Dec 26, 2025
Today we’re thrilled to announce the launch of LPLITE:GOAD (Light Pentest Live Interactive Training Experience: Game of Active Directory). The first class is coming up Tuesday, January 27 – Thursday, January 29 (9:00 a.m. – 1:00 p.m. CST each day). More information, pricing information and more can be found at
Dec 19, 2025
I’m so excited to share today’s tale of pentest pwnage, because it brings back to life a coercion technique I thought wouldn’t work against Windows 11! Spoiler alert: check out rpc2efs, as well as the 7MinSec Club episode we did on the topic this week.
Also, our January Light Pentest LITE:GOAD class is open...
Dec 12, 2025
This might be obvious, but security is not all domain admin dancing and maximum pwnage. Sometimes, despite my best efforts, a security project does a faceplant. Today’s episode focuses on a phishing campaign that had plenty of “bites” but got immediately shut down – for reasons I still don’t understand.
Dec 5, 2025
Hola friends! My week has very much been about trying to turnaround pentest dropboxes as quickly as possible. In that adventure, I came across two time-saving discoveries:
- Using a Proxmox LXC as a persistent remote access method
- Writing a Proxmox post-deployment script that installs Splashtop on the Windows VM, and...
Nov 28, 2025
Happy Thanksgiving week friends! Today we’re celebrating a turkey and pie overload by sharing another fun tale of pentest pwnage! It involves using pygpoabuse to hijack a GPO and turn it into our pentesting puppet! Muahahahahaah!!!! Also:
- This week over at 7MinSec.club we looked at how to defend against some common...