Skip to content

Commit fa9c808

Browse files
author
anon
committed
wew, finally using git again. Splitting up PrivEscPostex.md into 4 pages, 1 general and 1 for linux, mac, and windows. Also 'fixed' the Table of Contents so it should be possible to actually use them now...maybe.
1 parent 5f61d4f commit fa9c808

12 files changed

+8179
-7646
lines changed

Draft/10k-xkcd.png

91.1 KB
Loading

Draft/PrivEscPostExWin.md

Lines changed: 6404 additions & 0 deletions
Large diffs are not rendered by default.

Draft/PrivescPostEx.md

Lines changed: 149 additions & 7531 deletions
Large diffs are not rendered by default.

Draft/PrivescPostExLin.md

Lines changed: 482 additions & 0 deletions
Large diffs are not rendered by default.

Draft/PrivescPostExmac.md

Lines changed: 1010 additions & 0 deletions
Large diffs are not rendered by default.

Draft/RT.md

Lines changed: 121 additions & 59 deletions
Original file line numberDiff line numberDiff line change
@@ -2,78 +2,30 @@
22

33
------------------------------------------------------------------------------------------------------------------------------
44
## Table of Contents
5-
- [General](#general)
5+
- Stuff is sorted into various categories, use the following top-level ToCs for quick access to the appropriate ToC
6+
- [General Stuff](#general)
67
- [101](#101)
78
- [Courses](#gcourses)
89
- [General Informative Information](#gii)
910
- [Generally Relevant/Useful Information](#grui)
1011
- [Red Team Experiencs](#rte)
1112
- [Papers](#gpapers)
1213
- [Other](#rother)
13-
14-
| | | | |
15-
|--- |--- |--- |--- |
16-
| [Adversary Simulation &Or Emulation](#advsim) | [Building(and Growing) a (Red) Team](#dreamteam) | [Organizing a Red Team Engagement](#engagered) |
17-
| [Articles/Blogposts/Writeups](#advart) | [101](#team101) | [Frameworks & Methodologies](#methods) |
18-
| [Talks/Presentations/Videos](#advvid) | [Articles/Blogposts/Writeups](#teamart) | [Facilitating a Red Team Engagement](#farte) |
19-
| [Simulation Plans](#advplans) | [Talks/Presentations/Videos](#teamtalks) | [Metrics & models](#gmm) |
20-
| [Tools](#advtools) | | [Purple Teaming](#purple) |
21-
| | | |
22-
14+
- [Adversary Emu/Simu ; Building(and growing) a Red Team ; Organizing a Red Team Engagement](#first)
15+
- [C2s & Infrastructure](#c2ss)
2316
- [Simulation Tools](#simtools)
2417
- [Articles/Blogposts/Writeups](#sta)
2518
- [Talks/Presentations/Videos](#stpv)
2619
- [Adversary Simulation Tools](#sast)
20+
- [Implants & Payload Development](#implants)
2721
- [Advanced Persistent Threat Actors & Campaigns](#aptdata)
2822
- [Campaigns](#aptcamp)
29-
30-
| | |
31-
|--- |--- |
32-
| [Command, Control, Communicate (or just CnC, or C3)](#c2s) | [Infrastructure](#infra) |
33-
| [General stuff](#c2gs) | [101](#i101) |
34-
| [C2 Development](#c2d) | [Articles/Blogposts/Writeups](#iarticles) |
35-
| [C2 Frameworks](#c2-frames) | [HW/SW for Remote Testing](#remote-testing) |
36-
| [Communication Channel Example PoCs](#c2cc) | [Logging & Monitoring](#ilm) |
37-
| [Papers about C2s](#c2papers) | [Web Server](#iws) |
38-
| | [Automation Tooling](#iat) |
39-
| | |
40-
41-
| | |
42-
|--- |--- |
43-
| [Cobalt Strike](#cobaltstrike) | [Empire](#empire) |
44-
| [101](#cs101) | [Articles](#articles) |
45-
| [Agressor Scripts](#csas) | [Customizing](#ecustom) |
46-
| [Beacon](#csbeacon) | [Manual](#edoc) |
47-
| [C2](#csc2) | [Modules & Additions/Extensions](#emods) |
48-
| [Documentation](#csdoc) | [Modules & Additions/Extensions](#emods) |
49-
50-
| | |
51-
|--- |--- |
52-
| [Domains and Domain Related Things](#domains) | [Egress & Exfiltration](#egress) | [External Attack Surface](#external) |
53-
| [General](#dg) | | |
54-
| [Domain Fronting](#df) | | |
55-
| [Tools](#dt) | | |
56-
| [Domain reputation](#dr) | | |
57-
| | | |
58-
59-
60-
| | |
61-
|--- |--- |
62-
| [HW Related/Physical Devices](#hw) | [Implant & Payload Development](#implantdev) |
63-
| [Access Methods/Tools](#access) | [Creation & Development](#pcd) |
64-
| [Dropboxes](#dropboxes) | [Language Specific](#langspec) |
65-
| [Physical Implants](#implants) | [Delivery & Staging](#pds) |
66-
| | |
67-
68-
69-
- [Implant Development Dev](#paydev)
70-
- [Lang Agnostic](#langag)
71-
