Solved "Hercules" on Hack The Box, learned AD lessons

Received a $50 bounty for identifying a session invalidation flaw. After a password change, existing sessions were supposed to be logged out automatically — but one session stayed active, allowing continued access and even data modification. Reported it responsibly, and the team acknowledged the issue with a reward. I often document such findings and write-ups here: https://lnkd.in/dCg5hH82

#RedTeam_Tip: Generic credentials aren’t just a bad habit - they’re a direct path to privilege escalation. In this blog, we explore how shared, predictable passwords can accelerate an attacker’s journey to Domain Admin. Explore:  https://lnkd.in/dj6kRReP

Your basic but most important line of defence is password! It's basically a simple screen lock that does the magic sometimes but securing your digital assets with secret keys is so important that it can't be overemphasized. Create a strong, unique and hard to guest password for your safety, a minimum of 8 characters mixture of: Numbers Alphabet Special Characters It's not just about locking it, it's about locking the right way, no one should guest your password. Your name, date of birth or phone number as a password is bad practice, avoid it to be safe! Stay vigilant, stay locked, stay sensitive and stay protected!

Your basic but most important line of defence is password! It's basically a simple screen lock that does the magic sometimes but securing your digital assets with secrets keys is so important that it can't be overemphasize. Creat a strong, unique and hard to guest password for your safety, a minimum of 8 characters mixture of: Numbers Alphabet Special Characters It's not just about locking it, it's about locking the right way, no one should guest your password. Your name, date of birth or phone number as a password is bad practice, avoid it to be safe! Stay vigilant, stay locked, stay sensitive and stay protected

Seeing CVE-2025-2747 land on the CISA KEV list immediately took me back to ZeroLogon (CVE-2020-1472). Different products, same lesson: a pre-auth authentication bypass can lead to full domain takeover when chained with other weaknesses. TryHackMe provides a lab demonstrating ZeroLogon exploitation and the use of secretsdump and evil-winrm to extract and use credentials in a controlled environment. Quick wins: inventory affected systems and patch; isolate staging/sync services if you can’t patch; and add focused monitoring for authentication anomalies (Netlogon/AD events). #infosec #vulnerabilitymanagement #zeroday #ADsecurity

CVE-2025-56801 | *Severity:* UNKNOWN Bug Bounty Relevance: HIGH Hardcoded credentials in AES-CFB encryption allow an attacker with access to the Reolink Desktop Application environment to decrypt encrypted configuration data, potentially exposing sensitive information. Strategy: Test for hardcoded credentials in binaries and configurations; analyze network traffic for encrypted communication patterns or key usage. https://lnkd.in/epDRhdhX

CVE-2025-56801 | *Severity:* UNKNOWN Bug Bounty Relevance: HIGH Hardcoded credentials in AES-CFB encryption allow an attacker with access to the Reolink Desktop Application environment to decrypt encrypted configuration data, potentially exposing sensitive information. Strategy: Test for hardcoded credentials in binaries and configurations; analyze network traffic for encrypted communication patterns or key usage. https://lnkd.in/epDRhdhX

It’s inevitable. Threat actors will always find ways to evade EDR, just like they did recently with EDR-Freeze.  Did you know modern #NDR solutions can help you  detect attackers’ post-compromise actions after freezing an EDR agent? Learn how ExtraHop can spot:  → Lateral movement → Command-and-control (C2) communication → Data exfiltration 

It’s inevitable. Threat actors will always find ways to evade EDR, just like they did recently with EDR-Freeze.  Did you know modern #NDR solutions can help you  detect attackers’ post-compromise actions after freezing an EDR agent? Learn how ExtraHop can spot:  → Lateral movement → Command-and-control (C2) communication → Data exfiltration 

The latest EDR evasion technique, EDR-Freeze, highlights a growing truth: endpoint defenses alone are not enough. With this new tool, threat actors exploit legitimate Windows Error Reporting processes to stay under the radar. Learn more about the latest EDR evasion technique on the blog: https://xtra.li/46VLJMe