<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>LAPS on WE ARE THE BUG</title><link>https://wearethebug.dev/tags/laps/</link><description>Recent content on WE ARE THE BUG</description><generator>Tradecraft</generator><language>en-us</language><lastBuildDate>Fri, 28 Aug 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://wearethebug.dev/tags/laps/index.xml" rel="self" type="application/rss+xml"/><item><title>NetExec Advanced</title><link>https://wearethebug.dev/posts/netexec-advanced/</link><pubDate>Fri, 28 Aug 2026 00:00:00 +0000</pubDate><guid>https://wearethebug.dev/posts/netexec-advanced/</guid><description>Follow-up to the NetExec cheatsheet: deeper Active Directory abuse techniques, delegation attacks, and operational tooling for experienced operators.</description></item><item><title>VULNLAB: Tea</title><link>https://wearethebug.dev/posts/vl-tea/</link><pubDate>Fri, 05 Jan 2024 00:00:00 +0000</pubDate><guid>https://wearethebug.dev/posts/vl-tea/</guid><description>Tea is a medium-rate small Active Directory chain that provides hands-on experience with common Active Directory and DevOps vulnerabilities and misconfigurations, demonstrating how attackers can pivot between services and retrieve sensitive data to move laterally and escalate privileges.</description></item><item><title>VULNLAB: Reflection</title><link>https://wearethebug.dev/posts/vl-reflection/</link><pubDate>Sat, 10 Jun 2023 00:00:00 +0000</pubDate><guid>https://wearethebug.dev/posts/vl-reflection/</guid><description>Reflection is a medium-difficulty Active Directory chain that simulates a vulnerable enterprise environment and challenges users to progress from limited access to Domain Administrator. Including 3 machines, with anonymous SMB bind abuse, MSSQL abuse, NTLM relay attacks, Windows Credential Vault harvesting, Resource-Based Constrained Delegation (RBCD), and finally credential reuse.</description></item></channel></rss>