https://barriuso.ccSecurity research notes by barriuso.enhttps://barriuso.cc/#/articles/abusing-kerberos-delegationhttps://barriuso.cc/#/articles/abusing-kerberos-delegationUnderstanding constrained and unconstrained delegation from an offensive security perspective.Thu, 10 Sep 2026 00:00:00 GMThttps://barriuso.cc/#/articles/linux-privilege-escalation-methodologyhttps://barriuso.cc/#/articles/linux-privilege-escalation-methodologyA calm, operator-friendly way to go from a low-priv shell to a documented root path without spraying exploits.Sat, 22 Aug 2026 00:00:00 GMThttps://barriuso.cc/#/articles/internal-pivoting-sockshttps://barriuso.cc/#/articles/internal-pivoting-socksHow I build a quiet, understandable path through a segmented lab network without turning my laptop into a router farm.Tue, 14 Jul 2026 00:00:00 GMThttps://barriuso.cc/#/articles/ntlm-relay-modern-environmentshttps://barriuso.cc/#/articles/ntlm-relay-modern-environmentsWhat still makes NTLM relay possible in 2026, and how I talk about it without cargo-culting 2015 blog posts.Tue, 02 Jun 2026 00:00:00 GMThttps://barriuso.cc/#/articles/web-cache-poisoning-offensivehttps://barriuso.cc/#/articles/web-cache-poisoning-offensiveA practical model for cache keys, unkeyed inputs, and why CDNs still turn small header bugs into site-wide findings.Sat, 18 Apr 2026 00:00:00 GMThttps://barriuso.cc/#/articles/red-team-opsec-noteshttps://barriuso.cc/#/articles/red-team-opsec-notesQuiet habits that keep an authorized simulation from becoming an incident-response exercise against yourself.Thu, 05 Mar 2026 00:00:00 GMThttps://barriuso.cc/#/articles/ssh-tunnels-cheatsheethttps://barriuso.cc/#/articles/ssh-tunnels-cheatsheetLocal, remote, dynamic, and jump-host patterns I actually type during internal tests.Tue, 20 Jan 2026 00:00:00 GMThttps://barriuso.cc/#/articles/bloodhound-graph-thinkinghttps://barriuso.cc/#/articles/bloodhound-graph-thinkingHow I read AD attack graphs without drowning in every shortest path to Domain Admin.Thu, 11 Dec 2025 00:00:00 GMT