abdulmhsblog.comadded August 2026
Recently on engagements I started experiencing two reoccurring patterns, the first being that certipy and certify would both show me that a endpoint is not vulnerable to the ESC8 attack even though...
Abduls Blog24 Jun 202651 human-writing confidence
AWS Pentesting Cheatsheet This cheatsheet was written after a long winded engagement in which I took all my personal notes, some notes from the internet and fed them into AI to make sense of all...
Abduls Blogby Authentication vs authorization20 Jun 202651 human-writing confidence
Having improved/built on impacket internally at my work place, I wanted to take the next step in contributing to the library by way of new modules.
Abduls Blog27 May 202651 human-writing confidence
This cheatsheet hopes to serve as a practical, copy-paste field reference for Titanis, which is a library made by TrustedSec and is cross-platform C# / .NET 8 protocol library and toolset for...
Abduls Blog25 May 202651 human-writing confidence
The Problem If you are like me, you have found yourself digging through Microsoft specifications and RFC documentation trying to wrangle with a new exploit or tooling to get DA faster than your...
Abduls Blog22 May 202651 human-writing confidence
The recent leak as well as it being brought to my attention by Ian from Packetlabs, made me super interested in the malware Ive been hearing so much about.
Abduls Blog16 May 202651 human-writing confidence
Repository Used: https://github.com/PedroTortoriello/Shai-Hulud-Open-Source Last known commit: da10861 — "Shai-Hulud: A Gift From TeamPCP" The analysis of the repository shared by TeamPCP was...
Abduls Blog13 May 202651 human-writing confidence
A few months ago I started what I thought was fairly straight forward piece of work: rewrite/fork Impacket internally for use at my current company.
Abduls Blog10 May 202651 human-writing confidence
Introduction: The Day My Toolbox Failed Me Picture this: You’re deep into an engagement, credentials in hand, ready to unleash your best, brightest ideas And then… nothing.
Abduls Blog23 Apr 202651 human-writing confidence
I was doing an internal engagement some time ago for a client and noticed that the CA was configured for constrained delegation with a system that looked like a Web Server.
Abduls Blog27 Mar 202651 human-writing confidence
During a recent penetration test I did against a critical infrastructure operator, I had achieved Domain Administrator through two independent routes; ADCS ESC4, and by combining an LMCompatibility...
Abduls Blog5 Mar 202651 human-writing confidence
Quick Intro As an electrical engineer with a passion for electronics, I have recently been reverse engineering and researching commonly deployed edge and IoT devices found in critical use...
Abduls Blog26 Nov 202551 human-writing confidence
While the core concepts aren’t new, I believe the use of ADCS for domain computer takeover through Virtual Account abuse is previously undocumented/unexplored route to achieving your goals.
Abduls Blog13 Oct 202551 human-writing confidence
We all know the classic RID 500 administrator account, the one who’s able to use NTLM authentication even with “Protected user” membership and is your go to during delegation attacks but there’s a...
Abduls Blog13 Jul 202551 human-writing confidence