DuckWrites·Mar 10Lateral Move via MSSQL Linked Servers — Now with actual commands — Part IIA few weeks ago I published a very easy method to abuse MSSQL server linked server misconfigurations, focusing on concepts only. This is…
DuckWrites·Jul 25, 2025Poking a hole in a Windows firewall via nxcGaining access to a machine is just the beginning. Moving traffic through it,especially through restrictive firewalls, is a different…
DuckWrites·Jul 9, 2025RDP Feels Broken on VPN? Let Me Show You Why Remmina WorksI discovered Remmina when I started working on HTB Academy’s CAPE course. It was a suggestion from someone in the HTB Discord. Now that I’m…A response icon1A response icon1
DuckWrites·Jul 7, 2025MSSQL Permissions — Finally Explained ClearlyI have not seen a single pentest course that explains basic MSSQL permissions in a simple way. Not even HTB Academy — and that is one of…
DuckWrites·Jun 9, 2025Uncover MSSQL Targets in a Domain using SPNsIf you’ve looked into MSSQL pentesting, you’ve probably come across the term SPN (Service Principal Name). But it’s not always clear what…
0x5ea3o1f·Feb 7, 2025PEN-300 and OSEP 2025: Review and Updates📋 IntroductionA response icon2A response icon2
Leandro B.·Aug 23, 2023OSEP Review 2023Offensive Security Experienced Penetration Tester ReviewA response icon1A response icon1
