A quiet corner for IT security in Windows environments: how attacks work, and what actually stops them. Slow-brewed by Lukas.
35 articles, 13 Hack The Box write-ups, writing since 2023.
TODO: patch the DC ✓
Tools
Windows logs a lot of NTLM activity, but you have to piece it together yourself. I built a tool that shows which users and programs still use NTLMv1 or NTLMv2, and what already runs over Kerberos.
Project #01
Shows which users, machines and programs still use NTLMv1 or NTLMv2, and why Kerberos was not used. Agent on Windows, collector on Linux.
who still speaks NTLM?
Project #02
Your own second factor for the Windows logon: a credential provider plus an LSA authentication package, in C++.
a double shot for your logon
me, on Hack The Box ↗Hack The Box write-ups, 13 baked so far. Only retired boxes make it into the case: day-old, still delicious.
Stammgast
No newsletter, no tracking, no cookie banner. Just a feed that tells you when a fresh pot is ready.
Subscribe via RSSHausordnung
Found a crack in the cup? Tell the barista, not the whole café. Responsible disclosure details live in security.txt.
Read security.txtBehind the counter
Lukas. Wannabe ethical hacker, Hack The Box regular, nine stamps on the cert loyalty card.
servus! →