stuff I've been poking at

Fixing an impacket bug - how 3-part SPN service tickets can break most tools you use

context lately while playing with an red teaming lab featuring active directory, I got administrator in one of the machines, and used rubeus’s triage module to check kerberos tickets cached in mem...

Below Local Privilege Escalation Vulnerability - A look at CVE-2025-27591

Introduction first seen on 0x00sec CVE-2025-27591 is a Local Privilege Escalation (LPE) vulnerability affecting below, a time-traveling resource monitor for Linux developed by Facebook Incubator....

Dynamically Extracting The Encryption Key From A Simple Ransomware

recently I’ve played ransomware101 room in secdojo website where I was given a windows box that has a flag ecrypted by a ransomware, and I had to figure out the decryption key to recover it, the ra...

Optimizing Windows Function Resolving A Case Study Into GetProcAddress

Written by hypervis0r and Jeff Introduction It was a cold winter morning. hypervis0r had just woken up at 1 AM because his sleep schedule was royally fucked, and he hopped onto the private phaset...