1. Hacking Infrastructure
- Infra Planification
  Infrastructure Diagram & Requirements
- Infra Configuration
  Attack Server
  C2 Server
  Redirector
  Payload Server
  Phishing Server
2. Reconnaissance and Information Gathering
- OSINT (Open-Source Intelligence)
  Enviroment
  Android Virtualization
  Web Browsers
  Sock Puppets (Covert Accounts)
  All-purpose Advanced Tools
  Search Engines
  People Search Engines
  Websites & Domains
  IP Addresses
  Users & Emails
  Social Media
  Documents
  Images
  Videos & Lives
  Metadata
  Telephone Numbers
  Online Maps
  Virtual Currencies
  Leaks, Breaches, Logs and Ransomware
  Government & Business Records
- Port, Version, Vuln Scanning
  Nmap
  Shodan
  Network Mapping
  Researching Potential Vulnerabilities
  Dark Web Scanning
3. Social Engeniering
4. Exploitation
5. Privesc and Post-explotation
6. Evasion Techniques
- Linux - Evasion Techniques
- Windows - Evasion Techniques
  Detection Mechanisms & Evasion Techniques
  Microsoft Defender Antivirus
  AMSI & UAC Bypasses
  AppLocker and Powershell CLM
  PowerShell Script Block Logging
  MDE (Microsoft Defender for Endpoint)
  Altered scripts & Automations
  Command Reimplementation C#/C
  EDR Killing
7. Tunneling
8. Profesional Reports

Powered by GitBook

On this page

Windows Privilege Escalation

Enumeration Scripts Manual Enumeration Metasploit tools Processes Enumeration and Tasks Incorrect permissions in services Unquoted Service Paths Insecure GUI Apps Autorun AlwaysInstallElevated $PATH Interception Looting for passwords Runas Impersonation Privileges From local administrator to NT SYSTEM Common Vulnerabilities and Exposure (CVE)Kernel Exploitation Named Pipes Vulnerable Drivers Abusing Shadow Copies

PreviousPillaging/Data Harvesting NextEnumeration Scripts

Last updated 1 year ago