V1NCENT RSS feedhttps://v1ncent.me/https://v1ncent.me/blog/htb-sherlock-crownjewel-1/https://v1ncent.me/blog/htb-sherlock-crownjewel-1/VSS, an NTDS.dit copy, and four artifacts to piece it together. My quick notes from CrownJewel-1.Wed, 09 Sep 2026 00:00:00 GMThttps://v1ncent.me/blog/htb-sherlock-optinseltrace-3/https://v1ncent.me/blog/htb-sherlock-optinseltrace-3/A suspicious Christmas gift, Volatility, and PowerShell logs. The bits I kept from OpTinselTrace-3.Wed, 09 Sep 2026 00:00:00 GMThttps://v1ncent.me/blog/htb-sherlocks-roadmap-key-notes/https://v1ncent.me/blog/htb-sherlocks-roadmap-key-notes/Quick notes from 12 Sherlocks: useful artifacts, little gotchas, and things to remember for the next lab.Wed, 09 Sep 2026 00:00:00 GMThttps://v1ncent.me/blog/unearthly-shop/https://v1ncent.me/blog/unearthly-shop/An HTB Cyber Apocalypse 2023 write-up chaining MongoDB $lookup, mass assignment, and autoloader abuse to reach a Monolog deserialization gadget and execute /readflag.Sat, 05 Sep 2026 00:00:00 GMThttps://v1ncent.me/blog/htb-sherlock-miscloud/https://v1ncent.me/blog/htb-sherlock-miscloud/GCP incident response notes for HTB Sherlock MisCloud, covering exposed RDP, Gitea git-hook code execution, service-account abuse, Cloud Storage access, and data exfiltration.Wed, 22 Jul 2026 00:00:00 GMThttps://v1ncent.me/blog/sherlock-nubilum-1/https://v1ncent.me/blog/sherlock-nubilum-1/AWS CloudTrail investigation of unauthorized EC2 activity, exposed S3 access, attacker infrastructure changes, and PoshC2 activity.Thu, 16 Jul 2026 00:00:00 GMThttps://v1ncent.me/blog/htb-sherlock-subatomic/https://v1ncent.me/blog/htb-sherlock-subatomic/Malware triage notes for HTB Sherlock Subatomic, covering an NSIS-packed Electron stealer, Discord token theft, browser credential collection, and JavaScript runtime instrumentation.Wed, 08 Jul 2026 00:00:00 GMThttps://v1ncent.me/blog/htb-sherlocks-blue-team-roadmap/https://v1ncent.me/blog/htb-sherlocks-blue-team-roadmap/A practical 10-week HTB Sherlocks roadmap for SOC, DFIR, Blue Team, Purple Team, malware triage, cloud IR, threat intel, and interview prep.Thu, 02 Jul 2026 00:00:00 GMThttps://v1ncent.me/blog/filtered-reality/https://v1ncent.me/blog/filtered-reality/Full-chain CTF writeup for a WordPress and Puppeteer bot challenge involving nonce leakage, DOM clobbering, CSP nonce recovery, RCE, and SHA-256 length extension.Tue, 30 Jun 2026 00:00:00 GMThttps://v1ncent.me/blog/gcp-beginner-path/https://v1ncent.me/blog/gcp-beginner-path/Phase 6 notes: Google Cloud Storage exposure, hidden file discovery, SSRF, Gopher bypasses, metadata service access, and GCP initial access.Wed, 03 Jun 2026 00:00:00 GMThttps://v1ncent.me/blog/azure-beginner-path/https://v1ncent.me/blog/azure-beginner-path/Phase 5 notes: Azure Blob Storage exposure, Key Vault abuse, Storage Tables, Entra ID recon, AzureHound, BloodHound, Microsoft Graph, and M365 post-exploitation.Mon, 01 Jun 2026 00:00:00 GMThttps://v1ncent.me/blog/aws-detection-blue-team/https://v1ncent.me/blog/aws-detection-blue-team/Phase 4 notes: AWS detection, CloudTrail analysis, Athena queries, Macie, Security Hub, Amazon Detective, and