/00 · CONNECTION ESTABLISHED · MILAN, ITALY
Enrico
Dolce
Senior Security Specialist · Red Team Operator · Penetration Tester
Red teaming and advanced attack simulations to make enterprises more resilient — backed by hands-on cybersecurity governance experience.
Attack graph
“AD takeover” // step 00/06
Initial access → OPERATOR · KALI
At a glance
- + Years in the field
- 05+
- From the SOC to the red team: both sides of the fight.
- + Certifications
- 02+
- eCPPT · CASE
- + Writeups
- 04+
- Retired machines, anonymized case studies and research.
/01 Operating areas
01
Active Directory
Kerberos, ACL abuse, lateral movement. From first user to domain.
02
Web & API
OWASP WSTG/ASVS, business logic, vulnerability chaining.
03
Red Team
Assumed breach, C2 and OPSEC, purple teaming with the SOC.
04
OSINT
Reproducible, traceable and in-scope reconnaissance.
/02 Latest from the archive
Full archive ↗AI & Data Mining · 21 Mar 2025
Data Mining
Notes from the Data Mining course of the Master in Cyber Security at the University of Pisa: data representation, preprocessing, classification, clustering and association rules.
Open
Web App Pentest · 01 Mar 2025
ViewState insecure deserialization
Deep dive into ASP.NET ViewState insecure deserialization: how ViewState and MAC validation work, how to exploit a known machine key, and how to defend against it.
Open
Active Directory · 15 Nov 2024
Active Directory
Active Directory study notes: fundamentals, authentication protocols, penetration test methodology, main attack paths and tooling.
Open