Cardboard Iguana Security
/
spells
Dark mode
Light mode
Search
Search
263 items under this folder.
Sunday, March 2, 2025
Abusing wildcard expansion in Bash
Language/Bash
Application/tar
AttackCycle/Exploitation
OS/Linux
Sunday, March 2, 2025
Access the Windows Registry using PowerShell
HowTo
OS/Windows/Registry
Application/PowerShell
Sunday, March 2, 2025
Add Windows users at the command line
OS/Windows
Application/net
OS/Windows/Registry
Application/reg
Sunday, March 2, 2025
Aircrack-NG
Application/Aircrack
AttackCycle/Reconnaissance
AttackCycle/Exploitation
Protocol/WiFi
Sunday, March 2, 2025
ARP
Protocol/ARP
Standard/OSI
Hardware/MACAddress
Protocol/IPv4
Protocol/IPv6
Sunday, March 2, 2025
ARP scanning
Protocol/ARP
Language/Python/Scapy
Scripts
Protocol/ICMP
Sunday, March 2, 2025
AS-REP roasting
Protocol/Kerberos
OS/Windows/ActiveDirectory
Cryptography/Hashes/NT
AttackCycle/Exploitation/AS-REPRoasting
AttackCycle/Exploitation/Kerberoasting
Sunday, March 2, 2025
AS-REP roasting with Impacket
OS/Windows/ActiveDirectory
AttackCycle/Exploitation/AS-REPRoasting
Application/Impacket
Protocol/Kerberos
Sunday, March 2, 2025
AS-REP roasting With Rubeus
OS/Windows/ActiveDirectory
AttackCycle/Exploitation/AS-REPRoasting
Application/Rubeus
Application/Hashcat
Sunday, March 2, 2025
Automate Netlify builds with IFTTT
HowTo
WebApplication/Netlify
WebApplication/IFTTT
Sunday, March 2, 2025
Automatically stabilize a reverse shell with socat
HowTo
Application/socat
Sunday, March 2, 2025
Avoid dropping privileges with SUID Bash
Language/Bash
AttackCycle/Exploitation
HowTo
Sunday, March 2, 2025
awk
Application/awk
Application/sudo
AttackCycle/PrivEsc
Sunday, March 2, 2025
Backdoor Visual Basic Scripts
AttackCycle/Exploitation
HowTo
Language/VisualBasic
FileFormat/VBS
Protocol/SMB
OS/Windows
Sunday, March 2, 2025
basenc
Application/basenc
Standard/Base64
Application/base64
Sunday, March 2, 2025
Bash reverse shell
Language/Bash
AttackCycle/LateralMovement
Application/netcat
Application/socat
Sunday, March 2, 2025
Bash scripting
Language/Bash
Sunday, March 2, 2025
Bulk edit Windows permissions
OS/Windows/Permissions
Application/secedit
HowTo
Sunday, March 2, 2025
Burp Suite
Application/BurpSuite
AttackCycle/Reconnaissance/Fuzzing
AttackCycle/Exploitation/BruteForcing
OS/Linux/Distros/Kali
Sunday, March 2, 2025
Bypass the PowerShell execution policy
Application/PowerShell
OS/Windows
HowTo
AttackCycle/Exploitation
Sunday, March 2, 2025
Bypass Windows antivirus with C#
HowTo
AttackCycle/AntiForensics
OS/Windows
Application/PowerShell
Application/PowerShell/Invoke-Mimikatz
Sunday, March 2, 2025
Calculate a file hash on Windows with CertUtil
HowTo
OS/Windows
Application/CertUtil
Cryptography/Hashes/SHA1
Sunday, March 2, 2025
Call Mimikatz from a meterpreter shell
Application/Metasploit/meterpreter
OS/Windows/ActiveDirectory
Protocol/Kerberos
AttackCycle/PrivEsc
AttackCycle/LateralMovement
AttackCycle/Exploitation
Sunday, March 2, 2025
cat
Application/cat
Sunday, March 2, 2025
cewl
Application/cewl
OS/Linux/Distros/Kali
AttackCycle/Reconnaissance
Sunday, March 2, 2025
Change a branch name in Git
Application/Git
HowTo
Sunday, March 2, 2025
Change an RSA key passphrase with OpenSSL
HowTo
Application/OpenSSL
Cryptography/Cryptosystems/RSA
Sunday, March 2, 2025
Cisco IOS
OS/CiscoIOS
Sunday, March 2, 2025
Common Windows user types
OS/Windows
Sunday, March 2, 2025
Compact VM disk images
HowTo
Application/libVirt
Application/VirtualBox
OS/Windows
OS/Linux
Application/SDelete
Application/dd
Sunday, March 2, 2025
Confirm the existence of a Gmail address
Application/curl
WebApplication/Gmail
HowTo
AttackCycle/Reconnaissance
Sunday, March 2, 2025
crackmapexec
Application/crackmapexec
Protocol/SMB
AttackCycle/Exploitation
Sunday, March 2, 2025
Create a GPG Key (with SSH support!)
