https://zeke.cat/en/tags/powershell/index.htmlHugoenFri, 09 Jan 2026 00:00:00 +0000https://zeke.cat/en/ctf/media/index.htmlFri, 09 Jan 2026 00:00:00 +0000https://zeke.cat/en/ctf/media/index.htmledia is unique for requiring a crafted video file for an**NTLM Leak** attack, followed by **File System Redirection** to an upload directory outside of webroot, then using **SeTcbPrivilege** to gain full system compromise.https://zeke.cat/en/ctf/pov/index.htmlMon, 05 Jan 2026 00:00:00 +0000https://zeke.cat/en/ctf/pov/index.htmlA demonstration of using **File Disclosure** to find sensitive keys enabling a **Object Deserialization** attack for command execution, followed by finding exposed credentials leading to **SeDebugPrivilege** abuse.