GS-034: BITSTREAM (P5) — Kerberoast + Ligolo-ng Pivot (HackSmarter) | 2026-07-23

Axabyte hosts a cybersecurity stream focused on the "Bitstream" CTF range, emphasizing educational pivoting techniques, tool configuration, and the development of a "hacker brain" over rapid flag hunting 0:56.

Key Takeaways:
• The streamer prioritizes teaching the "hacker brain" and thought processes, solving challenges blind to maintain authenticity and avoid pre-written solutions 9:40.
• A custom "Command Vault" browser-based tool is demonstrated to store and auto-populate variables for commands, streamlining the workflow for repetitive tasks 17:45.
• The session covers using Adantic, a free Command and Control (C2) framework similar to Cobalt Strike, to establish beacons and manage sessions 26:50.
• Complex network pivoting is achieved using Legalo, which creates a local VPN interface to route traffic through a compromised SQL server to access the internal Domain Controller 47:20.
• The team identifies a Kerberoastable user ("Eddie") via the DC, cracks the hash using Hashcat, and uses the credentials to attempt lateral movement to the workstation 3:05:22.
• Axabyte announces plans to introduce AI-assisted pentesting in future streams, focusing on using AI as a coaching tool rather than an automated hacking agent 32:20.

The stream highlights that effective red teaming requires deep understanding of network topology and proxy configurations, as demonstrated by the successful pivot to the Domain Controller. Viewers are encouraged to join future streams to explore the development of an AI-assisted hacking framework.

Sources:

• [0:56](https://www.youtube.com/watch?v=kazljz7oawc&t=