https://zeke.cat/en/tags/iis/index.htmlHugoenTue, 06 Jan 2026 00:00:00 +0000https://zeke.cat/en/ctf/tombwatcher/index.htmlTue, 06 Jan 2026 00:00:00 +0000https://zeke.cat/en/ctf/tombwatcher/index.htmlombwatcher serves a straight forward demonstration for a **Active Directory** attack chain for **Lateral Movement**, where you discover deleted **Active Directory Objects** which contains permissions required to attack an **Active Directory Certificate Services** instance.https://zeke.cat/en/ctf/pov/index.htmlMon, 05 Jan 2026 00:00:00 +0000https://zeke.cat/en/ctf/pov/index.htmlA demonstration of using **File Disclosure** to find sensitive keys enabling a **Object Deserialization** attack for command execution, followed by finding exposed credentials leading to **SeDebugPrivilege** abuse.https://zeke.cat/en/ctf/jeeves/index.htmlWed, 17 Dec 2025 00:00:00 +0000https://zeke.cat/en/ctf/jeeves/index.htmlDiscovering your foothold through a **Jenkins** web application, a test on file enumeration and uncovering alternate data streams.