Posts on zx10r Security Noteshttps://portfolio.aimansam.my/blog/posts/Security notes, lab writeups, CTF lessons, and practical methodology entries from zx10r Security Notes.en-usMon, 11 May 2026 00:00:00 +0800B2R Monster Corporate Writeuphttps://portfolio.aimansam.my/blog/posts/monster-corporate/Mon, 11 May 2026 00:00:00 +0800https://portfolio.aimansam.my/blog/posts/monster-corporate/A boot-to-root writeup for Monster Corporate, covering SMB enumeration, WordPress admin access, plugin RCE, lateral movement with xxd, and cron-based privilege escalation.Active Directory Lab Notes: Enumeration, Trust Paths, and Privilege Escalationhttps://portfolio.aimansam.my/blog/posts/active-directory-lab-notes/Sat, 09 May 2026 18:40:00 +0800https://portfolio.aimansam.my/blog/posts/active-directory-lab-notes/Notes from building and attacking an Active Directory lab, focused on domain enumeration, trust paths, and escalation patterns.A Practical Web Exploitation Workflow for CTFs and Labshttps://portfolio.aimansam.my/blog/posts/web-exploitation-workflow/Sat, 09 May 2026 11:10:00 +0800https://portfolio.aimansam.my/blog/posts/web-exploitation-workflow/A disciplined web testing workflow for mapping application behavior, finding logic flaws, and proving impact cleanly.My First CTF: Enumeration Lessons That Made Exploitation Clickhttps://portfolio.aimansam.my/blog/posts/my-first-ctf/Wed, 06 May 2026 00:34:31 +0800https://portfolio.aimansam.my/blog/posts/my-first-ctf/How my first rooted CTF target taught me to slow down, enumerate carefully, and turn small signals into a full attack path.