Windows

• Windows Privilege Escalation - Enumeration, weak permissions, kernel exploits, UAC bypasses, services, miscellaneous techniques

• Windows Privilege Abuse - SeImpersonate, SeDebug, SeTakeOwnership, SeBackup, DnsAdmins, Print Operators, Server Operators

• Windows Credential Hunting - Config files, browser data, PowerShell history, WiFi passwords, mRemoteNG, cookies, VHDX/VMDK

• DLL Injection & Hijacking - LoadLibrary, Reflective DLL, Manual Mapping, DLL Hijacking, DLL Proxying

• Citrix / Restricted Desktop Breakout - Dialog box escapes, SMB access, shortcut abuse, post-breakout priv esc

• PowerShell Cheatsheet

• Anti-Virus Evasion

• Windows Registry

• Windows Kernel Vulnerabilities

• Windows Defender

• AMSI Bypasses

• pktmon Packet Capture

• PowerShell Constrained Language Mode

• Windows Survey

• Windows Persistence

• Windows World Writeable Dirs

• netsh

4MB

thm-reg-forensics.pdf

PDF

Open