Write-ups

In-depth research and notes on security technologies, tradecraft, and lab write-ups.

Active Directory Pentesting August 23, 2026 18 min read

DarkZero | HackTheBox

A hard-difficulty Windows AD box built around a cross-forest MSSQL trusted link, SeServiceLogonRight abuse to recover SeImpersonatePrivilege, and unconstrained TGT delegation …

HackTheBox Active Directory MSSQL Cross-Forest Trust

Active Directory Pentesting August 21, 2026 10 min read

DACL Attacks 1 | HTB Academy

My write-up for the skills assessment of HTB Academy's DACL Attacks I module. Starting from a low-priv foothold, we chain a targeted Kerberoast, two separate WriteOwner/GenericAll …

HTB Academy Active Directory DACL Kerberoasting