A quiet corner for IT security in Windows environments: how attacks work, and what actually stops them. Slow-brewed by Lukas.
34 articles, 13 Hack The Box write-ups, writing since 2023.
TODO: patch the DC ✓
Windows
The credential provider from Part 1 only sees the logon screen. Part 2 goes into LSA to close the paths it can't reach, with an authentication package and an MSV1_0 sub-authentication filter in C++.
Project #01
Builds a complete AD tier model for you: OUs, groups, delegation, logon restrictions, LAPS. One PowerShell script, one JSON file.
tier models without the grind
Project #02
Your own second factor for the Windows logon: a credential provider plus an LSA authentication package, in C++.
a double shot for your logon
me, on Hack The Box ↗Hack The Box write-ups, 13 baked so far. Only retired boxes make it into the case: day-old, still delicious.
Stammgast
No newsletter, no tracking, no cookie banner. Just a feed that tells you when a fresh pot is ready.
Subscribe via RSSHausordnung
Found a crack in the cup? Tell the barista, not the whole café. Responsible disclosure details live in security.txt.
Read security.txtBehind the counter
Lukas. Wannabe ethical hacker, Hack The Box regular, nine stamps on the cert loyalty card.
servus! →