ρεnτεsτ ωiκi

• Flipper

  • BadUSB
    • beacon.txt
    • Wi-Fi-Passwords-Console.txt
    • Wi-Fi-Passwords-GitHub.txt

• PasswordCracking

  • PasswordAudit.md
  • OneRuleToRuleThemAll.rule

• Payloads

  • Invoke-Rubeus.ps1

• Systems

  • ActiveDirectory
    • ActiveDirectory.md
    • KerberosAttacksCheatsheet.md
  • Azure.md
  • git.md
  • jwt.md
  • MariaDB.md
  • NTDS.dit.md
  • SAS System
  • smb.md
  • Wi-Fi.md

• Tactics

  • Reconnaissance
    • Reconnaissance.md
  • ResourceDevelopment
    • oysters.md
  • InitialAccess
    • LFI2RFI.md
  • Persistence
    • persistence.md
  • PrivilegeEscalation
    • PrivilegeEscalation.md
  • Discovery
    • Discovery.md
  • CommandAndControl
    • servers.md
    • tunnels.md
  • Exfiltration
    • Exfiltration.md

• Tools

  • BloodHound
    • BloodHound
    • customqueries.json
  • Certify
  • certbot
  • CyberChef
  • DonPAPI
  • Google Dorks for Bug Bounty
  • PowerShell
  • RsaCtfTool
  • Rubeus
  • SNMP
  • bash
  • bettercap
  • cewl
  • cmd
  • crackmapexec
  • curl
  • evil-winrm
  • gobuster
  • hashcat
  • hydra
  • impacket
  • john
  • medusa
  • metasploitd
  • MFASweep
  • mimikatz
  • msfvenom
  • mstsc
  • nc
  • nmap
  • pcap
  • psexec
  • responder
  • ROADtools
  • sqlmap
  • wfuzz
  • wmic
  • xfreerdp
  • ykman

• Vulnerabilities

  • OneDrive for Business: Bypass "Anyone with the link" restriction
  • MFA bypass in multi-session AVD

• References

  • Cobalt Strike Red Team Ops - Training Course
  • Universal sigma rule converter for various SIEM, EDR, and NTDR formats
  • Payloads All The Things
  • Microsoft Administrator Sites