https://lukaszpastuszak.dev/tags/wsl/Recent content in Wsl on Łukasz Pastuszak - security notesHugoen-usSat, 05 Jul 2025 00:00:00 +0000https://lukaszpastuszak.dev/writeups/voleur/Sat, 05 Jul 2025 00:00:00 +0000https://lukaszpastuszak.dev/writeups/voleur/NTLM is disabled domain-wide; a cracked Excel file leaks service credentials, WriteSPN enables targeted Kerberoasting, AD Recycle Bin restores a deleted user, DPAPI decryption recovers a higher-privileged account, and a WSL pivot exposes ntds.dit for full domain compromise.