mr-r3b00t.github.iootherA Really Bad Day
An interactive web-based attack simulation depicting a domain administrator executing a trojanized "SpeedDownloader.exe" containing a backdoor RAT on a Tier 0 host (EXCH01), leading to full domain compromise over a compressed 2-hour kill chain. Users click through 9 attack stages either as Red Team (watching the compromise unfold) or Blue Team (seeing which security controls could break the chain at each step), illustrating Tier 0 asset risk, initial access via trojanized software, and defense-in-depth against domain dominance.
TL;DR Interactive Red/Blue Team walkthrough of a trojanized downloader compromising a Tier 0 domain admin host and escalating to full domain takeover.
Technologies named here
- EXCH01
- SpeedDownloader.exe
- Active Directory
Techniques named here
- Trojanized downloader execution
Threat actors named here
- Domain Admin
Related in Offensive Security
huntress.comwriteupAI-Coded Malware | Analyzing Vibe-Coded AD Enumeration | Huntress
github.comrepoYesWeHack Claude Kit
huntress.comwriteupInside an Oracle Database SQL Injection Attack | Huntress
huntress.comwriteup