https://zeke.cat/en/index.htmlLatest MediaJan 9, 2026edia is unique for requiring a crafted video file for anNTLM Leak attack, followed by File System Redirection to an upload directory outside of webroot, then using SeTcbPrivilege to gain full system compromise. TombWatcherJan 6, 2026ombwatcher serves a straight forward demonstration for a Active Directory attack chain for Lateral Movement, where you discover deleted Active Directory Objects which contains permissions required to attack an Active Directory Certificate Services instance.HugoenFri, 09 Jan 2026 00:00:00 +0000https://zeke.cat/en/ctf/index.htmlFri, 09 Jan 2026 00:00:00 +0000https://zeke.cat/en/ctf/index.htmlFluffy Fluffy provides a strong introduction into AD Certificate Services, a relevant testing tool Certipy, and your common ACL abuse. Jeeves Discovering your foothold through a Jenkins web application, a test on file enumeration and uncovering alternate data streams. Trick Trick provides a field to practice Web Recon techniques, Local File Inclusion vulnerabilities to view environment configurations, and an interesting interaction with Fail2Ban. Postman Postman brings exposure to a misconfigured Redis instance, leading into a hunt for interesting readable files, and a finale interaction through a web-based system administration tool. Pov A demonstration of using File Disclosure to find sensitive keys enabling a Object Deserialization attack for command execution, followed by finding exposed credentials leading to SeDebugPrivilege abuse. TombWatcher ombwatcher serves a straight forward demonstration for a Active Directory attack chain for Lateral Movement, where you discover deleted Active Directory Objects which contains permissions required to attack an Active Directory Certificate Services instance. Media edia is unique for requiring a crafted video file for anNTLM Leak attack, followed by File System Redirection to an upload directory outside of webroot, then using SeTcbPrivilege to gain full system compromise.https://zeke.cat/en/homelab/index.htmlMon, 01 Jan 0001 00:00:00 +0000https://zeke.cat/en/homelab/index.htmlComing soon…https://zeke.cat/en/cooking/index.htmlMon, 01 Jan 0001 00:00:00 +0000https://zeke.cat/en/cooking/index.htmlComing soon…https://zeke.cat/en/about-me/index.htmlMon, 01 Jan 0001 00:00:00 +0000https://zeke.cat/en/about-me/index.htmlHey, this is Zeke. A former linux administrator moving into offensive security. I run GatRoot as a technical repository for my ctf writeups, homelab experiments, and a easy to read reference for my cooking recipes. I am actively practicing and training red teaming methodology for my upcoming CPTS exam.