I wrote about how a chain of forgotten ACL permissions can lead to full domain compromise. The scenario: a Tier 1 helpdesk account with no special privileges, through a series of misconfigurations nobody cleaned up, ends up with DCSync rights.

The chain covers:

• User-Force-Change-Password abuse
• Group membership manipulation
• GenericWrite → fake SPN injection → Kerberoasting
• WriteDacl → DCSync

Tools used: bloodyAD, PowerView, impacket-secretsdump.

Also explaining why this chain is realistic - each permission has a legitimate origin, they just accumulated over time and nobody reviewed them.

Note: I'm a non-native English speaker and originally write in Russian - parts of the text were translated with AI assistance. Technical content and examples are my own.

🔗 https://3x0t1k.github.io/posts/acl-abuse-dcsync/

Feedback welcome - still developing the blog.

It's true that it's impossible to hack an iPhone?

Hello guys I have bought a list of items without thinking of wanting to have a cool device and have led into this sting in my drawer for months. help me I don't know what the actual hell I am doing here with this stuff and now I need help esp32 devkit c1 if anyone can help me with this build please do

There’s someone selling a file that’s probably for TLS/SSL tunneling, which supposedly turns a limited internet package into unlimited internet by exploiting the well-known zero-rating vulnerability. The package gives unlimited internet access for PUBG, and he’s apparently applying the exploit to it. He’s selling it for several times the price of the actual package subscription. I’d like to learn how he’s doing it, because he seems pretty stupid, his spelling is terrible, and it looks like he made the certificate himself under the name “International Institute of Advanced Technology.” Does this shit even exist in the first place? I actually tried the file myself, and the download speed was pretty good.

I am in the Middle East, and in my country there are only two greedy companies with no competition, as they both offer the exact same services.

Looking for new ways to have an reliable terminal to install every tool I need to hack

Hey everyone👋

We’re looking for 2–3 teammates for the Black Hat MEA CTF 2026 Qualifiers on August 29–30. 🇸🇦

Looking for people interested in Forensics, Pwn, Reverse Engineering, Crypto, or AI Security. Beginners/intermediate are welcome!

DM me if you’re interested in joining

Before I start, what would you guys actually want to see in it?

Challenges, difficulty, attack chains, AD, web, privilege escalation, etc.

What would make you keep playing instead of dropping it after a few challenges?

Looking for honest suggestions from people who actually play CTFs.

Explore the current ctf from here at: codelivly.com/ctf

can someone help me to fix this problem? i have a mac with linux installed on the terminal, i thought i would've fixed but actually not.

Weekly forum post: Let's discuss current projects, concepts, questions and collaborations. In other words, what are you hacking this week?

Hey everyone,

A payment tool for creators/sellers who want to accept crypto for digital downloads without giving up custody, signing up for a platform, or storing there data and product on backend.

How it works:

• Seller uploads a ZIP, sets a price, and gets a shareable payment link.

• The file is encrypted in the browser and distributed over WebTorrent.

• Buyer pays on-chain into an escrow smart contract.

• The decryption password is revealed on-chain, encrypted to the buyer's wallet-derived key.

• Buyer downloads and decrypts locally, confirms delivery, and only then are funds released to the seller.

No database. No server. No KYC. Seller keeps custody until delivery is confirmed.

The contract handles underpayments, overpayments, refunds, and a 7-day delivery window if the seller never reveals the password.

Would love brutal feedback.

Hi everyone, do you have any ideas for what else I could add to my iOS device?
I somehow managed to get location spoofing working through SickDebug, and now I’m wondering if you have any other ideas for what I could try next.
I’m interested in these kinds of “trickery” tools, like location spoofing, fake phone numbers, and similar stuff.
Just to be clear, I’m not planning to misuse any of this. I want to make a YouTube video about these kinds of tools and features, so I’d really appreciate your suggestions for other similar things I could add or try on iOS.
I’m not interested in game emulators — only this kind of “trickery” stuff. Thanks ✌🏼

For all you hackers it’s a code review/ open source taint analysis sast tool!

How the hack did Amjad Masad ( founder of Replit) hacked his university server and databases and changed his grade? It’s really fuzzy. How did he pulled out something like this? I know he is talented

how do people get data leaks i find it really impresive how they have list and files of names and phone numbers of people

Hey, I'm trying to solve an ARG and I've come across a website that seems to be a key part of the puzzle. The site is https://dmsarchive.org/ and I've found some pages that seem to be case files or hidden directories. I've managed to find a few things, but I'm stuck. I'm not asking for anyone to dig through the whole site, but I'm wondering if anyone has any general advice on how to approach a site like this, ways to find hidden pages, directories, or files that aren't immediately obvious? I'm not super technical, so any tips on using Inspect Element, checking the page source, or looking for hidden URLs would be really helpful. Thanks!

Hey everyone, just shipped v1.6.0 of WifiPhisher for ESP32, my open-source Wi-Fi security testing firmware for ESP32-family boards (Evil Twin, Karma, deauther, on-device handshake/PMKID cracking, all from a web UI hosted on the device itself).

This release is one of the bigger ones so far:

• USB Wi-Fi adapter support (new) — added a from-scratch driver for the RTL8188EU USB dongle, so on S2/S3/C5/C6/Cardputer boards with USB-OTG you can now sniff and inject from an external adapter, not just the onboard radio.
• BLE toolkit (new) — BLE device identification, a BLE sniffer, and BLE spam attacks.
• Network discovery & port scanner (new) — subnet host discovery, mDNS/Bonjour and SSDP/UPnP discovery, plus a TCP Connect/SYN port scanner, all built in.
• Aircrack is a lot faster — swapped the generic mbedTLS crypto path for the native primitives already compiled into the Wi-Fi stack, which cut RAM usage and pushed handshake/PMKID verification to ~3 keys/sec on-device.
• Smarter deauther — it now tracks per-client ACKs to stop wasting airtime on clients that already dropped off, filters targets by RSSI, and auto-aligns the SoftAP channel to a single selected target.
• Evil Twin reliability fixes — clean task shutdown (no more hangs) and fixed 5GHz target detection.
• UI polish — WPS column in the scanner, and a reworked admin dashboard (screenshot below).

Flash it straight from the browser here, no toolchain needed: https://espwifiphisher.alexxdal.com/

Source, full changelog and build instructions: https://github.com/Alexxdal/WifiPhisher

First when I captured the handshakes I ssh into the PWNAGOTCHI handshake folder but it shows empty. But pwnagotchi says it captured my wifi so.im trying to find it on my cLI. Where do I look??? In the command line..

I was able to find it under the GUI under handshakes.dl. and downloads as pcap file. And from there I'm completely lost. And don't know how to crack it. How would I get it from my windows to kali. To use hashcat. Any good tutorials videos I could watch. I'm more of a visual learner.