BadSuccessor-PoC

🛡️ Advanced BadSuccessor CVE-2025-53779 – Weaponized PoC & D...

Containing a domain compromise: How predictive shielding shut down lateral movement

In this article 1. Predictive shielding overview 2. Attack chain overview 3. How predictive shielding changed the outcome 4. MITRE ATT&CK® techniques observed 5. Learn more In identity-based attack campaigns, any initial access activity can turn an already serious intrusion into a critical incide...

April Microsoft Patch Tuesday

April Microsoft Patch Tuesday. A total of 167 vulnerabilities, about twice as many as in March. There is one vulnerability already being exploited in the wild: 🔻 Spoofing - Microsoft SharePoint Server CVE-2026-32201. ZDI experts say "Spoofing bugs in SharePoint often manifest as cross-site...

ofensive-playbook

HackTheBox — Writeups Collection A collection of HackTheBox m...

CVE-2026-32072

Improper authentication in Windows Active Directory allows an unauthorized attacker to perform spoofing locally...

CVE-2026-33826

Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network...

EUVD-2026-22645

Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network...

EUVD-2026-22497

Improper authentication in Windows Active Directory allows an unauthorized attacker to perform spoofing locally...

CVE-2026-33826

Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network...

CVE-2026-32072

Improper authentication in Windows Active Directory allows an unauthorized attacker to perform spoofing locally...

CVE-2026-32072 Active Directory Spoofing Vulnerability

...

CVE-2026-32072

CVE-2026-32072 corresponds to an unauthenticated spoofing vulnerability in Windows Active Directory (local access). The Red Hat and NCSC entries corroborate the flaw as an AD authentication issue with local spoofing potential. Public documentation lists this CVE under Windows Active Directory wit...

CVE-2026-32072 Active Directory Spoofing Vulnerability

...

CVE-2026-33826

CVE-2026-33826 is a Windows Active Directory (AD DS) Remote Code Execution vulnerability. Connected documents describe an unauthenticated network-based exploit where malformed Kerberos/RPC authentication requests to a Domain Controller trigger memory corruption in LSASS, allowing arbitrary code e...

CVE-2026-33826 Windows Active Directory Remote Code Execution Vulnerability

...

CVE-2026-33826 Windows Active Directory Remote Code Execution Vulnerability

...

CVE-2026-33826

Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network...

Windows Active Directory Remote Code Execution Vulnerability

Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network...

Active Directory Spoofing Vulnerability

Improper authentication in Windows Active Directory allows an unauthorized attacker to perform spoofing locally...

Microsoft Windows Active Directory 输入验证错误漏洞

Microsoft Windows Active Directory is a centralized directory management service provided by Microsoft for managing large-scale network environments. It stores information about objects on the network, enabling administrators and users to easily find and use this information. There is an input...