https://blog.wirehawksecurity.com/posts/Recent content in Posts on WireHawk Security | BlogHugoen-usSun, 02 Aug 2026 00:00:00 +0000https://blog.wirehawksecurity.com/posts/shadowgate2/Sun, 02 Aug 2026 00:00:00 +0000https://blog.wirehawksecurity.com/posts/shadowgate2/A medium-difficulty Active Directory lab chaining a SQL injection auth bypass, an NTLMv2 capture through a file-upload portal, a WriteOwner and GenericAll ACL chain, a deleted-account recovery, and ESC3 enrollment-agent abuse to enroll as Administrator.https://blog.wirehawksecurity.com/posts/martiniad/Thu, 23 Jul 2026 00:00:00 +0000https://blog.wirehawksecurity.com/posts/martiniad/An easy-difficulty Active Directory lab chaining anonymous SMB access, plaintext credentials left on an open share, Kerberoasting, and password reuse on a tier 0 admin account to dump NTDS and recover the krbtgt hash.https://blog.wirehawksecurity.com/posts/arasaka/Wed, 22 Jul 2026 00:00:00 +0000https://blog.wirehawksecurity.com/posts/arasaka/An easy-difficulty Active Directory lab chaining Kerberoasting, a GenericAll and GenericWrite ACL chain, and ESC1 certificate abuse against an expired admin to reach a live Domain Administrator and dump NTDS.https://blog.wirehawksecurity.com/posts/welcome/Sun, 05 Jul 2026 00:00:00 +0000https://blog.wirehawksecurity.com/posts/welcome/An easy-difficulty Active Directory lab chaining SMB share enumeration, PDF cracking, password spraying, GenericAll and ForceChangePassword ACL abuse, and ESC1 certificate exploitation for full domain compromise.https://blog.wirehawksecurity.com/posts/bugforge/Sun, 28 Jun 2026 00:00:00 +0000https://blog.wirehawksecurity.com/posts/bugforge/A completely free platform for practicing web application penetration testing with daily and weekly labs, built by Alex Olsen.https://blog.wirehawksecurity.com/posts/verbose/Sun, 28 Jun 2026 00:00:00 +0000https://blog.wirehawksecurity.com/posts/verbose/An easy-difficulty web application lab chaining a verbose API credential leak, MFA bypass, and Jinja2 SSTI through image metadata injection to achieve root access.https://blog.wirehawksecurity.com/posts/shadowgate/Mon, 15 Jun 2026 00:00:00 +0000https://blog.wirehawksecurity.com/posts/shadowgate/An easy-difficulty Active Directory lab chaining anonymous SMB enumeration, AS-REP Roasting, Targeted Kerberoasting, and ESC8 NTLM relay to extract the krbtgt hash for full domain compromise.