Living Off the Land: A Technical Case Study in LOLBin Abuse
A per-tool breakdown of how LOLBins work, how they're abused, how to test for exposure, and what defenders can actually do about it.
Sam Ireton
What the CVE Funding Crisis Means for Network Defenders
The near-shutdown of the CVE program in 2025 exposed a fragility in how most organizations handle vulnerability management. Here's what it means if you're responsible for a network.
Are You as Vulnerable as They Say?
Attackers use simple, predictable kill chains to target you. Targeted advertising tries to scare you into thinking it's complicated. Here's what actually protects your data.
Methodology — Index & Overview
A living methodology reference built around the HTB CPTS curriculum. Covers the full engagement lifecycle from recon through reporting.
01 — Recon & Enumeration
Recon phase methodology — full checklist, nmap workflow, web fuzzing, SMB/DNS/LDAP enumeration commands with annotated explanations.
02 — Foothold
Foothold phase methodology — service-based entry points, CVE exploitation workflow, default credential checks, and web application entry vectors.
03 — Post-Exploitation
Post-exploitation methodology — situational awareness, Linux/Windows privesc, SUID, sudo, scheduled tasks, Potato attacks, automated enumeration.
04 — Lateral Movement
Lateral movement methodology — SSH tunneling, chisel, ligolo-ng, pass-the-hash, pass-the-ticket, remote execution techniques.
05 — Active Directory
Full AD attack methodology — unauthenticated enumeration to Domain Admin. Covers Kerberoasting, AS-REP Roasting, BloodHound, ACL abuse, DCSync.
06 — Web Attacks
Web attack methodology — checklist, SQLi/LFI/SSRF/XXE quick detection, command injection, file upload attacks, and Burp Suite workflow.