https://zeke.cat/en/tags/responder/index.htmlHugoenFri, 09 Jan 2026 00:00:00 +0000https://zeke.cat/en/ctf/media/index.htmlFri, 09 Jan 2026 00:00:00 +0000https://zeke.cat/en/ctf/media/index.htmledia is unique for requiring a crafted video file for an**NTLM Leak** attack, followed by **File System Redirection** to an upload directory outside of webroot, then using **SeTcbPrivilege** to gain full system compromise.https://zeke.cat/en/ctf/fluffy/index.htmlMon, 15 Dec 2025 00:00:00 +0000https://zeke.cat/en/ctf/fluffy/index.htmlFluffy provides a strong introduction into AD Certificate Services, a relevant testing tool **Certipy**, and your common **ACL** abuse.