https://0xpriv.dev/2026-10-11T13:46:56+00:00https://0xpriv.dev/labs/abusing-gpos-for-lateral-movement-in-an-ad-lab2026-10-11T13:46:56+00:00https://0xpriv.dev/web/file-upload-vulnerabilities-from-bypassed-filters-to-rce2026-10-11T12:45:37+00:00https://0xpriv.dev/labs/pentesting-a-misconfigured-kubernetes-cluster-in-a-lab2026-10-11T13:46:56+00:00https://0xpriv.dev/red-team/mitre-att-ck-for-red-teams-mapping-an-operation2026-10-11T12:47:10+00:00https://0xpriv.dev/recon/github-recon-finding-secrets-in-public-repositories2026-10-11T12:46:27+00:00https://0xpriv.dev/network/active-directory-enumeration-mapping-a-domain-with-bloodhound2026-10-11T12:46:47+00:00https://0xpriv.dev/defense/content-security-policy-stopping-xss-with-headers2026-10-11T12:46:00+00:00https://0xpriv.dev/labs/attacking-mssql-in-a-lab-xp-cmdshell-and-linked-servers2026-10-11T13:37:37+00:00https://0xpriv.dev/labs/ntlm-relay-to-ldap-for-rbcd-takeover-in-a-lab2026-10-11T13:36:54+00:00https://0xpriv.dev/web/insecure-direct-object-references-idor-breaking-access-control2026-10-11T12:44:29+00:00https://0xpriv.dev/labs/server-side-template-injection-to-rce-in-a-lab2026-10-11T13:36:35+00:00https://0xpriv.dev/labs/kerberos-delegation-attacks-in-a-lab-unconstrained-constrained-and-rbcd2026-10-11T13:35:58+00:00https://0xpriv.dev/red-team/password-spraying-low-and-slow-attacks-against-a-domain2026-10-11T12:45:12+00:00https://0xpriv.dev/recon/content-discovery-finding-hidden-directories-and-endpoints2026-10-11T12:46:19+00:00https://0xpriv.dev/network/llmnr-and-nbt-ns-poisoning-capturing-hashes-on-a-lan2026-10-11T12:46:18+00:00https://0xpriv.dev/defense/tls-hardening-ciphers-protocols-and-certificate-hygiene2026-10-11T12:45:31+00:00https://0xpriv.dev/labs/building-an-active-directory-attack-lab-with-goad2026-10-11T13:29:23+00:00https://0xpriv.dev/web/cross-site-scripting-xss-reflected-stored-and-dom-explained2026-10-11T10:38:33+00:00https://0xpriv.dev/labs/breaking-out-of-a-docker-container-in-a-lab2026-10-11T13:28:04+00:00https://0xpriv.dev/labs/android-app-pentesting-intercepting-and-patching-an-apk2026-10-11T13:27:02+00:00https://0xpriv.dev/labs/graphql-api-exploitation-in-a-lab2026-10-11T13:26:57+00:00https://0xpriv.dev/web/server-side-request-forgery-ssrf-reaching-internal-services2026-10-11T10:37:51+00:00https://0xpriv.dev/labs/linux-privilege-escalation-via-suid-binaries-in-a-lab2026-10-11T13:26:44+00:00https://0xpriv.dev/red-team/lateral-movement-in-ad-wmi-psexec-and-winrm2026-10-11T10:40:50+00:00https://0xpriv.dev/recon/google-dorking-finding-exposed-files-and-panels2026-10-11T10:38:51+00:00https://0xpriv.dev/network/kerberoasting-explained-cracking-service-tickets-offline2026-10-11T10:38:45+00:00https://0xpriv.dev/defense/writing-sigma-rules-turning-an-attack-into-a-detection2026-10-11T10:37:59+00:00https://0xpriv.dev/labs/attacking