
certificate-of-compromise
SoK/Whitepaper on Offensive Operations against Active Directory Certificate Service

SoK/Whitepaper on Offensive Operations against Active Directory Certificate Service

Reproduction of cve-2025-53779-kerberos_bypass_reproduction

A minimalist Local Privilege Escalation (LPE) vulnerability checker for CVE-2023-21817 (Windows Kerberos LPE) written in C++.

PEAK Baseline Threat Hunt dashboards for Security Onion 3.0 — covering DNS, HTTP, TLS, SMB, Kerberos, SSH, RDP, DCE/RPC, LDAP, Modbus, DNP3,…

Kerberos RC4 deprecation: detection, remediation and guidance (CVE-2026-20833)

Comprehensive self-paced manual on Windows identity, Kerberos, and PKI internals, covering credential dumping, ticket forgery, domain persistence,…

Demos for the Blackhat USA 2022 talk "Taking Kerberos to the Next Level"

Hashcat reference for OSCP/penetration testing: hash identification, cracking syntax for Linux, Windows, archives, databases, Kerberos tickets, and…