Asbawy
Security Research & Offensive Operations
Offensive security research, reverse engineering, endpoint security, and CTF walkthroughs. Documenting exploit development, low-level internals, and red teaming tools.
Security Research Logs
A Technical Dive into 5G Hacking
A complete technical breakdown of 5G Standalone (SA) vulnerabilities, covering RAN hardware exploitation, SBI web vulnerability chains, 5G-AKA cryptographic weaknesses, and Kubernetes CNF compromise.
CertiGhost (CVE-2026-54121): How a Low-Privileged AD User Impersonated a Domain Controller via AD CS
A deep dive into CVE-2026-54121 — the CertiGhost vulnerability that let any Domain User forge a Domain Controller certificate through an AD CS chase fallback, escalate to DCSync, and fully compromise the domain.
Source Code Review: Unearthing Critical Flaws in PHP
A direct, no-fluff guide to auditing PHP codebases. Learn to spot critical vulnerabilities, map attack surfaces, and weaponize findings with functional exploits.
Battlefield Forensics: Anatomy of the IDF's Captured "Olar" Secure Smartphone in Syria
An analysis of the IDF's captured "Olar" secure smartphone in Syria, detailing its hardware, MDM-enforced kiosk hardening, ORION C4I payload, and the incident's OPSEC implications.
CTF Walkthroughs & Pwned Machines
Forest — HackTheBox Machine Writeup
An Easy Windows AD machine involving AS-REP Roasting, nested group ACL abuse (Account Operators → Exchange Windows Permissions → WriteDacl → DCSync), and pass-the-hash. Analysis powered by pharaohound.
Active — HackTheBox Machine Writeup
An Easy Windows domain controller box: anonymous SMB access to a DFS Replication share leaks a GPP password, which unlocks Kerberoasting of the Administrator account and full Domain Admin compromise.
Sauna — HackTheBox Machine Writeup
A classic easy Active Directory box: usernames harvested from a public web page feed an AS-REP roast, and a forgotten AutoLogon password unlocks a DCSync-capable service account.
WhiteRabbit — HackTheBox Machine Writeup
An Insane Linux box that chains an Uptime Kuma status page leak of internal subdomains into a WikiJS article exposing an n8n workflow's HMAC secret and injectable SQL, an error-based SQLi dump of a command log revealing a restic backup repository, a password-cracked 7z archive yielding a container SSH key, a sudo-restic abuse to steal the host user's SSH key, and a time-seeded password generator reverse-engineered down to the exact millisecond to become root.
Quick Reference Cheatsheets
Active Directory Enumeration & Attacks Cheatsheet
A comprehensive reference for AD enumeration and attack paths — covering external/internal recon, password spraying, network poisoning, credentialed enumeration, ACL abuse, Kerberos attacks, delegation abuse, lateral movement, domain dominance, GPO exploitation, ADCS misconfigurations, cross-forest trust abuse, and advanced exploits. Designed for Red Team engagements.
File Transfer Techniques
Cheatsheet for moving files across Linux, Windows, restricted shells, and inspected networks. Built for CTF players, bug bounty hunters, and internal pentesters.
MSFvenom Cheat Sheet
Enhanced, practical msfvenom reference covering payload generation across all platforms, staged vs stageless selection, encoding, encryption, bad-character handling, template injection, advanced handlers, and real-world delivery techniques.
Linux Privilege Escalation: Basics & Exploitation
Kill chains for sudo abuse, SUID/capabilities, PATH hijacking, cron exploitation, NFS no_root_squash, and runtime process hunting with pspy. Built for Red Teamers and CTF players who skip the theory.