Application/SSH
Application/GPG
HowTo
Sunday, March 2, 2025
Cross-site scripting (XSS) attacks
FileFormat/HTML
Language/JavaScript
AttackCycle/Exploitation/XSS
AttackCycle/AntiForensics
Standard/URI
AttackCycle/Exfiltration
Sunday, March 2, 2025
CUPP
Application/CUPP
OS/Linux/Distros/Kali
AttackCycle/Exploitation/BruteForcing
Sunday, March 2, 2025
Day One to Obsidian conversion script
Application/Obsidian
Application/DayOne
Language/Python
Sunday, March 2, 2025
DCERPC
Protocol/DCERPC
OS/Windows/Server
Sunday, March 2, 2025
Debugging Bash scripts
Language/Bash
Sunday, March 2, 2025
Default CIFS shares
Protocol/SMB
OS/Windows
AttackCycle/PrivEsc
AttackCycle/Exploitation
Sunday, March 2, 2025
dig
Application/dig
AttackCycle/Reconnaissance
Protocol/DNS
Sunday, March 2, 2025
dir
Application/dir
OS/Windows
Sunday, March 2, 2025
Disable AMSI
HowTo
OS/Windows/AMSI
AttackCycle/AntiForensics
Application/PowerShell
OS/Windows/Defender
Sunday, March 2, 2025
DRSUAPI
OS/Windows/Server
OS/Windows/ActiveDirectory
Protocol/DRSUAPI
Sunday, March 2, 2025
Easy reverse DNS lookups
AttackCycle/Reconnaissance
Protocol/DNS
Sunday, March 2, 2025
enum4linux
Application/enum4linux
Protocol/SMB
OS/Linux
Sunday, March 2, 2025
Enumerate AD CS templates with CertUtil
HowTo
Application/CertUtil
OS/Windows/ActiveDirectory
AttackCycle/Reconnaissance
Protocol/Kerberos
Application/Rubeus
Sunday, March 2, 2025
Equivalent Windows and *NIX commands
OS/AIX
OS/Linux
OS/macOS
OS/Android
OS/Windows
Application/cat
Application/type
Application/dig
Application/nslookup
Application/grep
Application/findstr
Application/select
Application/ifconfig
Application/ipconfig
Application/ls
Application/dir
Application/more
Application/netstat
Application/ping
Application/shutdown
Application/sleep
Application/timeout
Application/sudo
Application/RunAs
Application/tcpdump
Application/windump
Application/traceroute
Application/tracert
Application/wget
Application/whoami
Application/hostname
Language/Bash
Application/cmd
Sunday, March 2, 2025
Evil-WinRM
Application/Evil-WinRM
AttackCycle/LateralMovement
Cryptography/Hashes/NT
Protocol/WinRM
Sunday, March 2, 2025
Exploit LD_LIBRARY_PATH
HowTo
OS/Linux
AttackCycle/Exploitation
Application/sudo
Application/ldd
Sunday, March 2, 2025
Exploit LD_PRELOAD
HowTo
OS/Linux
Application/sudo
AttackCycle/Exploitation
Sunday, March 2, 2025
Exploit local Windows services
OS/Windows/Services
AttackCycle/Exploitation
Application/Metasploit/msfvenom
OS/Windows/EventLog
HowTo
Sunday, March 2, 2025
Exploit local Windows tasks
OS/Windows/Tasks
AttackCycle/Exploitation
Application/PsExec
OS/Windows/Registry
AttackCycle/AntiForensics
HowTo
Application/icacls
Sunday, March 2, 2025
Exploit remote Windows services
OS/Windows/Services
AttackCycle/LateralMovement
OS/Windows/UAC
Protocol/RCP
Protocol/SMB
Protocol/NetBIOS
HowTo
