<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Certipy on Elliot Belt</title><link>https://felixbillieres.github.io/tags/certipy/</link><description>Recent content in Certipy on Elliot Belt</description><generator>Hugo -- gohugo.io</generator><language>en</language><managingEditor>felix.billieres@ecole2600.com (Elliot Belt)</managingEditor><webMaster>felix.billieres@ecole2600.com (Elliot Belt)</webMaster><copyright>© 2026 Elliot Belt</copyright><lastBuildDate>Mon, 28 Sep 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://felixbillieres.github.io/tags/certipy/index.xml" rel="self" type="application/rss+xml"/><item><title>Pwning VulnCicada with Exegol Studio</title><link>https://felixbillieres.github.io/posts/htb-vulncicada-exegol-studio/</link><pubDate>Mon, 28 Sep 2026 00:00:00 +0000</pubDate><author>felix.billieres@ecole2600.com (Elliot Belt)</author><guid>https://felixbillieres.github.io/posts/htb-vulncicada-exegol-studio/</guid><description>Working through HTB VulnCicada with Exegol Studio, from exposed profile files to ADCS and Kerberos relaying. A writeup of the run, including the mistakes, questions and documentation that helped me through it.</description><media:content xmlns:media="http://search.yahoo.com/mrss/" url="https://felixbillieres.github.io/posts/htb-vulncicada-exegol-studio/featured.png"/></item></channel></rss>