N1nJi4.X fuzzbuster

Certighost (CVE-2026-54121)

Authors: @h0j3n, @aniqfakhrul
Date: July 24, 2026

Certighost is an Active Directory Certificate Services (AD CS) vulnerability that allowed a low-privileged domain user to impersonate a Domain Controller and achieve domain compromise in the tested AD CS configuration. The issue was addressed in the July 2026 security updates.

The vulnerable path is an AD CS enrollment fallback known as a chase during directory-object resolution. By supplying request attributes such as cdc, an attacker could cause the Certification Authority (CA) to ask an attacker-controlled host for identity data belonging to a Domain Controller. The CA then used that data while issuing a certificate.

🐕 BloodHound Ecosystem

A structured overview of the BloodHound attack-path analysis ecosystem — official ingestors, community collectors, converters, ADWS alternatives, analysis tools, deployment helpers, and supporting frameworks.

Legend

🟢 Official — maintained by SpecterOps

🔵 Community — third-party / unofficial

🧹 OpenClaw Complete Uninstall Guide (All Platforms)

This guide covers all supported ways to fully remove OpenClaw, including cases where the CLI is missing but background services are still running.

🟢 Path 1: Easy Path (CLI Still Installed)

Use this if the openclaw command still works.

hi, i'm daniel. i'm a 16-year-old high school senior. in my free time, i hack billion dollar companies and build cool stuff.

about a month ago, a couple of friends and I found serious critical vulnerabilities on Mintlify, an AI documentation platform used by some of the top companies in the world.

i found a critical cross-site scripting vulnerability that, if abused, would let an attacker to inject malicious scripts into the documentation of numerous companies and steal credentials from users with a single link open.

(go read my friends' writeups (after this one))
how to hack discord, vercel, and more with one easy trick (eva)
Redacted by Counsel: A supply chain postmortem (MDL)

Arc

defaults write company.thebrowser.Browser.plist ExtensionManifestV2Availability -int 2

Chrome

defaults write com.google.Chrome.plist ExtensionManifestV2Availability -int 2

Chrome Beta

Reverse Engineering Golang

Some notes, tools, and techniques for reverse engineering Golang binaries.

	'$schema' = 'https://jj-vcs.github.io/jj/latest/config-schema.json'

	[user]
	name = 'Pavan Kumar Sunkara'
	email = 'pavan.sss1991@gmail.com'
	username = 'pksunkara'

	[ui]
	default-command = 'default'
	editor = 'nvim'

	#!/bin/bash

	GITHUB_USERNAME=
	GITHUB_TOKEN=
	GITHUB_ORGANISATION=
	GITHUB_API_CALL=
	GITHUB_MAX_PER_PAGE=100
	GITHUB_CURRENT_PAGE=1

	GITEA_TOKEN=

	# latest supported electron version as of october 2024
	LATEST_SUPPORTED_VERSION=30
	RED='\033[0;31m'
	GREEN='\033[0;32m'
	NC='\033[0m' # no color

	mdfind "kind:app" 2>/dev/null \| sort -u \| while read app;
	do
	filename="$app/Contents/Frameworks/Electron Framework.framework/Electron Framework"
	if [[ -f $filename ]]; then

	#!/bin/bash
	# makes a cloud-init template vm from URL
	# call like ./make-debian-template.sh 9000

	# Check for root priviliges
	if [[ $EUID -ne 0 ]]; then
	printf "Please run as root:\nsudo %s\n" "${0}"
	exit 1
	fi