Write-ups

In-depth research and notes on security technologies, tradecraft, and lab write-ups.

Windows Pentesting July 6, 2026 7 min read

Remote | HackTheBox

An easy Windows box running Umbraco CMS. Creds leak from a world-readable NFS share, an authenticated Umbraco exploit gets a foothold, and a Print Spooler abuse gets SYSTEM.

HackTheBox pentesting Windows Umbraco

DFIR October 20, 2025 11 min read

GroundWorm | HackTheBox

A walkthrough of GroundWorm, a hard-rated DFIR Sherlock on HackTheBox, tracing a simulated APT attack from initial access through ransomware deployment using Splunk and API …

DFIR threat hunting HackTheBox Sherlock