https://blog.coreflaresec.com Writeups, security notes and things I build. https://blog.coreflaresec.com/posts/dante-writeup/ https://blog.coreflaresec.com/posts/dante-writeup/ Thu, 13 Aug 2026 00:00:00 GMT Writeup ฉบับเต็มของ Dante Pro Lab — เส้นทางจริงตั้งแต่ foothold ยัน domain dominance ครบทั้งสาม segment ล็อกไว้ด้วยรหัสผ่าน https://blog.coreflaresec.com/posts/thm-kaboomm-ot-ics-writeup-en/ https://blog.coreflaresec.com/posts/thm-kaboomm-ot-ics-writeup-en/ Sun, 09 Aug 2026 00:00:00 GMT Writeup for TryHackMe's Kaboomm — talking to the PLC directly over Modbus, reading the holding register, then switching the cooler off. https://blog.coreflaresec.com/posts/thm-kaboomm-ot-ics-writeup/ https://blog.coreflaresec.com/posts/thm-kaboomm-ot-ics-writeup/ Sun, 09 Aug 2026 00:00:00 GMT Writeup โจทย์ Kaboomm จาก TryHackMe — คุยกับ PLC ตรง ๆ ผ่าน Modbus อ่าน holding register แล้วสั่งปิด cooler https://blog.coreflaresec.com/posts/hello-world/ https://blog.coreflaresec.com/posts/hello-world/ Fri, 31 Jul 2026 00:00:00 GMT Why this blog runs on ~200 lines of my own code instead of a framework — and what that buys me in supply-chain security. https://blog.coreflaresec.com/posts/thm-brr-scadabr-writeup-th/ https://blog.coreflaresec.com/posts/thm-brr-scadabr-writeup-th/ Wed, 29 Jul 2026 00:00:00 GMT Writeup โจทย์ Brr จาก TryHackMe — จาก nmap ไปเจอ ScadaBR บนพอร์ต 8080 แล้วไต่ต่อเข้าระบบ OT/ICS https://blog.coreflaresec.com/posts/thm-brr-scadabr-writeup/ https://blog.coreflaresec.com/posts/thm-brr-scadabr-writeup/ Wed, 29 Jul 2026 00:00:00 GMT Writeup for TryHackMe's Brr — from an nmap scan to a ScadaBR panel on port 8080, then onward into the OT/ICS network. https://blog.coreflaresec.com/posts/rastalabs-htb-en/ https://blog.coreflaresec.com/posts/rastalabs-htb-en/ Tue, 28 Jul 2026 00:00:00 GMT A review of RastaLabs — a full corporate Active Directory environment with GPO abuse, Pass-the-Hash and DCSync. Worth the money? Let's find out. https://blog.coreflaresec.com/posts/rastalabs-htb/ https://blog.coreflaresec.com/posts/rastalabs-htb/ Tue, 28 Jul 2026 00:00:00 GMT รีวิว RastaLabs — Active Directory แบบ corporate เต็มรูปแบบ ทั้ง GPO abuse, Pass-the-Hash และ DCSync คุ้มไหมมาดูกัน https://blog.coreflaresec.com/posts/dante-prolab-en/ https://blog.coreflaresec.com/posts/dante-prolab-en/ Wed, 22 Jul 2026 00:00:00 GMT A review of Dante Pro Lab — the multi-segment enterprise network HackTheBox recommends for anyone preparing for OSCP. https://blog.coreflaresec.com/posts/dante-prolab/ https://blog.coreflaresec.com/posts/dante-prolab/ Wed, 22 Jul 2026 00:00:00 GMT รีวิว Dante Pro Lab — enterprise network จำลองหลาย segment ที่ HackTheBox แนะนำสำหรับคนเตรียมสอบ OSCP https://blog.coreflaresec.com/posts/htb-zephyr-prolab-ad-en/ https://blog.coreflaresec.com/posts/htb-zephyr-prolab-ad-en/ Mon, 20 Jul 2026 00:00:00 GMT A review of Zephyr Pro Lab (Red Team Operator I) — a simulated enterprise across 2 forests plus a child domain, with Active Directory front and centre. https://blog.coreflaresec.com/posts/htb-zephyr-prolab-ad/ https://blog.coreflaresec.com/posts/htb-zephyr-prolab-ad/ Mon, 20 Jul 2026 00:00:00 GMT รีวิว Zephyr Pro Lab ระดับ Red Team Operator I — องค์กรจำลอง 2 forest พร้อม child domain และ Active Directory เต็มรูปแบบ https://blog.coreflaresec.com/posts/htb-alchemy-pro-lab-realistic-ics-ot-environment-en/ https://blog.coreflaresec.com/posts/htb-alchemy-pro-lab-realistic-ics-ot-environment-en/ Fri, 10 Jul 2026 00:00:00 GMT A review of HackTheBox's Alchemy Pro Lab — a simulated ICS/OT environment built around the Sogard Brewing plant, from the IT side all the way down to the PLCs. https://blog.coreflaresec.com/posts/htb-alchemy-pro-lab-realistic-ics-ot-environment/ https://blog.coreflaresec.com/posts/htb-alchemy-pro-lab-realistic-ics-ot-environment/ Fri, 10 Jul 2026 00:00:00 GMT รีวิว Alchemy Pro Lab ของ HackTheBox — สภาพแวดล้อม ICS/OT จำลองโรงเบียร์ Sogard Brewing ตั้งแต่ฝั่ง IT ไปจนถึง PLC