coercion to krbtgt: NTLM Relay and ADCS ESC8 in 2026A lab-verified walkthrough of the coercion to relay to certificate chain, and the forensic method for reconstructing it after the fact.
Sarah·Jul 17Reproducing Certifried (CVE-2022–26923)What if I told you that any regular employee with a basic domain account could take over an entire corporate network by abusing a feature…