Sunday, March 2, 2025
Exploit remote Windows tasks
OS/Windows/Tasks
AttackCycle/LateralMovement
OS/Windows/UAC
Protocol/RCP
Protocol/SMB
Protocol/NetBIOS
HowTo
Sunday, March 2, 2025
Exploit VBA scripts with msfvenom
HowTo
Application/Metasploit/msfvenom
Language/VisualBasic
Application/Metasploit/meterpreter
Application/Excel
Application/Word
OS/Windows/WSH
Sunday, March 2, 2025
Exploit weak /etc/passwd permissions
HowTo
OS/Linux
AttackCycle/PrivEsc
Sunday, March 2, 2025
Exploit weak /etc/shadow permissions
HowTo
OS/Linux
AttackCycle/PrivEsc
Sunday, March 2, 2025
Exploit the Windows DLL search order
AttackCycle/Exploitation
HowTo
OS/Windows
Sunday, March 2, 2025
Exploit the Windows “Feature on Demand” Helper
OS/Windows/Registry
AttackCycle/PrivEsc
HowTo
Sunday, March 2, 2025
Exploit Windows file associations
HowTo
AttackCycle/Exploitation
OS/Windows/Registry
Application/PowerShell
Application/netcat
Sunday, March 2, 2025
Exploit Windows HTML applications with msfvenom
FileFormat/HTA
FileFormat/HTML
Application/Metasploit/msfvenom
AttackCycle/Exploitation
HowTo
Application/netcat
Application/Metasploit
Sunday, March 2, 2025
Exploit Windows services
OS/Windows/Services
AttackCycle/Exploitation
AttackCycle/LateralMovement
HowTo
Sunday, March 2, 2025
Exploit Windows shortcut files
AttackCycle/Exploitation
HowTo
Application/PowerShell
Application/netcat
OS/Windows
Sunday, March 2, 2025
Exploit Windows tasks
OS/Windows/Tasks
AttackCycle/Exploitation
AttackCycle/LateralMovement
HowTo
Sunday, March 2, 2025
Exploit the WinLogon initialization sequence
OS/Windows/WinLogin
OS/Windows/Registry
AttackCycle/Exploitation
HowTo
Sunday, March 2, 2025
Export highlights and annotations from Kobo eReaders
HowTo
Hardware/Kobo
Sunday, March 2, 2025
Extract the webpage title from a URL
HowTo
Language/Python
OS/Linux/Distros/Debian
Sunday, March 2, 2025
ffmpeg
Application/ffmpeg
FileFormat/M4A
FileFormat/MP3
FileFormat/MP4
FileFormat/GIF
FileFormat/WebP
Application/LAME
Sunday, March 2, 2025
find
Application/find
AttackCycle/Reconnaissance
Application/sudo
AttackCycle/PrivEsc
Sunday, March 2, 2025
Find and replace a single line in a large text file
Application/sed
HowTo
Sunday, March 2, 2025
Find executables with SUID capabilities
HowTo
Application/getcap
AttackCycle/Reconnaissance
OS/Linux/Permissions
Sunday, March 2, 2025
findstr
Application/findstr
Application/grep
OS/Windows
Sunday, March 2, 2025
finger
Application/finger
AttackCycle/Reconnaissance
Sunday, March 2, 2025
Fix EXIF data on Google Photos exports
WebApplication/GooglePhotos
Application/ExifTool
HowTo
FileFormat/XMP
FileFormat/JSON
Sunday, March 2, 2025
FTP
Application/ftp
Protocol/FTP
Application/sudo
AttackCycle/PrivEsc
Sunday, March 2, 2025
FTPS
Protocol/FTPS
Sunday, March 2, 2025
fuff
Application/fuff
AttackCycle/Reconnaissance/Fuzzing
AttackCycle/Exploitation/BruteForcing
