WE ARE THE BUG
WE ARE THE BUG
ARCHIVES ABOUT RESEARCH TOOLS MISC GH
ARCHIVES ABOUT RESEARCH TOOLS MISC GH

    Kerberoasting

    bloodyAD

    Active Directory privilege escalation swiss-army knife. Quick reference for common bloodyAD operations.

    September 12, 2026 · 2504 words · 12 min
    Linux Active Directory Python LDAP DACL RBCD ASREPROASTING KERBEROASTING Domain Trusts

    ERTLabs: MailService

    MailService is a multi-stage internal penetration test scenario that required chaining several techniques across both Linux and Windows domains.

    August 29, 2025 · 17103 words · 81 min
    Medium Windows CVE-2019-18988 SeImpersonatePrivilege Kerberoasting Constrained Delegation

    VULNLAB: Shinra

    Shinra is a Hard-rated Red Team lab designed for those with foundational AD and pentesting knowledge to refine covert red teaming skills. Players focus on AD …

    March 9, 2025 · 16747 words · 79 min
    Hard Windows Command injection RCE Roundcube Password spray SMB share Kerberoasting Phishing C2 SeDebugPrivilege Reverse engineering CVE-2023-4911 Ansible vault NPM WDAC

    VULNLAB: Breach

    Breach is a medium difficulty Windows machine, where guest access to an SMB share is available. By leveraging write permissions on that SMB share, NTLMv2 hashes …

    February 14, 2023 · 4754 words · 23 min
    Medium Windows SMB share NTLM hash Kerberoasting Silver Ticket xp_cmdshell SeImpersonatePrivilege

    VULNLAB: Bruno

    Bruno is a medium-rated Windows domain box that chains insecure application configuration and weak Active Directory hygiene to go from no access to domain …

    July 2, 2022 · 4251 words · 20 min
    Medium Windows ASREPRoasting Kerberoasting DLL hijack Kerberos relay RBCD CVE-2023-28252

    VULNLAB: Lustrous

    Lustrous is a Hard-rated chain consisting of 2 machines on vulnlab. Cevering AS-REP roasts, Kerberoasts, the main lesson on this chain is to demonstrate how …

    December 25, 2021 · 2349 words · 12 min
    Hard Windows FTP ASREPRoasting Kerberoasting Silver Ticket SeBackupPrivilege

    No posts match this tag.

      Copyright 2026. WE ARE THE BUG · authorized research & for education purpose only
      Built with Hugo & 💜+🧠