Posts

Local Jenkins credential tests: credentials.xml, master.key, hudson.util.Secret, and decryption checks for passwords and SSH private keys.

• jenkins
• Credential Cracking
• Scripts

MCP hosts, clients, servers, and JSON-RPC: chart and search integrations, plus building and calling a weather service with Python and uv.

• Anthropic
• LLM
• AI

NTLM hash credentials, SAM, LSASS, and domain scenarios: Pass the Hash with Impacket and Mimikatz, plus credential-protection measures.

• Lateral Movement
• Windows
• Penetration Testing Studies

Tsclient: leaked MSSQL credentials, Windows escalation, Cobalt Strike sessions, domain lateral movement, three flag clues, and Beacon and payload basics.

• Chunqiu Cloud Realm
• Tsclient
• Domain Penetration

A Brute4Road walkthrough covering Redis, Linux SUID escalation, proxy forwarding, and internal scanning, then obtaining four flags through WordPress, MSSQL, and domain credentials.

• Chunqiu Cloud
• Brute4Road
• Domain Penetration

CRLF response splitting and header boundaries: local injection reproduction, cache poisoning, session fixation, and framework newline filtering.

• HTTP
• Security Analysis
• Web

Go html/template versus text/template: local injection examples, context access, and why command execution needs exposed callable functions.

• Go
• CTF
• Web

Explains HTTP/1.1 request smuggling, the CL·TE and TE·CL variants, and approaches to detection and defense.

• HTTP
• Security Analysis
• Web