Sunday, March 2, 2025
gdb
Application/gdb
Sunday, March 2, 2025
“Gemini compatible” markdown
Protocol/Gemini
FileFormat/Gemtext
FileFormat/Markdown
Sunday, March 2, 2025
Get-FileHash
Application/PowerShell
Cryptography/Hashes
Cryptography/Hashes/SHA256
Sunday, March 2, 2025
Get a shell from ViM
Application/ViM
AttackCycle/PrivEsc
LoLBins
Sunday, March 2, 2025
Get an SSL certificate
Protocol/TLS
HowTo
Application/OpenSSL
Sunday, March 2, 2025
Get-WinEvent
OS/Windows/EventLog
Application/PowerShell
AttackCycle/Reconnaissance
Sunday, March 2, 2025
Git on Windows
OS/Windows
Application/Git
Application/SSH
Application/PowerShell
Sunday, March 2, 2025
gobuster
Application/gobuster
AttackCycle/Reconnaissance
Sunday, March 2, 2025
Golden and silver ticket attacks
Protocol/Kerberos
OS/Windows/ActiveDirectory
Cryptography/Hashes/NT
AttackCycle/PrivEsc/GoldenTickets
AttackCycle/LateralMovement/SilverTickets
Sunday, March 2, 2025
grep
Application/grep
Sunday, March 2, 2025
The Harvester
Application/TheHarvester
AttackCycle/Reconnaissance
Sunday, March 2, 2025
Hashcat
Application/Hashcat
Application/Metasploit
AttackCycle/PrivEsc
Cryptography/Hashes/MD5
Cryptography/Hashes/SHA1
Cryptography/Hashes/MD4
Cryptography/Hashes/NT
Cryptography/Hashes/SHA256
Cryptography/Hashes/SHA512
Cryptography/Hashes/LANMAN
Cryptography/Hashes/bcrypt
Cryptography/Hashes/AS-REP
Cryptography/Hashes/TGS-REP
AttackCycle/Exploitation/AS-REPRoasting
Sunday, March 2, 2025
How to exploit the Bash PS4 (debugging) prompt
Language/Bash
AttackCycle/PrivEsc
HowTo
Sunday, March 2, 2025
HTML applications
FileFormat/HTML
FileFormat/HTA
OS/Windows
Sunday, March 2, 2025
HTTP
Protocol/HTTP
Sunday, March 2, 2025
Hydra
Application/Hydra
AttackCycle/Exploitation/BruteForcing
Sunday, March 2, 2025
icacls
Application/icacls
Application/PowerShell
OS/Windows/Permissions
Sunday, March 2, 2025
ICMP
Protocol/ICMP
Sunday, March 2, 2025
iftop
Application/iftop
Application/sudo
AttackCycle/PrivEsc
Sunday, March 2, 2025
IIS configuration data
OS/Windows/IIS
AttackCycle/Reconnaissance
Sunday, March 2, 2025
IMAP
Protocol/IMAP
Sunday, March 2, 2025
Impacket
Application/Impacket
Application/PsExec
Protocol/Kerberos
OS/Windows/ActiveDirectory
Sunday, March 2, 2025
Invoke-Mimikatz
Application/PowerShell/Invoke-Mimikatz
AttackCycle/PrivEsc
AttackCycle/LateralMovement
Protocol/Kerberos
OS/Windows/ActiveDirectory
AttackCycle/Reconnaissance
AttackCycle/PrivEsc/PassTheHash
AttackCycle/LateralMovement/PassTheHash
Sunday, March 2, 2025
Invoke-WebRequest
Application/PowerShell
Sunday, March 2, 2025
iOS quirks
Application/Shortcuts
Application/OneDrive
OS/iOS
Sunday, March 2, 2025
ipconfig
OS/Windows
Application/ipconfig
Sunday, March 2, 2025
IPSec
Protocol/IPSec
Application/ike-scan
Application/psk-crack
AttackCycle/Exploitation
Sunday, March 2, 2025
IPv4