credential abuse response.Fri, 29 May 2026 00:00:00 GMThttps://v1ncent.me/blog/aws-privilege-escalation-service-abuse/https://v1ncent.me/blog/aws-privilege-escalation-service-abuse/Phase 3 notes: privilege escalation paths, trust-policy abuse, and service-level exploitation across S3, IAM, Cognito, SQS, and Lambda.Mon, 25 May 2026 00:00:00 GMThttps://v1ncent.me/blog/web-to-cloud-attack-chains/https://v1ncent.me/blog/web-to-cloud-attack-chains/Phase 2 notes: chaining web vulnerabilities into AWS credential theft, secret discovery, and cloud resource compromise.Sat, 23 May 2026 00:00:00 GMThttps://v1ncent.me/blog/aws-storage-iam-foundation/https://v1ncent.me/blog/aws-storage-iam-foundation/Phase 1 notes: S3, IAM, account ID discovery, CloudTrail investigation, and exposure risks in EBS/RDS.Sun, 17 May 2026 00:00:00 GMThttps://v1ncent.me/blog/siem-analysis-using-splunk-bots-v1/https://v1ncent.me/blog/siem-analysis-using-splunk-bots-v1/SIEM analysis report converted from PDF to MDX format.Tue, 12 May 2026 00:00:00 GMThttps://v1ncent.me/blog/windows-forensics-event-log-analysis-ghosttrace/https://v1ncent.me/blog/windows-forensics-event-log-analysis-ghosttrace/Windows forensics and event log analysis report converted from PDF to MDX.Tue, 12 May 2026 00:00:00 GMThttps://v1ncent.me/blog/suctf2026-su-forensics/https://v1ncent.me/blog/suctf2026-su-forensics/SUCTF 2026 forensics writeup for the AD1 image challenge.Tue, 17 Mar 2026 00:00:00 GMThttps://v1ncent.me/blog/uofctf2025-web-challenge/https://v1ncent.me/blog/uofctf2025-web-challenge/Date: January 11, 2026Mon, 12 Jan 2026 00:00:00 GMThttps://v1ncent.me/blog/fancy/https://v1ncent.me/blog/fancy/Status: DoneSat, 03 Jan 2026 00:00:00 GMThttps://v1ncent.me/blog/hqlime/https://v1ncent.me/blog/hqlime/Status: DoneSat, 03 Jan 2026 00:00:00 GMThttps://v1ncent.me/blog/quack-quack/https://v1ncent.me/blog/quack-quack/Here’s a tight write-up you can paste into your notes/blog.Sat, 03 Jan 2026 00:00:00 GMThttps://v1ncent.me/blog/apexsurvive/https://v1ncent.me/blog/apexsurvive/Created: September 14, 2025 11:23 AMSat, 03 Jan 2026 00:00:00 GMThttps://v1ncent.me/blog/artifact-of-dangerous-sighting/https://v1ncent.me/blog/artifact-of-dangerous-sighting/Created: January 9, 2025 3:54 AMSat, 03 Jan 2026 00:00:00 GMThttps://v1ncent.me/blog/data-explorer/https://v1ncent.me/blog/data-explorer/Date: July 4, 2023 1:00 PM (EDT)Sat, 03 Jan 2026 00:00:00 GMThttps://v1ncent.me/blog/novacore/https://v1ncent.me/blog/novacore/Fri, 12 Sep 2025 00:00:00 GMThttps://v1ncent.me/blog/omniwatch/https://v1ncent.me/blog/omniwatch/Thu, 28 Aug 2025 00:00:00 GMThttps://v1ncent.me/blog/streamcoin/https://v1ncent.me/blog/streamcoin/Sun, 14 Jul 2024 00:00:00 GMThttps://v1ncent.me/blog/sagigram/https://v1ncent.me/blog/sagigram/Tue, 04 Jul 2023 00:00:00 GMThttps://v1ncent.me/blog/untitled-smarty-challenge/https://v1ncent.me/blog/untitled-smarty-challenge/Tue, 04 Jul 2023 00:00:00 GMThttps://v1ncent.me/blog/grand-prix-heaven/https://v1ncent.me/blog/grand-prix-heaven/Tue, 04 Jul 2023 00:00:00 GMThttps://v1ncent.me/blog/corctf-challenge-dev/https://v1ncent.me/blog/corctf-challenge-dev/Tue, 04 Jul 2023 00:00:00 GMT