-ad-cs-esc1-certificate-template-abuse-in-a-lab2026-10-11T13:26:37+00:00https://0xpriv.dev/labs/intercepting-traffic-with-burp-suite-your-first-web-test2026-10-11T12:46:55+00:00https://0xpriv.dev/web/blind-sql-injection-by-hand-boolean-and-time-based-data-extraction2026-10-11T03:02:59+00:00https://0xpriv.dev/labs/building-a-home-security-lab-with-virtualbox-and-kali2026-10-11T12:45:49+00:00https://0xpriv.dev/labs/cracking-password-hashes-with-hashcat-a-walkthrough2026-10-11T10:39:06+00:00https://0xpriv.dev/red-team/credential-dumping-where-windows-stores-secrets2026-10-11T10:40:46+00:00https://0xpriv.dev/recon/subdomain-enumeration-passive-and-active-methods-that-find-more2026-10-11T10:37:49+00:00https://0xpriv.dev/network/smb-enumeration-mapping-shares-users-and-sessions2026-10-11T10:37:12+00:00https://0xpriv.dev/defense/hardening-ssh-keys-config-and-fail2ban-in-practice2026-10-11T10:37:42+00:00https://0xpriv.dev/labs/scanning-a-target-with-nmap-a-step-by-step-first-scan2026-10-11T10:37:57+00:00https://0xpriv.dev/web/log4shell-explained-how-one-logged-string-became-remote-code-execution2026-10-10T15:59:50+00:00https://0xpriv.dev/labs/linux-privilege-escalation-from-a-low-privilege-shell-to-root2026-10-11T02:37:45+00:00https://0xpriv.dev/web2026-10-11T12:45:37+00:00https://0xpriv.dev/network2026-10-11T12:46:47+00:00https://0xpriv.dev/recon2026-10-11T12:46:27+00:00https://0xpriv.dev/red-team2026-10-11T12:47:10+00:00https://0xpriv.dev/defense2026-10-11T12:46:00+00:00https://0xpriv.dev/labs2026-10-11T13:46:56+00:00https://0xpriv.dev/author/alex-rowan2026-10-11T13:46:56+00:00https://0xpriv.dev/about2026-10-10T13:57:37+00:00https://0xpriv.dev/contact2026-10-10T13:57:37+00:00https://0xpriv.dev/archivehttps://0xpriv.dev/arsenalhttps://0xpriv.dev/snippetshttps://0xpriv.dev/arsenal/nmaphttps://0xpriv.dev/arsenal/amasshttps://0xpriv.dev/arsenal/ffufhttps://0xpriv.dev/arsenal/subfinderhttps://0xpriv.dev/arsenal/burp-suitehttps://0xpriv.dev/arsenal/sqlmaphttps://0xpriv.dev/arsenal/nucleihttps://0xpriv.dev/arsenal/wiresharkhttps://0xpriv.dev/arsenal/tcpdumphttps://0xpriv.dev/arsenal/responderhttps://0xpriv.dev/arsenal/metasploithttps://0xpriv.dev/arsenal/pwntoolshttps://0xpriv.dev/arsenal/dvwahttps://0xpriv.dev/arsenal/postgresqlhttps://0xpriv.dev/arsenal/httpxhttps://0xpriv.dev/arsenal/naabuhttps://0xpriv.dev/arsenal/gobusterhttps://0xpriv.dev/arsenal/niktohttps://0xpriv.dev/arsenal/wpscanhttps://0xpriv.dev/arsenal/dalfoxhttps://0xpriv.dev/arsenal/owasp-zaphttps://0xpriv.dev/arsenal/impackethttps://0xpriv.dev/arsenal/netexechttps://0xpriv.dev/arsenal/hydrahttps://0xpriv.dev/arsenal/netcathttps://0xpriv.dev/arsenal/ghidrahttps://0xpriv.dev/arsenal/radare2https://0xpriv.dev/arsenal/searchsploithttps://0xpriv.dev/arsenal/hashcathttps://0xpriv.dev/arsenal/dockerhttps://0xpriv.dev/arsenal/owasp-juice-shop