Reverse-Engineering on Domain Security

Reverse-Engineering on Domain Securityhttps://domainsecurity.agency/tags/reverse-engineering/Recent content in Reverse-Engineering on Domain SecurityHugoenFri, 11 Sep 2026 00:00:00 +0000HTB: Cascade · from an anonymous LDAP dump to Domain Admin via the AD Recycle Binhttps://domainsecurity.agency/posts/htb-cascade/Fri, 11 Sep 2026 00:00:00 +0000https://domainsecurity.agency/posts/htb-cascade/A retired medium Windows Domain Controller where a custom, non-standard LDAP attribute leaks a working credential to anyone unauthenticated, and the trail that follows through a VNC config and a homemade audit tool ends with a deleted admin-equivalent account still sitting in the AD Recycle Bin.