Internal Pentest | writeups.xyz

Title	Vulnerabilities	Programs	Authors
Drop the Mic (CVE-2019-1166)	NTLM MiTM Internal Pentest	Microsoft (Windows)	AJ Hammond (@4JMAN)
Dumping LSA secrets: a story about task decorrelation	EDR Bypass Windows Internal Pentest Red Team	Undisclosed	Aurélien Chalot (@Defte_)
Hello: I’m your Domain Admin and I want to authenticate against you	RCE Privilege Escalation Authentication Coercion Active Directory NTLM Internal Pentest	Microsoft	Ap (@Decoder_it)
Pwn Dat Domain: Becoming Domain Admin With A Little Help From Veeam Backup	Active Directory Red Team Internal Pentest	Undisclosed	Roberto Soares (@Espreto)
Hello: I’m your ADCS server and I want to authenticate against you	ADCS Authentication Coercion Active Directory Privilege Escalation Internal Pentest	Undisclosed	Ap (@Decoder_it)
Exploiting stale ADIDNS entries	Internal Pentest Active Directory	Undisclosed	Alain Mowat (@Plopz0r)
From NTAuthCertificates to “Silver” Certificate	ADCS Active Directory Persistence Internal Pentest	Undisclosed	Ap (@Decoder_it)
GPOddity: Exploiting Active Directory GPOs Through NTLM Relaying, And More!	Active Directory Privilege Escalation NTLM Internal Pentest	Undisclosed	Quentin Roland (@Croco_byte)
PenTales: Old Vulns, New Tricks	Internal Pentest	Undisclosed	Austin Guidry
Domain Takeover Without Domain Admin Permissions	Active Directory Privilege Escalation Internal Pentest	Undisclosed	Joe Helle (@Joehelle)
Multiple vulnerabilities in UCOPIA <= 6.0.7 (CVE-2022-44719 / CVE-2022-44720)	Security Misconfiguration Local Privilege Escalation Internal Pentest	Weblib (Ucopia)	Jean Bonnevie Paul Barbé
Anonymised Penetration Test Report	Internal Pentest RCE ADCS Active Directory Kerberos DHCPv6 LLMNR	Undisclosed	Volkis (@VolkisAU)
How Misconfigured and Vulnerable Devices Could Expose Your Company to Physical and Cyber Threats	IoT Default Credentials Internal Pentest	Undisclosed	Arben Shala (@Arbennsh)
From DA to EA with ESC5	Active Directory Privilege Escalation Internal Pentest	Undisclosed	Andy Robbins (@_Wald0)
IPv6 DNS Takeover via mitm6 (Write Up)	MiTM IPv6 DNS Takeover Misconfigured LDAP Server Internal Pentest	Undisclosed	Evan Ricafort (@Evanricafort)
From BitLocker-Suspended to Virtual Machine	Internal Pentest	Undisclosed	Reino Mostert
Protected Users: you thought you were safe uh?	Active Directory Kerberos NTLM Internal Pentest	Microsoft (Windows)	Aurélien Chalot (@Defte_) Thomas SEIGNEURET (@_Zblurx)
Finding Initial Access on a real life Penetration Test	Old Components With Known Vulnerabilities Internal Pentest RCE	Undisclosed	Warren Butterworth (@W88ugs)
Assumed Breach Assessment Case Study: Uncovering WeSecureApp’s Approach	Internal Pentest Missing Authentication Hardcoded Credentials Cloud	Undisclosed	WeSecureApp (@Wesecureapp)
[RE:SCRUTINY] Delay Then Migrate Your Meterpreter	Internal Pentest Lateral Movement	Undisclosed	RE:HACK (@Rehackxyz)

Page 1 of 1