# Dr. Chaos > Adversarial AI and offensive cybersecurity — news, tutorials, demos, and editorials from Aamir Lakhani (Dr. Chaos) and contributors. Dr. Chaos is a blog dedicated to adversarial AI, cyber counter intelligence, and offensive security. Articles are written by security professionals and researchers to bring an in-depth, real-world look at emerging threats, techniques, and defenses. ## Flagship tutorials - [Impacket from Scratch: Kerberoasting, DCSync, and Lateral Movement in a Lab](https://www.drchaos.com/blog/impacket-active-directory-attacks): A hands-on Impacket tutorial for beginners: build a lab, then walk Kerberoasting, AS-REP roasting, secretsdump/DCSync, and remote execution end to end — with the red team, blue team, and attacker view of each, plus the exact Windows event IDs that detect them and the controls that stop them. - [BloodHound for Beginners: Mapping the Attack Paths Hiding in Active Directory](https://www.drchaos.com/blog/bloodhound-active-directory-attack-paths): Build a lab Active Directory domain, collect it with SharpHound, and use BloodHound CE to find the permission chains that lead to Domain Admin — plus how red teams, blue teams, and real attackers each use it, and how to detect and dismantle the paths. - [DNS Tunneling Explained: Build a Lab and Watch Data Hide Inside DNS](https://www.drchaos.com/blog/dns-tunneling-beginners-lab): A beginner-friendly, step-by-step guide to DNS tunneling: how it works, how to build a safe isolated lab with iodine, what it looks like on the wire, and — most importantly — how to detect and defend against it. ## Recent articles - [Black Hat 2026: The Agents Built Their Own Message Board](https://www.drchaos.com/blog/black-hat-2026-the-agents-built-their-own-message-board) - [Kimi K3 and K3 Swarm: An Open-Weight Model Review from the Red Team Chair](https://www.drchaos.com/blog/kimi-k3-swarm-red-team-review) - [Webshells, Start to Finish: Build One in a Lab, Use It, Then Catch Yourself](https://www.drchaos.com/blog/webshells-attack-defend-lab) - [The State of AI Automation: Zapier vs Make vs n8n, Through a Red Team Lens](https://www.drchaos.com/blog/state-of-ai-automation-zapier-make-n8n-red-team) - [Impacket from Scratch: Kerberoasting, DCSync, and Lateral Movement in a Lab](https://www.drchaos.com/blog/impacket-active-directory-attacks) - [BloodHound for Beginners: Mapping the Attack Paths Hiding in Active Directory](https://www.drchaos.com/blog/bloodhound-active-directory-attack-paths) - [DNS Tunneling Explained: Build a Lab and Watch Data Hide Inside DNS](https://www.drchaos.com/blog/dns-tunneling-beginners-lab) - [Dr. Chaos is back — dark security, total chaos, and adversarial AI](https://www.drchaos.com/blog/dr-chaos-is-back) - [Community Pulse: Top Offensive Security & AI Discussions – July 7, 2026](https://www.drchaos.com/blog/community-pulse-top-offensive-security-ai-discussions-july-7-2026) - [AI in the Crosshairs: Top 3 Offensive AI Security Stories – July 7, 2026](https://www.drchaos.com/blog/ai-in-the-crosshairs-top-3-offensive-ai-security-stories-july-7-2026) - [Novel Cyber TTPs: Attacker Playbook Updates – July 7, 2026](https://www.drchaos.com/blog/novel-cyber-ttps-attacker-playbook-updates-july-7-2026) - [Active Exploits & Emerging Threats – July 7, 2026](https://www.drchaos.com/blog/active-exploits-emerging-threats-july-7-2026) - [Offensive Security Intelligence Brief: Top 5 Stories – July 7, 2026](https://www.drchaos.com/blog/offensive-security-intelligence-brief-top-5-stories-july-7-2026) - [What Is Model Looping, and Why Should Security Teams Care?](https://www.drchaos.com/blog/what-is-model-looping-and-why-should-security-teams-care) - [SAP NetWeaver Critical RCE Vulnerability Under Mass Exploitation — Patch or Take Offline Now](https://www.drchaos.com/blog/sap-netweaver-critical-rce-vulnerability-under-mass-exploitation-patch-or-take-offline-now) - [CISA Issues Emergency Directive for Ivanti EPMM Zero-Day Being Exploited by Nation-State Actors](https://www.drchaos.com/blog/cisa-issues-emergency-directive-for-ivanti-epmm-zero-day-being-exploited-by-nation-state-actors) - [Scattered Spider Members Indicted: Five Hackers Charged for MGM and Caesars Ransomware Attacks](https://www.drchaos.com/blog/scattered-spider-members-indicted-five-hackers-charged-for-mgm-and-caesars-ransomware-attacks) - [Agentic AI is Changing CyberSecurity Faster Than Expected..](https://www.drchaos.com/blog/agentic-ai-is-changing-cybersecurity-faster-than-expected) - [Podcast: Project Glasswing and Agentic AI loops](https://www.drchaos.com/blog/podcast-project-glasswing-and-agentic-ai-loops) - [The Conference Recap Nobody Asked For But Everyone Needed](https://www.drchaos.com/blog/the-conference-recap-nobody-asked-for-but-everyone-needed) - [Podcast: RSA 2026 Recap](https://www.drchaos.com/blog/podcast-rsa-2026-recap) - [AI Security Isn’t One Thing — It’s a Stack](https://www.drchaos.com/blog/ai-security-isn-t-one-thing-it-s-a-stack) - [When AI Realized It Was Talking to Itself—and Switched to Encrypted Mode](https://www.drchaos.com/blog/when-ai-realized-it-was-talking-to-itself-and-switched-to-encrypted-mode) - [Shadows in the Code: The Cyber Dimension of the 2026 US-Israel-Iran Conflict](https://www.drchaos.com/blog/shadows-in-the-code-the-cyber-dimension-of-the-2026-us-israel-iran-conflict) - [The Cyber Frontlines: Unpacking the Digital Warfare in the US-Israel-Iran Conflict](https://www.drchaos.com/blog/the-cyber-frontlines-unpacking-the-digital-warfare-in-the-us-israel-iran-conflict) - [Thinking Out Loud: Agentic AI and the Future of Threat Intelligence](https://www.drchaos.com/blog/thinking-out-loud-agentic-ai-and-the-future-of-threat-intelligence) - [Agentic AI Failures Are Architectural, Not Prompt-Level](https://www.drchaos.com/blog/agentic-ai-failures-are-architectural-not-prompt-level) - [From Chatbots to Actors: Why Agentic AI Changes the Security Model](https://www.drchaos.com/blog/from-chatbots-to-actors-why-agentic-ai-changes-the-security-model) - [The Agentic Shift: Architecting for the Crisis of Authenticity and Industrialized Cybercrime in 2026](https://www.drchaos.com/blog/the-agentic-shift-architecting-for-the-crisis-of-authenticity-and-industrialized-cybercrime-in-2026) - [Podcast: AI Agents and the New Insider Threat](https://www.drchaos.com/blog/podcast-ai-agents-and-the-new-insider-threat) ## About - [Author & mission](https://www.drchaos.com/about) - [All articles](https://www.drchaos.com/blog) - [RSS feed](https://www.drchaos.com/feed.xml) - [Podcast](https://www.drchaos.com/podcast) ## Usage You may read, summarize, and cite this content with attribution to Dr. Chaos (Aamir Lakhani) and a link to the source article on drchaos.com.