Why do I keep finding weird stuff?

Using Reverse SOCKS to punch a hole into private networks

Come down the rabbit hole 🕳 (one of us, one of us, one of us)

When everything goes wrong with your tools, but you still want to hack Active Directory

Abusing VSphere Credentials without SharpSphere

Pivoting off a semi-privileged service account within a cluster

So you want to do a GoldenSAML attack but all the tools are broken 😎

Performing a smash and grab using a leaked Kubernetes config

AutomountServiceAccountToken is a dangerous default