https://tomorin.gugugaga.meme/RWeng's Blog 2026-07-09T07:20:57+00:00 RWeng https://tomorin.gugugaga.meme/ Jekyll © 2026 RWeng /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png 2026-07-08T16:00:00+00:00 2026-07-08T16:00:00+00:00 https://tomorin.gugugaga.meme/posts/badsuccessor-vs-rubeus-tgt/ RWeng

BadSuccessor (CVE-2025-53779) vs Basic Rubeus TGT Attack From checkpoint.htb -> deep research on dMSA privilege escalation compared with standard Kerberos TGT attacks. Part 1 — CVE-2025-53779: BadSuccessor Discovered by: Akamai Security Research (May 21, 2025) Patched: August 12, 2025 (Patch Tuesday) CVSS: 7.2 (High) Affected: Any AD domain with ≥1 Windows Server 2025 DC Impact: 91% of ...

2026-06-11T16:00:00+00:00 2026-06-11T16:00:00+00:00 https://tomorin.gugugaga.meme/posts/administrator/ RWeng

Box Info about Administrator is a medium-difficulty Windows machine designed around a complete domain compromise scenario, where credentials for a low-privileged user are provided. To gain access to the michael account, ACLs (Access Control Lists) over privileged objects are enumerated, leading us to discover that the user olivia has GenericAll permissions over michael, allowing us to r...

2026-06-03T16:00:00+00:00 2026-06-03T16:00:00+00:00 https://tomorin.gugugaga.meme/posts/driver/ RWeng

Box Info About Driver is an easy Windows machine that focuses on printer exploitation. Enumeration of the machine reveals that a web server is listening on port 80, along with SMB on port 445 and WinRM on port 5985. Navigation to the website reveals that it’s protected using basic HTTP authentication. While trying common credentials the admin:admin credential is accepted and we are able...

2026-04-11T16:00:00+00:00 2026-04-11T16:00:00+00:00 https://tomorin.gugugaga.meme/posts/my-first-blog/ RWeng

Welcome to my blog. Why start writing blog? To be honest, I’m a very lazy person and don’t like taking notes. Even when I do, they are just scattered records without any systematic organization. That was until last year. I won’t go into the details of why, I was told that if you want people to see the efforts you’ve made, you need to record them. Whether it’s a huge success or just a smal...