RedReconX — Security Research Journal
Independent security research journal. Pattern documentation, incident analysis, and threat landscape exploration.
Latest
- Blackfield: When Operational Accounts Become Domain Keys — A system autopsy of HackTheBox Blackfield — examining how a misconfigured SMB share, disabled Kerberos pre-authentication, an overpermissive ACL, and a backup service account combined to expose every credential in a domain controller.
- Gavel: Trust Boundary Collapse in Dynamic SQL Logic — A system autopsy examining how dynamic SQL construction in an internal auction platform invalidated PDO security assumptions and enabled credential disclosure.