https://blog.msnieman.com/tags/petitpotam/Recent content in PetitPotam on Myles Nieman — BlogHugoen-usTue, 16 Dec 2025 00:00:00 +0000https://blog.msnieman.com/writeups/vulncicada/Tue, 16 Dec 2025 00:00:00 +0000https://blog.msnieman.com/writeups/vulncicada/An exposed NFS share leaks domain usernames and a credential hidden inside an image file; the password belongs to Rosie.Powell, whose account is used to exploit ESC8 via Kerberos relay and coercion, yielding a DC certificate that produces the Administrator NTLM hash for a full domain takeover.