MyHack

Easy box with SMB null session for initial foothold, RID bruteforce to get hints of a machine account, password reset, and ESC1 abuse through ADCS to escalate to Domain Admin.

Backdooring a ClickOnce deployment, which led to code execution. SCCM Client Push Coercion to capture NTLM hashes, privesc using ADCS by forging a certificate and abusing it with PassTheCert to grant DCSync rights.

Shibuya: Kerberos abuse, Cross-session relay, and ESC1 to escalate to Administrator.

Speed up key repeat on Arch with one simple config..

Writeup: I Want Pie - (NahamCon CTF 2025)

Bypass de multisig con array vacío..

Explotación de underflow en smart contracts.

Writeup del Chain HARD de Vigilant (Vulnlab).

Mi playlist de spotify para hacking y ctfs.

Mi Arch Linux: Personalizacion y Rendimiento.