Protocol/IPv4
Cloud/AWS
Sunday, March 2, 2025
Java
Language/Java
Application/netcat
Protocol/HTTP
OS/Linux/Distros/Kali
AttackCycle/Exploitation
Sunday, March 2, 2025
John the Ripper
Application/JohnTheRipper
AttackCycle/PrivEsc
Application/Metasploit
Application/grep
Application/cewl
Application/CUPP
Application/Hashcat
Cryptography/Hashes
Application/SSH
Sunday, March 2, 2025
JSON Web Tokens (JWTs)
Standard/JWT
AttackCycle/Exploitation
AttackCycle/Exploitation/BruteForcing
Protocol/HTTP
Cryptography/Signatures
Sunday, March 2, 2025
Kerberoasting
Protocol/Kerberos
OS/Windows/ActiveDirectory
AttackCycle/Exploitation/Kerberoasting
Application/PowerShell/Invoke-Kerberoast
Application/Hashcat
Application/JohnTheRipper
Sunday, March 2, 2025
Kerberoasting with Impacket
OS/Windows/ActiveDirectory
Protocol/Kerberos
AttackCycle/Exploitation/Kerberoasting
Application/Impacket
Application/Hashcat
OS/Linux/Distros/Kali
Sunday, March 2, 2025
Kerberoasting with Rubeus
OS/Windows/ActiveDirectory
Protocol/Kerberos
AttackCycle/Exploitation/Kerberoasting
Application/Rubeus
Application/Hashcat
Sunday, March 2, 2025
Kerberos
Protocol/Kerberos
OS/Windows/ActiveDirectory
Application/Mimikatz
Application/Rubeus
FileFormat/kirbi
Cryptography/Hashes/NT
AttackCycle/PrivEsc
AttackCycle/LateralMovement
AttackCycle/Exploitation/Kerberoasting
Application/PowerShell/Invoke-Kerberoast
Application/Hashcat
Application/JohnTheRipper
OS/Linux/Distros/Kali
AttackCycle/Exploitation/AS-REPRoasting
AttackCycle/PrivEsc/GoldenTickets
AttackCycle/LateralMovement/SilverTickets
Sunday, March 2, 2025
Kerbrute
Protocol/Kerberos
Protocol/UDP
OS/Windows/ActiveDirectory
Application/Kerbrute
AttackCycle/Reconnaissance/BruteForcing
Sunday, March 2, 2025
less
Application/less
Application/sudo
AttackCycle/PrivEsc
Sunday, March 2, 2025
Load a shell with a simple executable
HowTo
AttackCycle/Exploitation
Application/Metasploit/msfvenom
Language/Bash
Sunday, March 2, 2025
Local file inclusion (LFI) attacks
AttackCycle/Exploitation/LocalFileInclusion
Language/PHP
Sunday, March 2, 2025
Look up unicode symbols and emojis
HowTo
Sunday, March 2, 2025
MAC address
Hardware/MACAddress
Protocol/WiFi
Sunday, March 2, 2025
Magic numbers
Language/PHP
AttackCycle/AntiForensics
Sunday, March 2, 2025
man
Application/man
Application/sudo
AttackCycle/PrivEsc
Sunday, March 2, 2025
Match files to packages in Debian-based operating systems
HowTo
OS/Linux/Distros/Debian
AttackCycle/Reconnaissance
Application/dpkg-query
Sunday, March 2, 2025
Match files to packages in Red Hat-based operating systems
HowTo
OS/Linux/Distros/RedHat
OS/AIX
AttackCycle/Reconnaissance
Application/rpm
Sunday, March 2, 2025
Metasploit MS SQL modules
Application/MSSQL
Application/Metasploit
Application/Nmap
AttackCycle/Reconnaissance
AttackCycle/Exploitation
AttackCycle/Exploitation/BruteForcing
