Top all-time · #10022
Shenanigans Labs
Company blog · shenaniganslabs.iosecurity
Shenanigans Labs is the company blog at shenaniganslabs.io, writing about security. Since 2019, 8 different Hacker News readers have linked it 8 times, most often “Privilege Escalation in Ubuntu Linux (dirty_sock Exploit)”. The last post was in 2023, but the archive is still widely read.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
One commenter links a Shenanigans Labs post on a Kerberos security disclosure, noting Kerberos should be configured appropriately. The thread is about abusing Exchange to reach Domain Admin.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Shenanigans Labs is a team of like-minded security researchers on a perpetual quest to discover vulnerabilities and new adversary TTPs.
Most-linked posts?
- Privilege Escalation in Ubuntu Linux (dirty_sock Exploit)3 people · 3 mentions · first linked 2019-02-12
- Abusing Resource-Based Constrained Delegation to Attack Active Directory2 people · 2 mentions · first linked 2019-01-28
What Hacker News says?
Moreover (didn't have time to read yet) seems that there is just today public disclosure which highlights some issues with Kerberos: https://shenaniganslabs.io/2019/01/28/Wagging-the-Dog.html Don't get me wrong - thats not a case where someone should choose NTLM over more secure Kerberos. Just that we should note Kerberos should be configured appropriately.
Comment linking /2019/01/28/Wagging-the-Dog.html
on “Abusing Exchange: One API call away from Domain Admin”Submitted Privilege Escalation in Ubuntu Linux (dirty_sock Exploit) as a story · 5 points
HN discussionSubmitted Gone to the Dogs – NTLM as a story · 2 points
HN discussionSubmitted Linux Privilege Escalation via LXD and Hijacked Unix Socket Credentials as a story · 2 points
HN discussionSubmitted Privilege Escalation in Ubuntu Linux (dirty_sock Exploit) as a story · 2 points
HN discussionSubmitted Airstrike Attack – FDE bypass and EoP on domain joined Windows workstations as a story · 1 points
HN discussionSubmitted Abusing Resource-Based Constrained Delegation to Attack Active Directory as a story · 1 points
HN discussionSubmitted Privilege Escalation in Ubuntu Linux (dirty_sock Exploit) as a story · 1 points
HN discussion
