How the Kerberos Protocol Works
Complete guide on how the Kerberos protocol works in Active Directory, explaining each step of the authentication process from KRB_AS_REQ to KRB_AP_REQ.
Sep 26, 2022 Juan Antonio González Mena
All Posts
130 articles
Linux Privilege Escalation Through Incorrect Permissions
Complete guide on Linux privilege escalation by exploiting incorrect permissions on critical files like /etc/shadow, /etc/passwd, and /etc/sudoers.
Aug 29, 2022 Juan Antonio González Mena
eWPTXv2 Review - eLearnSecurity Web Application Penetration Tester eXtreme 2022
Complete review of INE Security's eWPTXv2 certification: advanced web pentesting course, bypass techniques, challenging exam, and my experience obtaining the certification.
Aug 22, 2022 Juan Antonio González Mena
XSS Through DNS Records
Learn how to execute XSS by hosting malicious payloads in different types of DNS records such as MX, NS, CNAME, and TXT.
Jul 21, 2022 Eric Labrador
PNPT Review - Practical Network Penetration Tester 2022
Complete review of TCM Security's PNPT certification: practical pentesting course, Active Directory, realistic 5-day exam, and my experience obtaining the certification.
Jul 4, 2022 Juan Antonio González Mena
CSRF vulnerability with no defenses – PortSwigger Write Up
Learn how to exploit a CSRF vulnerability without defenses in PortSwigger Lab. Step-by-step guide to create a malicious HTML page that changes the victim's email through Cross-Site Request Forgery.
Jun 14, 2022 Juan Antonio González Mena
How Cross-site Request Forgery (CSRF / XSRF) Works
Learn how the Cross-site Request Forgery (CSRF) attack works, its conditions, practical exploitation examples, and main defenses like CSRF tokens and the SameSite attribute.
Jun 13, 2022 Juan Antonio González Mena
CRTP + Bootcamp Review - Certified Red Team Professional 2022
Complete review of Altered Security's CRTP certification: course content, Active Directory labs, hands-on exam, and my experience as a Certified Red Team Professional.
Jun 10, 2022 Juan Antonio González Mena
What is Cross-Origin Resource Sharing (CORS)
Detailed explanation of Cross-Origin Resource Sharing (CORS), its HTTP headers, functionality, and potential configuration vulnerabilities in web applications.
May 9, 2022 Juan Antonio González Mena