Sunday, March 2, 2025
meterpreter
Application/Metasploit/meterpreter
AttackCycle/Exploitation
AttackCycle/Reconnaissance
AttackCycle/AntiForensics
Cryptography/Hashes/NT
OS/Windows/SAM
AttackCycle/PrivEsc/GoldenTickets
Application/Mimikatz
OS/Windows/EventLog
Application/PowerShell
AttackCycle/PrivEsc
OS/Windows/LSASS
Sunday, March 2, 2025
Mimikatz
Application/Mimikatz
AttackCycle/Reconnaissance
AttackCycle/LateralMovement
AttackCycle/PrivEsc
OS/Windows/ActiveDirectory
Protocol/Kerberos
Cryptography/Hashes/NT
Application/PsExec
Application/Evil-WinRM
Application/XFreeRDP
OS/Windows/LSASS
OS/Windows/SAM
AttackCycle/LateralMovement/SilverTickets
AttackCycle/PrivEsc/GoldenTickets
AttackCycle/PrivEsc/PassTheHash
AttackCycle/LateralMovement/PassTheHash
Sunday, March 2, 2025
MITRE ATT&CK emulation plans
Standard/MITRE/Emulation
Sunday, March 2, 2025
more
Application/more
Application/cat
Application/sudo
AttackCycle/PrivEsc
AttackCycle/Exploitation
Sunday, March 2, 2025
msfconsole
Application/Metasploit/msfconsole
AttackCycle/CommandAndControl
AttackCycle/AntiForensics
AttackCycle/Exploitation
Application/SSH
Application/Nmap
Protocol/TCP
Protocol/UDP
Protocol/HTTP
Protocol/SMB
Protocol/SMTP
Application/MySQL
AttackCycle/Exploitation/BruteForcing
Cryptography/Hashes/NT
Application/Metasploit/msfvenom
Application/Metasploit/meterpreter
Application/PsExec
OS/Windows
Application/JohnTheRipper
Protocol/RDP
AttackCycle/LateralMovement
Application/proxychains
Protocol/SOCKS
Sunday, March 2, 2025
msfvenom
Application/Metasploit/msfvenom
AttackCycle/Exploitation
Application/netcat
OS/Linux
OS/Windows
OS/macOS
FileFormat/HTA
Application/Metasploit/meterpreter
Language/VisualBasic
Language/Bash
Language/Python
Language/Perl
Language/PHP
Language/Java
Sunday, March 2, 2025
MS SQL
Application/MSSQL
OS/Windows
Application/PowerShell/Powercat
Application/netcat
AttackCycle/PrivEsc
Sunday, March 2, 2025
MySQL
Application/MySQL
AttackCycle/Exploitation
AttackCycle/PrivEsc
Sunday, March 2, 2025
nano
Application/nano
Application/sudo
AttackCycle/PrivEsc
Sunday, March 2, 2025
nbtscan
Application/nbtscan
Protocol/SMB
AttackCycle/Reconnaissance
Sunday, March 2, 2025
net
OS/Windows
Application/net
AttackCycle/Reconnaissance
LoLBins
AttackCycle/PrivEsc
Sunday, March 2, 2025
netcat
Application/netcat
AttackCycle/Exploitation/XSS
AttackCycle/Exploitation/SQLi
AttackCycle/LateralMovement
Application/Nmap
Protocol/TCP
Protocol/UDP
Application/Metasploit/msfvenom
AttackCycle/Reconnaissance
Sunday, March 2, 2025
netsh
Application/netsh
OS/Windows/Firewall
Sunday, March 2, 2025
netstat
Application/netstat
OS/Linux
OS/Windows
Application/findstr
AttackCycle/Reconnaissance
Sunday, March 2, 2025
NFS
Protocol/NFS
Sunday, March 2, 2025
Nikto
Application/Nikto
AttackCycle/Reconnaissance
Sunday, March 2, 2025
Nmap
Application/Nmap
Protocol/TCP
