ly4k (thehackersbrain)
ly4k (thehackersbrain)
ly4k (a.k.a. thehackersbrain) is the author of this wiki — a professional offensive security practitioner (red teaming, penetration testing, offensive research, reverse engineering, malware development/analysis). ly4k is the creator of the berserkarch security Linux distro, the founder of cyber-craft-labs, and the author of two of the AD tools this wiki relies on: certipy (AD CS) and whisker (Shadow Credentials / PKINIT). This wiki is their working knowledge base for that field.
Handles / presence
- GitHub: https://github.com/thehackersbrain (tools published under the
ly4khandle) - Portfolio: https://thehackersbrain.dev
- X/Twitter: https://x.com/thehackersbrain
Tools authored (in this wiki)
- certipy — the AD CS attack tool (
find/find-ca,req). The workhorse for the ad-cs-esc-attacks family and the ESC12/ESC15 CVEs (cve-2022-26923, cve-2024-49019). - whisker — the Shadow Credentials tool (plant
msDS-KeyCredentialLink, PKINIT auth, UnPAC the NT hash). Implements shadow-credentials and feeds pkinit-unpac-the-hash.
Projects / orgs
- berserkarch — the security-focused Linux distribution (this dev machine runs it).
- cyber-craft-labs — the security R&D lab ly4k founded.
Why this page exists
ly4k authored the two most-cited AD CS / shadow-credential tools in this wiki and maintains the knowledge base itself. The entity page ties the tools, the distro, the lab, and the research areas (AD CS, Shadow Credentials, PKINIT) together so the “who built/owns this” question resolves in one place.
Links
- certipy, whisker — the tools ly4k authored
- berserkarch, cyber-craft-labs — the projects/orgs
- ad-cs-esc-attacks — the AD CS area certipy targets
- shadow-credentials, pkinit-unpac-the-hash — the areas whisker implements
- cve-2022-26923, cve-2024-49019 — the AD CS CVEs certipy exploits