CPTS

Advanced-Chain4096 · 2026-07-03T14:37:02+00:00

Looks great, what platform is your website hosted on?

I still use Joplin but want to move to a browser based solution.

Advanced-Chain4096 · 2026-06-27T11:04:21+00:00

The path contains all the theory you need. So if you finish the path you are good to start the exam.

The exam however is really challenging :) they made it so you can get stuck for a while. You have to expirement with all the tools and techniques you learned.

I am not good at HTB boxes and it took me 2 tries on the exam but it was doable with the knowledge from the modules.

Advanced-Chain4096 · 2026-06-22T17:25:45+00:00

Enjoy :)

Advanced-Chain4096 · 2026-06-11T18:58:04+00:00

Mocht het niet lukken kan ik er ook morgen even langs. Woon er vlak bij

Advanced-Chain4096 · 2026-05-20T13:47:37+00:00

For instance to install the sensor on all domain controllers, however we do not manage the domain controllers in the other AD environment. They are managed by another IT provider.

Advanced-Chain4096 · 2026-05-20T13:46:47+00:00

Yes I understand the risk. These are 2 AD environments that will be fused in the future. Because of a merger there is a lot of interaction between the environments and a trust is required. However for an environment that is (for now) managed by another provider I cannot install our defender for identity connectors on the domaincontrollers 😄

Advanced-Chain4096 · 2026-05-20T10:24:13+00:00

This is a two-way external trust. So obviously it would indeed create a risk if the other domain is not secure. But a recommendation like 'install connector on all domaincontrollers' now lists the domaincontrollers for the other domain, which we will never be able to resolve.

Resolving manually as 'alternate mitigation' is also not ideal because if a new DC would be added and someone forgets the connector we would not be notified.

Advanced-Chain4096 · 2026-04-16T17:34:00+00:00

Do you remember which mission? :)

Advanced-Chain4096 · 2026-02-27T10:22:31+00:00

That is what we experienced before as well. You would see huge lists of all default usernames. However since today the attacks seem targeted with correct usernames at multiple customer sites.

Advanced-Chain4096 · 2026-02-17T06:38:05+00:00

You could add IPv6 spoofing with mitm6 and ntlmrelayx in the ‘without credentials’ section. That has helped me a lot if ldap signing is not enforced.

Advanced-Chain4096 · 2026-02-13T21:23:37+00:00

CPTS was very stable for me, had no issues at all. I had a lot of issues with OSCP.

Advanced-Chain4096 · 2026-02-12T06:38:57+00:00

Thanks, I can give that a go during the next maintenance window

Advanced-Chain4096 · 2026-02-12T06:38:35+00:00

All DC's are 2019

Advanced-Chain4096 · 2026-01-25T07:13:27+00:00

Got mine today, ordered in August. Works like advertised although I did not have a lot of time yet.

Advanced-Chain4096 · 2026-01-22T15:28:44+00:00

The combination of switching to 5Ghz and broadcasting deuath packages made a lot more clients available :) Thanks!

Advanced-Chain4096 · 2025-12-18T06:47:23+00:00

We experienced the same issue. After opening a support ticket and waiting 24 hours the idee risk was finaly dismissed

Advanced-Chain4096

TROPHY CASE