ecf29c2cbe
Active Directory - Mitigations
2020-06-18 11:55:48 +02:00
71ddb449ce
Windows Persistence
2020-06-01 21:37:32 +02:00
5323ceb37c
SUDO CVE + Windows Drivers PrivEsc
2020-05-28 11:19:16 +02:00
4ca5e71c2f
Bind shell cheatsheet ( Fix #194 )
2020-05-24 14:09:46 +02:00
c1731041b5
Misc & Tricks Page + AMSI + Defender
2020-05-16 13:22:55 +02:00
eb074393df
Windows Persistence - Binary replacing
2020-05-13 23:07:39 +02:00
a65fdbb568
XSW 4 Fix #205
2020-05-12 14:27:25 +02:00
e95a4aeac0
MSOL AD Spray
2020-05-11 17:08:03 +02:00
3ed2b28e59
Add user /Y + GPO Powerview
2020-05-10 23:16:29 +02:00
7f1c150edd
Mimikatz Summary
2020-05-10 16:17:10 +02:00
32b83da302
Update Linux - Privilege Escalation.md
...
Add new privesc for (Centos/Redhat)
Writable /etc/sysconfig/network-scripts/
2020-05-04 11:44:24 +02:00
1fc8b57c85
Update Windows - Privilege Escalation.md
...
added Get-Process to list processes
2020-05-03 21:11:01 +00:00
5163ef902c
XSS Google Scholar Payload + Skeleton Key Persistence
2020-05-03 16:28:17 +02:00
04899355ad
Magic Hashes + SQL fuzz
2020-04-26 21:43:42 +02:00
7c8e9ac4ce
Typo
2020-04-22 16:01:49 +02:00
14d03b96a1
Linux privesc - SSH Key Predictable PRNG (Authorized_Keys) Process - Summary
2020-04-22 16:00:31 +02:00
2e507a2b2f
Linux privesc - SSH Key Predictable PRNG (Authorized_Keys) Process
2020-04-22 15:55:10 +02:00
2740600a6b
Alternative TTY method with /usr/bin/script
2020-04-21 19:21:51 +02:00
89f906f7a8
Fix issue - C reverse shell
2020-04-21 11:17:39 +02:00
af6760ef7a
RoadRecon + JSON None refs
2020-04-17 16:34:51 +02:00
29194a8ef1
Add others shell on reverse shell cheatsheet
...
Add others shell on reverse shell cheatsheet
2020-04-13 19:06:01 +02:00
6e7af5a267
Docker Registry - Pull/Download
2020-04-04 18:27:41 +02:00
1d299f55c9
Delete unnecessary escape characters
...
`whoami` has already been wrapped in backquotes. There is no need to user escape characters again
2020-03-29 23:40:39 +08:00
be8f32b586
Docker escape and exploit
2020-03-29 16:48:09 +02:00
95ab07b45e
CloudTrail disable, GraphQL tool
2020-03-28 12:01:56 +01:00
a3cc577ebd
added cmd on the USOSVC vuln
...
Added `cmd \c C:\Users\nc.exe` as not typing `cmd \c` did not work for me. Might need even more explanation
2020-03-24 20:15:59 +00:00
1b190939c4
Remove example from win priv esc
...
This example was used on hackthebox where it leaked the root flag of a machine on free servers.
This resulted in every user being able to get the root flag before they have even completed the box which isn't fair to others.
This example should either be changed or removed completely to combat copy-pasting without knowing what you're doing.
2020-03-23 17:17:42 -05:00
2bdbb2dbc5
Update Windows - Privilege Escalation.md
...
Make powershell on EoP - Runas easier to copy paste
2020-03-22 19:25:35 +00:00
1538ccd7f2
Gaining AWS Console Access via API Keys
2020-03-19 11:59:49 +01:00
1f3a94ba88
AWS SSM + Shadow copy attack
2020-03-06 15:30:38 +01:00
5d87804f71
AWS EC2 Instance Connect + Lambda + SSM
2020-03-06 13:33:14 +01:00
c19e36ad34
Azure AD Connect - MSOL Account's password and DCSync
2020-03-01 17:06:31 +01:00
71a307a86b
AWS - EC2 copy image
2020-02-29 12:56:00 +01:00
74f2dfccca
Kerberos Constrained Delegation
2020-02-23 21:20:46 +01:00
c5ac4e9eff
AWS Patterns
2020-02-23 20:58:53 +01:00
915946a343
Fix Cloud Training
2020-02-21 10:50:43 +01:00
bda7100a77
Fix Cloud references
2020-02-21 10:47:16 +01:00
984078050b
Cloud - Pentest with AWS and Azure
2020-02-21 10:36:01 +01:00
7f0650dfc0
IIS Raid Persistence
2020-02-20 16:51:22 +01:00
ba30618a8b
Cobalt Strike - Artifact
2020-02-14 17:10:00 +01:00
7cd49769be
WMI + Cobalt Strike
2020-02-13 22:53:45 +01:00
994e557178
Added more TTY Shell using perl and python
2020-02-09 12:46:18 +05:30
aba6874517
Maps API + secretsdump enabled user/pw last set + certutil mimikatz
2020-02-06 21:41:29 +01:00
056161fd9f
Updated Java & Groovy Shells
...
Added threaded shells and alternative pure Java reverse shell
2020-02-06 15:43:58 +01:00
50a376337d
Update Reverse Shell Cheatsheet.md
2020-02-05 23:29:43 +01:00
fb76fdc331
Windows Firewall + DLL hijacking + Named pipes
2020-02-01 22:12:36 +01:00
be0397fa68
BloodHound ZIP + Zero Width space tip
2020-01-19 22:46:45 +01:00
8dc1e3c5fe
Update TTY shell command for python
...
Made the command to use python3 because mostly now the machines have python3 installed.
2020-01-10 17:57:53 +05:30
7f34c01794
Change IP and port to a common value across commands
2020-01-09 16:20:49 +05:30
96b9adb98b
Change IP and port to a common value across commands
2020-01-09 16:17:35 +05:30
Swissky
joker2a
guanicoe
Th1b4ud
Th1b4ud
M4x
guenicoe
PixeL
Fanis Katsimpas
Sameer Bhatt (debugger)
socketz
antonioCoco
Mehtab Zafar
Ayoma Wijethunga