
Windows Privilege Escalation without CA, LDAPS and SPN using NTLMRelay2Self with RBCD
Using NTLMRelay2self with RBCD and BloodyAD to escalate privileges on a Windows system with LDAPS being blocked on the domain controller.
Using NTLMRelay2self with RBCD and BloodyAD to escalate privileges on a Windows system with LDAPS being blocked on the domain controller.
Defeating Credential Guard by misusing its own functions
Using NTLM Relay to authenticate a system to itself over HTTP with WebDav without Printer Spooler and DNS
Hacking the Bitwarden vault PIN using Firefox extension data
Build events in Visual Studio can be dangerous