OSWE Review - Offensive Security Web Expert 2023
Complete review of OffSec's OSWE certification: advanced web security course, code analysis, whitebox exam, and my experience obtaining the certification.
All Posts
119 articles
AS-REQroasting, AS-REProasting and TGS-REProasting (Kerberoasting) - Kerberos
Learn to exploit the three phases of the Kerberos protocol through AS-REQroasting, AS-REProasting and Kerberoasting to obtain credentials in Active Directory environments.
Dec 19, 2022 Juan Antonio González Mena
Creating a Work Environment in Android
Complete guide to creating a virtualized work environment in Android: Android Studio installation, emulator configuration, ADB usage, and essential tools for mobile audits.
Dec 12, 2022 Pablo Castillo
How to Get a Job in Cybersecurity
Real experiences from cybersecurity professionals about how they got their first jobs: advice, lessons learned, and pathways to enter the sector.
Nov 25, 2022 Juan Antonio González Mena
How to Break Windows Defender (and explorer.exe by Accident)
Technical process that led to causing a crash in explorer.exe and disabling Windows Defender through the suspension of protected processes in Windows
Nov 21, 2022 Daniel Monzón
OSCP Review - Offensive Security Certified Professional 2022
Complete review of OffSec's OSCP certification: legendary pentesting course, PWK labs, 24-hour exam, and my experience obtaining the most recognized certification.
Oct 31, 2022 Juan Antonio González Mena
Linux Privilege Escalation via Cron Jobs
Learn to identify and exploit misconfigurations in Linux Cron Jobs to escalate privileges through weak permissions, PATH, and wildcards.
Oct 26, 2022 Andrés González
How the Kerberos Protocol Works
Complete guide on how the Kerberos protocol works in Active Directory, explaining each step of the authentication process from KRB_AS_REQ to KRB_AP_REQ.
Sep 26, 2022 Juan Antonio González Mena
Linux Privilege Escalation Through Incorrect Permissions
Complete guide on Linux privilege escalation by exploiting incorrect permissions on critical files like /etc/shadow, /etc/passwd, and /etc/sudoers.
Aug 29, 2022 Juan Antonio González Mena