OS/Windows/Firewall
Protocol/ICMP
AttackCycle/Reconnaissance
Protocol/UDP
Protocol/HTTP
Protocol/SOCKS
Hardware/MACAddress
Protocol/ARP
Protocol/SMB
Protocol/NFS
AttackCycle/PrivEsc
Sunday, March 2, 2025
Node.js
Application/NodeJS
AttackCycle/Exploitation
Sunday, March 2, 2025
nslookup
Application/nslookup
OS/Windows
OS/Linux
Application/dig
Sunday, March 2, 2025
NTLM hashes
Cryptography/Hashes/NT
OS/Windows/SAM
Cryptography/Hashes/MD4
OS/Windows
Sunday, March 2, 2025
Oracle SQL Server
Application/Oracle
Application/tnscmd10g
Application/oscanner
Application/sidguess
AttackCycle/Reconnaissance
Sunday, March 2, 2025
OSI model
Standard/OSI
Sunday, March 2, 2025
OWASP ZAP
Application/OWASPZAP
Application/BurpSuite
AttackCycle/Reconnaissance/Fuzzing
AttackCycle/Reconnaissance/BruteForcing
OS/Linux/Distros/Kali
Sunday, March 2, 2025
Perl
Language/Perl
AttackCycle/Exploitation
Application/netcat
Application/socat
Sunday, March 2, 2025
PHP
Language/PHP
AttackCycle/Exploitation
OS/Linux/Distros/Kali
Application/netcat
Application/socat
Sunday, March 2, 2025
PHP local file inclusion attacks
AttackCycle/Exploitation/LocalFileInclusion
Language/PHP
OS/Linux/Distros/Kali
AttackCycle/Exploitation/NullByteAttacks
Sunday, March 2, 2025
ping
Application/ping
OS/Windows
OS/Linux
Sunday, March 2, 2025
Poison null byte attack
AttackCycle/Exploitation/NullByteAttacks
Sunday, March 2, 2025
Poison null byte in PHP
AttackCycle/Exploitation/NullByteAttacks
Language/PHP
Sunday, March 2, 2025
Polkit
OS/Linux/Polkit
AttackCycle/PrivEsc
Sunday, March 2, 2025
POP3
Protocol/POP3
Sunday, March 2, 2025
Pop a SYSTEM shell on the Windows login screen using sticky keys
Application/icacls
OS/Windows
Application/takeown
AttackCycle/Exploitation
HowTo
Sunday, March 2, 2025
Pop a SYSTEM shell on the Windows login screen using Utilman
Application/icacls
Application/takeown
AttackCycle/Exploitation
OS/Windows
HowTo
Sunday, March 2, 2025
Port scanning with Bash
Language/Bash
AttackCycle/Reconnaissance
Protocol/TCP
Sunday, March 2, 2025
POSIX process signals
OS/Linux
OS/AIX
OS/macOS
Standard/POSIX
Sunday, March 2, 2025
Powercat
Application/PowerShell/Powercat
AttackCycle/LateralMovement
Application/netcat
OS/Linux/Distros/Kali
OS/Windows/AMSI
Sunday, March 2, 2025
PowerShell reverse shell
Application/PowerShell
AttackCycle/Exploitation
Application/whoami
Language/PHP
Sunday, March 2, 2025
PowerView
Application/PowerShell/PowerView
AttackCycle/Reconnaissance
OS/Windows/AMSI
Sunday, March 2, 2025
ps
Application/ps
OS/Linux
OS/AIX
OS/macOS
Sunday, March 2, 2025
Pull SSL certificates from an external server
Application/OpenSSL
HowTo
AttackCycle/Reconnaissance
Sunday, March 2, 2025
Python
Language/Python
Scripts
Application/netcat
Application/socat
AttackCycle/Exploitation
Sunday, March 2, 2025
Quickly bypass ssh-agent
HowTo
Application/SSH
