hun.io

XR glasses are super cool Link to heading For years, I’ve wanted a pair of XR glasses because the idea of having a giant display floating in front of me sounded super cool, especially at that form factor.

Introduction Link to heading Note: The research and tooling covered in this post are not my original work,.

Introduction Link to heading NTLM downgrade attacks have been around for a while and are well known against systems like Windows Server 2012.

Introduction Link to heading In June of 2025, a friend sent me a new .gov website that had recently been spun up less than 18 hours prior.

My current phone Link to heading In December of 2022, I bought a refurbished iPhone X, and it has been a great daily driver.

My current gaming setup - A2 Link to heading After recently downsizing my homelab, my original intention was to keep using my Windows 11 VM with my 2TB SSD and RTX A2000 passed into it, whom I’ve aptly named A2. :) While this worked great using Apollo as…

The problem Link to heading A few weeks ago, I completed my homelab downsize, and it’s been absolutely amazing.

My current homelab Link to heading Since I started my homelab journey in 2018, it has changed tremendously - from a pile of reused hardware to building new servers, and eventually consolidating everything into a 19" 12U rack.

Wild West Hackin’ Fest Link to heading Wild West Hackin’ Fest, hosted by Black Hills Information Security, is an annual cybersecurity conference held in Deadwood, South Dakota and Denver, Colorado.

Framework mystery boxes Link to heading Framework, a company focused on manufacturing repairable and modular devices, offers a cool product called a mystery box.

The inspiration behind this Link to heading In Active Directory exploitation, Kerberos delegation is easily among my top favorite vectors of abuse, and in the years I’ve been learning Kerberos exploitation, I’ve noticed that Impacket doesn’t get nearly as…

TL;DR Link to heading If you only have access to a valid machine hash, you can leverage the Kerberos S4U2Self proxy for local privilege escalation, which allows reopening and expanding potential local-to-domain pivoting paths, such as SEImpersonate!

Introduction Link to heading One day, a friend and I were bored one night, so we decided to look for some fun Minecraft mod malware floating around on the internet.

What is noPac?

Within the last week, a group of friends and I spontaneously decided to compete in the 2025 Global Game Jam, a yearly competition where teams of any size have 48 hours to create a video game based on a specific theme.

Within the last two weeks, our team placed first in the world in a hacking competition, and I want to talk a little bit about it as well as what I’ve learned throughout this experience!

With the release of my first blogpost on this new site, I also wanted to do a quick writeup on what I did to build it!

A few weeks ago, I decided to pick up an old 11-inch 2013 Macbook Air on eBay.

Throughout my time on Substack and YouTube, I’ve only very briefly mentioned my server and never really dived into the details at all.

I’ve been wanting to build my own router, as there are so many benefits.

Hey there!