Канал: Pentest Laboratories

Shadow Credentials

Shadow Credentials

Domain Persistence - Machine Account

Domain Persistence - Machine Account

Domain Escalation - ShadowCoerce

Domain Escalation - ShadowCoerce

Domain Escalation - sAMAccountName Spoofing

Domain Escalation - sAMAccountName Spoofing

Process Ghosting

Process Ghosting

Domain Persistence - Golden Certificate

Domain Persistence - Golden Certificate

Resource Based Constrained Delegation

Resource Based Constrained Delegation

PetitPotam - NTLM Relay to AD CS

PetitPotam - NTLM Relay to AD CS

Account Persistence - Certificates

Account Persistence - Certificates

Universal Privilege Escalation and Persistence - Printer

Universal Privilege Escalation and Persistence - Printer

Credentials Dumping - RDP

Credentials Dumping - RDP

Persistence - AMSI

Persistence - AMSI

AMSI Bypass Methods

AMSI Bypass Methods

Remote Potato - From Domain User to Enterprise Admin

Remote Potato - From Domain User to Enterprise Admin

Process Herpaderping - Windows Defender Evasion

Process Herpaderping - Windows Defender Evasion

Lateral Movement - Windows Services

Lateral Movement - Windows Services

Indirect Command Execution

Indirect Command Execution

Abusing .NET Core - Evasion

Abusing .NET Core - Evasion

AppDomainManager Injection

AppDomainManager Injection

Persistence - COM Hijacking

Persistence - COM Hijacking

Parent PID Spoofing

Parent PID Spoofing

RID Hijacking

RID Hijacking

Password Filter DLL

Password Filter DLL

WaitFor - Download and Execute Arbitrary Code

WaitFor - Download and Execute Arbitrary Code

MSBuild without MSBuild

MSBuild without MSBuild