From gMSA to dMSA: Understanding BadSuccessor and BetterSuccessor
A technical deep dive into Active Directory managed service accounts, dMSA migration, Kerberos authentication, and the BadSuccessor and BetterSuccessor privilege escalation …
4ym3n / field notes
Security research & field notes.
Reverse engineering, Active Directory, and lessons from breaking things. Written as I learn.
Search writeups, topics, and commandsLatest posts
23 articlesMy OSCC-SEC Experience: How I Prepared for Attack, Defend, and Build
My honest OSCC-SEC review: how I prepared for Attack, Defend, and Build, what I overthought, and how the six-hour exam went.
Certified Red Team Professional (CRTP) - Review
My CRTP course and exam experience: learning Active Directory from scratch, preparing for the practical exam, and the lessons that helped.
Certified Red Team Professional (CRTP) - Practical Exam Cheatsheet
A practical command reference for the CRTP exam, covering BloodHound collection, domain enumeration, Kerberos, and session preparation.
Certified Red Team Professional (CRTP) - Course Summary Notes
Study notes covering PowerShell, Active Directory enumeration, Kerberos, credential access, and the techniques covered in the CRTP course.
Emulator
“Inside an emulator, reality bends—only shadows find the hidden truth.”
Nim Yong Un
Our agents captured some North Korean military software. Your task: find the correct launch code!
bilingual
When running this on Linux, I encountered an error due to an invalid ELF header. This suggests that hello.bin is not a native Linux binary, but rather a Windows DLL or some other …