- [Lang Specific](#langpsec)
72-
- [C](#cpay)
73-
- [C++](#cpppay)
74-
- [CSharp](#csharppay)
75-
76-
23+
- [Tactics/Strategies/Methodologies](#tacticsandstats)
24+
- [Lessons Learned](#vll)
25+
- [Tactics](#ttactics)
26+
- [Strategies](#tstrats)
27+
- [Methodologies](#tmethods)
28+
- [Skills Improvement](#vskill)
7729
- [Penetration Testing](#pentest)
7830
- [Culture](#culture)
7931
- [Workflows](#penworkflows)
@@ -85,6 +37,116 @@
8537
- [MainFrames](#main)
8638
- [SCADA/PLCs](#scada)
8739
- [Virtual Appliances](#va)
40+
------------------------------------------------------------------------------------------------------------------------
41+
42+
43+
44+
45+
46+
47+
48+
49+
50+
51+
------------------------------------------------------------------------------------------------------------------------
52+
### Adversary Emu/Simu ; Building(and growing) a Red Team ; Organizing a Red Team Engagement<a name="first"></a>
53+
- [Adversary Simulation &Or Emulation](#advsim)
54+
- [Articles/Blogposts/Writeups](#advart)
55+
- [Talks/Presentations/Videos](#advvid)
56+
- [Simulation Plans](#advplans)
57+
- [Tools](#advtools)
58+
- [Building(and Growing) a (Red) Team](#dreamteam)
59+
- [101](#team101)
60+
- [Articles/Blogposts/Writeups](#teamart)
61+
- [Talks/Presentations/Videos](#teamtalks)
62+
- [Organizing a Red Team Engagement](#engagered)
63+
- [Frameworks & Methodologies](#methods)
64+
- [Facilitating a Red Team Engagement](#farte)
65+
- [Metrics & models](#gmm)
66+
- [Purple Teaming](#purple)
67+
------------------------------------------------------------------------------------------------------------------------
68+
69+
70+
71+
72+
73+
74+
75+
76+
77+
78+
------------------------------------------------------------------------------------------------------------------------
79+
### C2s & Infrastructure<a name="c2ss"></a>
80+
- [Command, Control, Communicate (or just CnC, or C3)](#c2s)
81+
- [General stuff](#c2gs)
82+
- [C2 Development](#c2d)
83+
- [C2 Frameworks](#c2-frames)
84+
- [Communication Channel Example PoCs](#c2cc)
85+
- [Papers about C2s](#c2papers)
86+
- [Infrastructure](#infra)
87+
- [101](#i101)
88+
- [Articles/Blogposts/Writeups](#iarticles)
89+
- [HW/SW for Remote Testing](#remote-testing)
90+
- [Logging & Monitoring](#ilm)
91+
- [Web Server](#iws)
92+
- [Automation Tooling](#iat)
93+
- [Cobalt Strike](#cobaltstrike)
94+
- [101](#cs101)
95+
- [Agressor Scripts](#csas)
96+
- [Beacon](#csbeacon)
97+
- [C2](#csc2)
98+
- [Documentation](#csdoc)
99+
- [Empire](#empire)
100+
- [Articles](#articles)
101+
- [Customizing](#ecustom)
102+
- [Manual](#edoc)
103+
- [Modules & Additions/Extensions](#emods)
104+
- [Modules & Additions/Extensions](#emods)
105+
-
106+
- [Domains and Domain Related Things](#domains)
107+
- [General](#dg)
108+
- [Domain Fronting](#df)
109+
- [Tools](#dt)
110+
- [Domain reputation](#dr)
111+
- [Egress & Exfiltration](#egress)
112+
-
113+
- [External Attack Surface](#external)
114+
------------------------------------------------------------------------------------------------------------------------
115+
116+
117+
118+
119+
120+
121+
122+
123+
124+
125+
------------------------------------------------------------------------------------------------------------------------
126+
### Implants & Payload Development<a name="implants"></a>
127+
- [Implant & Payload Development](#implantdev)
128+
- [Creation & Development](#pcd)
129+
- [Language Specific](#langspec)
130+
- [Lang Agnostic](#langag)
131+
- [C](#cpay)
132+
- [C _Other_ stuff](#cpay)
133+
- [C++](#cpppay)
134+
- [C++ _Other_ stuff](#cpppay)
135+
- [CSharp](#csharppay)
136+
- [CSharp _Other_ stuff](#csharpother)
137+
-
138+
- _Other_ stuff = I'm too lazy to make links
139+
- [Delivery & Staging](#pds)
140+
- [Access Methods/Tools](#access)
141+
- [Physical Implants](#physimplant)
142+
- [HW Related/Physical Devices](#hw)
143+
- [Dropboxes](#dropboxes)
144+
- [Physical Implants](#implants)
145+
- []()
146+
- []()
147+
- []()
148+
- []()
149+
- []()
88150
------------------------------------------------------------------------------------------------------------------------------
89151

90152

Draft/config.json

Lines changed: 0 additions & 3 deletions
This file was deleted.

