Payloads and Shells

<aside>

Shell - Web

Shell - Linux

Shell - Windows

Shell - Upgrade

</aside>

AD Attacks

<aside>

Password Spraying

LLMNR/NBT-NS Poisoning

NTLM Relay

AS-REP Roasting

Kerberoasting

ACL Abuse

DCSync

Credentials Harvesting

LSASS

SAM, SYSTEM, and SECURITY

LSA Secrets

DPAPI

NTDS.dit

</aside>

Web Attacks

<aside>

Arbitrary File Read

Local File Inclusion

Remote File Inclusion

File Upload Attack

</aside>

Database Attacks

<aside>

SQL Injection

MSSQL 1433 - File Read & Write / RCE / NTLM Theft

MySQL 3306 - File Read & Write / UDF for RCE / Dumping SQL for creds

</aside>

Hash Cracking

Hash Cracking

Public Exploits

<aside>

CVE-2021-41773

</aside>