Active Directory

Kioptrix smbmap “NT_STATUS_LOGON_FAILURE” triage: username format + domain blank test (Working Title)

by
smbmap NT_STATUS_LOGON_FAILURE

Stop Chasing SMB Mysteries: Mastering NT_STATUS_LOGON_FAILURE The fastest way to waste an afternoon is treating smbmap NT_STATUS_LOGON_FAILURE like a network mystery. Port 445 is fine; the target is simply rejecting how you’re presenting identity. NT_STATUS_LOGON_FAILURE is an authentication status, not a timeout or routing problem. It typically points to credential context issues (domain vs. local), … Read more

OSCP AD Enumeration Without BloodHound: A PowerView “ACLScanner → Proof → Pivot” Practice Loop

by
OSCP AD enumeration without BloodHound

Manual Active Directory Enumeration: The ACLScanner → Proof → Pivot Method When BloodHound is off-limits, AD doesn’t get “harder”—it gets noisier. The graph vanishes, and suddenly you’re staring at Windows output like it’s weather. If you’re doing OSCP AD enumeration without BloodHound, the real problem isn’t missing a tool. It’s losing a rhythm: what to … Read more

The 2-Hour-a-Day OSCP Routine for Full-Time Employees | Proven No-Burnout Plan I Used

by
2-hour-a-day OSCP routine

The 2-Hour-a-Day OSCP Routine for Full-Time Employees | Proven No-Burnout Plan I Used OSCP Strategy for Full-Time Employees Two Hours a Day Beats Your Weekend Heroics If you’re a full-time employee eyeing the OSCP price tag, that’s not a motivational poster. It’s a survival strategy. The 2-hour-a-day OSCP routine works because it protects consistency when … Read more

Active Directory Profiling Without Bloodhound: 9 Painful Mistakes I Made Before My First Clean AD Map

by
AD profiling without BloodHound.

Active Directory Profiling Without Bloodhound: 9 Painful Mistakes I Made Before My First Clean AD Map Here’s the hard truth no one tells you upfront: you can spend hours enumerating Active Directory, churning out commands like a machine—and still have no clue what actually matters. I learned that the painful way. Back before I ever … Read more

Kali Linux Enum4linux Practical Guide: 7 Shocking Wins That Finally Got Me Domain Admin

by
kali linux enum4linux practical guide

Kali Linux Enum4linux Practical Guide: 7 Shocking Wins That Finally Got Me Domain Admin This article was last updated on December 3, 2025. The first time I fired up enum4linux against a Windows domain from my Kali box, I was expecting… I don’t know, maybe a couple usernames and a dusty old file share if … Read more