Draft/theme-blue-min.css

Lines changed: 0 additions & 5 deletions
This file was deleted.

Draft/theme-min-blue.css

Lines changed: 0 additions & 5 deletions
This file was deleted.

Draft/theme.min.css

Lines changed: 0 additions & 23 deletions
This file was deleted.

README.md

Lines changed: 13 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -5,33 +5,26 @@
55
<img src="images/Markdown-000000.svg">
66
<img src="./images/v1.svg">
77
</div>
8-
8+
<div align = "center">
9+
<img src="images/10k-xkcd.png">
910

1011
An Information Security Reference That Doesn't Suck
1112

1213
### Goal:
13-
* **Be an awesome Information Security Reference**
14-
* **List of techinques, tools and tactics to learn from/reference.**
15-
* Rich resource of infosec knowledge for anyone to browse through as a jumping off point for various niches OR as a reference/recall method for stuff.
16-
* Something like a "Yellow Pages" in the sense of you know something exists, but what was it called....
14+
- The goal of this project is to act as a free resource for anyone interested in learning more about Information Security.
15+
- A list of techinques, tools and tactics to learn from or reference.
16+
- Rich resource of infosec knowledge for anyone to browse through as a jumping off point for various niches OR as a reference/recall method for stuff.
17+
- Something like a "Yellow Pages" in the sense of you know something exists, but what was it called....
1718
* 'If you give a man a fish, he is hungry again in an hour. If you teach him to catch a fish, you do him a good turn.'
18-
* **Always accepting more links/stuff. Feel free to make a pull request or a complaint through a pull request or filing a bug**
19-
* **Why Do _You_ Care?**
20-
* Don't have to constantly google for tools/reminder.
21-
* Easily browsable list of tools, techniques, papers, and research in all sorts of areas.
22-
* Want to read some good info.
23-
* **Why Do _I_ Care?**
24-
* I do this as a resource to learn and help others, and offer it publicly as a way of giving back to the general community.
25-
* To be clear, these aren't personal notes. I keep this repo maintained as a way of having pointers to information that I feel might help build someone's skillset or increase their understanding of attacks/methods/defenses.
26-
* This is not meant to condone illegal or malicious activities.
27-
* **This page**
28-
* To see a better looking version on mobile: use [https://rmusser.net/docs](https://rmusser.net/docs)(horribly colored, but nicely formatted version).
29-
* For latest content updates, check the git history.
30-
* Want to contribute a link? Anything relevant that isn't already in or covered would be/is appreciated.
31-
* If this resource has helped you in any way(and didn't increase your frustration), please consider making a donation to [Doctors Without Borders](https://donate.doctorswithoutborders.org/onetime.cfm) or [Amnesty International](https://www.amnesty.org/en/donate/).
19+
- To be clear, these aren't personal notes. I keep this repo maintained as a way of having pointers to information that I feel might help build someone's skillset or increase their understanding of attacks/methods/defenses.
20+
- This project is not meant to condone illegal or malicious activities.
21+
- For a HTML version of this reference, check out: [https://rmusser.net/docs](https://rmusser.net/docs)(I'm not a webdev. Can you tell?).
22+
- For latest content updates, check the git history.
23+
- Want to contribute a link?
24+
* Anything relevant that isn't already in or covered would be/is appreciated.
25+
- **If this resource has helped you in any way(and didn't increase your frustration), please consider making a donation to [Doctors Without Borders](https://donate.doctorswithoutborders.org/onetime.cfm) or [Amnesty International](https://www.amnesty.org/en/donate/).**
3226

3327
## Index - Table of Contents
34-
3528
* [Pre-ATT&CK](https://github.com/rmusser01/Infosec_Reference/tree/master/Draft/ATT%26CK-Stuff/Pre-ATT%26CK)
3629
* [ATT&CK Stuff](https://github.com/rmusser01/Infosec_Reference/tree/master/Draft/ATT%26CK-Stuff/ATT%26CK)
3730
* [Attacking & Securing Active Directory](https://github.com/rmusser01/Infosec_Reference/blob/master/Draft/Active_Directory.md)

images/10k-xkcd.png

91.1 KB
Loading

0 commit comments

Comments
 (0)