A collection of hands-on penetration testing notes, lab walkthroughs, and vulnerability writeups — documenting methodology, tools, and remediation across web, Active Directory, and infrastructure security.
Author: MD JUBAIR HOSSAIN · Penetration Tester
Portfolio: Medium · LinkedIn
| Writeup | What it covers |
|---|---|
| Lateral Movement and Pivoting | Hands-on lab work covering lateral movement across compromised hosts and network pivoting techniques — practically executed using tools like Impacket, CrackMapExec, and Chisel/Ligolo for tunneling into segmented networks, with each technique tested and documented step-by-step in a controlled environment. |
| Exploiting Active Directory | Hands-on lab work completed on TryHackMe, covering practical exploitation of Active Directory environments - enumeration, attack path identification, and privilege escalation executed and documented step-by-step in a guided lab setting. |
| Active Directory Exploitation Notes | Structured walkthrough connecting enumeration, lateral movement, and privilege escalation techniques into a single attack chain. |
| Active Directory CVE Exploitation | Writeups covering exploitation of known CVEs affecting Active Directory environments — walking through vulnerability identification, proof-of-concept exploitation, and the underlying misconfiguration or patch gap that made each CVE exploitable, along with remediation guidance. |
| Active Directory Persistence | Techniques for maintaining long-term access in a compromised AD environment — covering methods like Golden/Silver Ticket abuse, DCSync, and AdminSDHolder manipulation, along with detection and remediation notes.Underlying misconfiguration or patch gap that made each CVE exploitable, along with remediation guidance. |
| Writeup | What it covers |
|---|---|
| Web Application Pentest | Methodology and findings from web application penetration testing exercises, including vulnerability identification and exploitation. |
| Writeup | What it covers |
|---|---|
| Adaptix C2 Framework | Building and configuring a C2 framework in an isolated lab, understanding listener/agent architecture relevant to red team infrastructure. |
| Initial Access | Hands-on notes on gaining initial foothold in target environments — covering common entry vectors like exposed services, weak credentials, phishing simulation payloads, and public exploit adaptation, documented step-by-step from recon through first shell |
Each writeup follows a consistent structure so findings are easy to review:
- Objective — what the target/lab/room is and the goal
- Recon & Enumeration — tools and techniques used to gather information
- Exploitation — step-by-step methodology to gain access or extract data
- Privilege Escalation / Post-Exploitation (where applicable)
- Remediation — how the issue would be fixed in a real environment
- Lessons Learned
BloodHound CE · Nmap · Burp Suite · Impacket · AdaptixC2 · CrackMapExec · Mimikatz
All content here is based on authorized lab environments, CTF platforms (TryHackMe, HackTheBox), or self-hosted infrastructure for educational purposes only. None of this reflects unauthorized access to real-world systems.
📫 Reach out via LinkedIn or check my Medium for full-length articles.