Chase Bevan-Thomas @cbev0x

Offensive security researcher focused on Windows Active Directory, Kerberos internals, and the authentication mechanisms that hold them together. Writeups, tooling, and the occasional advisory.

Recent Posts

TryHackMe: Boiler CTF

2 minute read

This is a medium-ranked difficulty box, it involves us dodging plenty of rabbit holes, exploiting command injection on an obscure endpoint, and escalating pr...

read more →

TryHackMe: Agent Sudo

2 minute read

This Men In Black-esque CTF is catered towards beginners and puts a good range of skills to the test. Overall, it was a fun challenge.

read more →

TryHackMe: Willow

3 minute read

This box is ranked medium on THM, it involves us mounting a file share to get access to RSA key pair integers, which we can use to recover an SSH private key...

read more →

TryHackMe: Watcher

3 minute read

This box is rated medium difficulty on THM. It involves us exploiting an LFI vulnerability to leak credentials, uploading a reverse shell via FTP, and pivoti...

read more →

TryHackMe: Tomghost

2 minute read

This box is ranked easy difficulty on THM, it involves us exploiting Apache Jserv to read files arbitrarily, leading to an encrypted pgp file and a binary ex...

read more →