Awesome-RedTeam-Cheatsheet

Red Team Cheatsheet in constant expansion.
https://github.com/RistBS/Awesome-RedTeam-Cheatsheet

Last synced: 1 day ago
JSON representation

Miscs
- - Active-Directory-Exploitation-Cheat-Sheet
- Abusing IPv6 in AD
  - **RPC_C_AUTHN_DCE_PUBLIC**
MS Exchange
- ProxyLogon
  - ProxyLogon - 2021-26855 that allows an attacker to bypass authentication and impersonate users on MS Exchange servers**
- OWA EWS and EAS Password Spraying
  - ruler
  - MailSniper
- PrivExchange
  - PrivExchange
- GAL and OAB Extraction
  - oaburl.py
Azure Active Directory
- Golden SAML
  - here
- PRT Manipulation
  - lantern
- MSOL Service Account
  - azuread_decrypt_msol.ps1
Privilege Escalation
- Token Impersonation
  - Incognito
- Kerberoasting
  - impacket
  - crackmapexec
Pivoting
- SMB Pipes
  - Invoke-Piper - SocksProxy](https://github.com/p3nt4/Invoke-SocksProxy) for that.
RID Cycling
- Password Spraying on the domain
  - lookupsid
  - lookupsid
Enhanced Security Bypass
- ETW Disabling
  - here
Persistence
- AdminSDHolder and SDProp
  - AD Module
  - PowerView

Programming Languages

Python 5 C# 1 Go 1 PowerShell 1 C 1

Categories

MS Exchange 5 Privilege Escalation 3 Azure Active Directory 3 Miscs 2 Persistence 2 RID Cycling 2 Enhanced Security Bypass 1 Pivoting 1

Sub Categories

OWA EWS and EAS Password Spraying 2 Kerberoasting 2 Password Spraying on the domain 2 AdminSDHolder and SDProp 2 ProxyLogon 1 Abusing IPv6 in AD 1 ETW Disabling 1 PRT Manipulation 1 GAL and OAB Extraction 1 Golden SAML 1 Token Impersonation 1 PrivExchange 1 SMB Pipes 1 MSOL Service Account 1

Keywords

pentesting 3 active-directory 2 security 2 windows 2 powershell 2 python 2 networks 1 active-directory-cheatsheet 1 active-directory-exploitation 1 activedirectory 1 attack 1 cheat 1 cheat-sheet 1 cheatsheet 1 enumeration 1 exploitation 1 hacking 1 hacking-cheasheet 1 hacking-tool 1 hacking-tools 1 penetration-testing 1 wmi 1 privilege-escalation 1 smb 1 windows-active-directory 1 network 1 pass-the-hash 1 exchange 1 mapi 1 shells 1 dcerpc 1 dcom 1 impacket 1 kerberos 1 msrpc 1 netbios 1