RFC - Offensive Security Notes

Active Directory
Initial Access
- VBA Macros
  - Mark-of-the-Web
Discovery
- Juicy files
  - PowerShell history
- Network Enumeration
Execution
Exploitation
- Win32 APIs
Credential Access
- Microsoft Windows
Lateral Movement
- Windows Lateral Movement
- Linux Lateral Movement
Persistence
Defence Evasion
Network Pivoting
- Proxies and port fowarding
- Network discovery and scanning
Exfiltration
- Windows
  - Copy files over SMB
Services
- MS SQL Server
Misc
- CrackMapExec
- Cheat sheets
Cloud
- Azure
  - Authentication
    Access and Tokens
  - Enumeration

Powered by GitBook

On this page

Initial Access

VBA Macros

Mark-of-the-Web

PreviousDSRM (Directory Services Restore Mode)NextMark-of-the-Web

Last updated 2 years ago