My CPTS Exam Experience
How I prepared for CPTS, the rabbit holes I fell into during the exam, and the things I missed while enumerating.
4ym3n / field notes
Security research & field notes.
Reverse engineering, Active Directory, and lessons from breaking things. Written as I learn.
Search writeups, topics, and commandsLatest posts
24 articlesFrom gMSA to dMSA: Understanding BadSuccessor and BetterSuccessor
A technical deep dive into Active Directory managed service accounts, dMSA migration, Kerberos authentication, and the BadSuccessor and BetterSuccessor privilege escalation …
My OSCC-SEC Experience: How I Prepared for Attack, Defend, and Build
My honest OSCC-SEC review: how I prepared for Attack, Defend, and Build, what I overthought, and how the six-hour exam went.
Certified Red Team Professional (CRTP) - Review
My CRTP course and exam experience: learning Active Directory from scratch, preparing for the practical exam, and the lessons that helped.
Certified Red Team Professional (CRTP) - Practical Exam Cheatsheet
A practical command reference for the CRTP exam, covering BloodHound collection, domain enumeration, Kerberos, and session preparation.
Certified Red Team Professional (CRTP) - Course Summary Notes
Study notes covering PowerShell, Active Directory enumeration, Kerberos, credential access, and the techniques covered in the CRTP course.
Emulator
“Inside an emulator, reality bends—only shadows find the hidden truth.”
Nim Yong Un
Our agents captured some North Korean military software. Your task: find the correct launch code!