Chasing the Ghost in the Log: A Deep Dive into CVE-2026-20820
Microsoft called it a heap overflow; my debugger said otherwise. Follow my journey from a Bindiff mismatch to a kernel-mode OOB write in clfs.sys
Have You Looked in the Trash? Unearthing Privilege Escalations from the Active Directory Recycle Bin
How overlooked objects in AD's Recycle Bin can become a goldmine for attackers—and what defenders need to know
Performing AD LDAP Queries Like a Ninja
Strategies to minimize logging generation, and methods to enhance logging efficiency
BitLocker enabled. Are you really protected?
Review of the current security level brought by BitLocker against data theft
Implementing S/MIME with Exchange Online and OWA
Implementing S/MIME with Exchange Online and OWA for secure email communications
Exploiting Certifried (CVE-2022-26923)
Discover how to exploit the certifried vulnerability easily with bloodyAD.
Soka
•
•
2 min read
Playing with Kerberos
Take full control of the Kerberos protocol on Active Directory using bloodyAD.
Certificate authentication dug up
Leverage certificate-based authentication power on Active Directory environment.