https://zeke.cat/en/tags/smb/index.htmlHugoenFri, 09 Jan 2026 00:00:00 +0000https://zeke.cat/en/ctf/media/index.htmlFri, 09 Jan 2026 00:00:00 +0000https://zeke.cat/en/ctf/media/index.htmledia is unique for requiring a crafted video file for an**NTLM Leak** attack, followed by **File System Redirection** to an upload directory outside of webroot, then using **SeTcbPrivilege** to gain full system compromise.https://zeke.cat/en/ctf/tombwatcher/index.htmlTue, 06 Jan 2026 00:00:00 +0000https://zeke.cat/en/ctf/tombwatcher/index.htmlombwatcher serves a straight forward demonstration for a **Active Directory** attack chain for **Lateral Movement**, where you discover deleted **Active Directory Objects** which contains permissions required to attack an **Active Directory Certificate Services** instance.https://zeke.cat/en/ctf/jeeves/index.htmlWed, 17 Dec 2025 00:00:00 +0000https://zeke.cat/en/ctf/jeeves/index.htmlDiscovering your foothold through a **Jenkins** web application, a test on file enumeration and uncovering alternate data streams.