Malware Dev

DLL Injection

Injecting DLL’s into remote processes.

Malware Dev

Interacting with Foreign Handlers

Writing stagers to interact with foreign C2 frameworks.

Cheat Sheets

Metasploit

A Metasploit command reference.

Infrastructure

Active Directory Schema Modification

Changing default security descriptor properties to escalate from a child to parent domain.

Web Application

Exploiting Tomcat

Exploiting common Tomcat vulnerabilities.

Cheat Sheets

Configuring Kali

Adding additional security auditing tools to Kali.

Infrastructure

Attacking MSSQL

Compromising MSSQL databases, and escalating privileges.

Infrastructure

Golden gMSA Attacks

Extracting gMSA service accounts from child domains.

Infrastructure

SID History Abuse

Modifying SID History values to compromise parent domains.

Infrastructure

Backup Operator Privilege Escalation

Extracting domain controller credentials using the Backup Operators group.

Infrastructure

Active Directory Explorer

Using Microsoft AD Explorer to collect Active Directory attack path information.

Infrastructure

Active Directory DACL Attacks

Exploiting misconfigured Active Directory access control lists.