notrubberduck
"Complexity is the enemy of security."
Overview
# Fixing the issue (in theory)
sudo rm -rf /
Latest Reports
[REPORT] DCSync Attack: Stealing Password Hashes from Active Directory
December 22, 2025Active Directory (AD) is the backbone of authentication and authorization in most enterprise networks. One of the most powerful attacks against AD is the DCSync attack, which allows attackers to simulate the behavior of a Domain Controller (DC) and extract sensitive credential data, including password hashes and Kerberos keys.
[REPORT] AS-REP Roasting: A Stealthy Active Directory Attack Explained
December 21, 2025AS-REP roasting abuses a common Active Directory misconfiguration to extract crackable password hashes without authentication or account lockouts, making it a stealthy and dangerous attack vector.
Targets & Tools
[TOOL] Dns-Exfiltration
A Python-based DNS server that can receive and reconstruct data transmitted through DNS queries. This tool is useful for data exfiltration scenarios where traditional network communication methods are restricted.
[TOOL] Inficted
An open-source engine for monitoring data breaches and leaks from various sources.