Pentesting commands — cheat sheet
Quick-reference commands for recon, enumeration, exploitation, and post-exploit work on Linux and Windows targets.
Windows
TombWatcher — HackTheBox Writeup
Henry → targeted Kerberoast on Alfred → AddSelf to INFRASTRUCTURE → ReadGMSAPassword on ansible_dev$ → Sam → John → WinRM pivot → reanimate tombstoned cert_admin via John’s GenericAll on OU=ADCS → ESC15 (CVE-2024-49019) on the WebServer template → Administrator.
Administrator — HackTheBox Writeup
Olivia → BloodHound ACL chain (ForceChangePassword) → Benjamin → FTP .psafe3 → hashcat → password spray to Emily → targetedKerberoast on Ethan → DCSync Administrator.
Splunk Enterprise — Windows Homelab Deployment
Centralised logging and detection engineering in my Windows homelab using Splunk Enterprise and Universal Forwarders.
Windows Server with Active Directory (AD) — Homelab
Overview of my Active Directory homelab: domain setup, users, security exercises, and next steps for monitoring and detection.
Blue (HTB) — Walkthrough
Exploiting MS17-010 (EternalBlue) on a Windows 7 SP1 target. Recon, SMB enumeration, exploitation, and proof of SYSTEM access.