Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome-RedTeam-Cheatsheet

Last synced: 3 days ago
JSON representation

Miscs
- - Active-Directory-Exploitation-Cheat-Sheet
- Abusing IPv6 in AD
  - **RPC_C_AUTHN_DCE_PUBLIC**
MS Exchange
- ProxyLogon
  - ProxyLogon - 2021-26855 that allows an attacker to bypass authentication and impersonate users on MS Exchange servers**
- OWA EWS and EAS Password Spraying
  - ruler
  - MailSniper
- PrivExchange
  - PrivExchange
- GAL and OAB Extraction
  - oaburl.py
Azure Active Directory
- Golden SAML
  - here
- PRT Manipulation
  - lantern
- MSOL Service Account
  - azuread_decrypt_msol.ps1
Privilege Escalation
- Token Impersonation
  - Incognito
- Kerberoasting
  - impacket
  - crackmapexec
Pivoting
- SMB Pipes
  - Invoke-Piper - SocksProxy](https://github.com/p3nt4/Invoke-SocksProxy) for that.
RID Cycling
- Password Spraying on the domain
  - lookupsid
  - lookupsid
Enhanced Security Bypass
- ETW Disabling
  - here
Persistence
- AdminSDHolder and SDProp
  - AD Module
  - PowerView

Programming Languages