https://zeke.cat/en/tags/file-upload/index.htmlHugoenFri, 09 Jan 2026 00:00:00 +0000https://zeke.cat/en/ctf/media/index.htmlFri, 09 Jan 2026 00:00:00 +0000https://zeke.cat/en/ctf/media/index.htmledia is unique for requiring a crafted video file for an**NTLM Leak** attack, followed by **File System Redirection** to an upload directory outside of webroot, then using **SeTcbPrivilege** to gain full system compromise.