Sunday, March 2, 2025
Quickly find the canonical path of a file
HowTo
OS/Linux/Distros/Debian
Application/readlink
Sunday, March 2, 2025
Quick-n-dirty Python web server
Language/Python
Protocol/HTTP
AttackCycle/Exfiltration
AttackCycle/Exploitation
Sunday, March 2, 2025
RCE via XXE in PHP
AttackCycle/Exploitation/XXE
Language/PHP
FileFormat/XML
Sunday, March 2, 2025
Read a file beginning with a dash (-)
Language/Bash
HowTo
Application/cat
Sunday, March 2, 2025
reg
OS/Windows/Registry
Application/reg
Sunday, March 2, 2025
RegEx metacharacters
Standard/RegEx
Sunday, March 2, 2025
Remotely install a Windows package with PowerShell
HowTo
OS/Windows
Application/PowerShell
AttackCycle/LateralMovement
AttackCycle/Exploitation
Sunday, March 2, 2025
Remove duplicate lines in Bash
Language/Bash
HowTo
Sunday, March 2, 2025
Retrieve AIX fileset information
OS/AIX
HowTo
Application/lslpp
AttackCycle/Reconnaissance
Sunday, March 2, 2025
Retrieve AIX system information
OS/AIX
HowTo
Application/oslevel
AttackCycle/Reconnaissance
Sunday, March 2, 2025
Rubeus
Application/Rubeus
Protocol/Kerberos
OS/Windows/ActiveDirectory
AttackCycle/Reconnaissance
AttackCycle/Exploitation/BruteForcing
OS/Linux/Distros/Kali
AttackCycle/PrivEsc
Application/Certify
AttackCycle/LateralMovement
Sunday, March 2, 2025
Ruby
Language/Ruby
AttackCycle/Exploitation
Application/netcat
Application/socat
Sunday, March 2, 2025
RunAs
Application/RunAs
OS/Windows
Application/sudo
Application/cmdkey
Application/whoami
Sunday, March 2, 2025
Run commands directly with PowerShell
Application/PowerShell
HowTo
Sunday, March 2, 2025
Run a remote Windows command using PowerShell
Application/PowerShell
OS/Windows
AttackCycle/LateralMovement
HowTo
Sunday, March 2, 2025
Send a command using OpenSSL
Application/OpenSSL
HowTo
Sunday, March 2, 2025
Set the PATH in a session on UNIX-like operating systems
Language/Bash
OS/Linux
OS/AIX
HowTo
Sunday, March 2, 2025
Set the PATH in a session on Windows
Application/PowerShell
OS/Windows
HowTo
Sunday, March 2, 2025
Set up WMI in PowerShell
OS/Windows/WMI
Application/PowerShell
HowTo
AttackCycle/LateralMovement
Sunday, March 2, 2025
Shell stabilization
Application/netcat
Language/Python
Application/rlwrap
Application/socat
Language/Bash
Sunday, March 2, 2025
SIP
Protocol/SIP
Protocol/TCP
Protocol/UDP
Protocol/HTTP
Standard/URI
Sunday, March 2, 2025
smbclient
Application/smbclient
Protocol/SMB
Protocol/FTP
Application/enum4linux
AttackCycle/Reconnaissance
OS/Linux
Sunday, March 2, 2025
smbget
Application/smbget
Protocol/SMB
Application/smbclient
Standard/URI
Sunday, March 2, 2025
smbmap
Application/smbmap
Protocol/SMB
Sunday, March 2, 2025
SMTP
Protocol/SMTP
Sunday, March 2, 2025
socat
Application/socat
Application/netcat
Application/PowerShell
AttackCycle/LateralMovement
AttackCycle/AntiForensics
Sunday, March 2, 2025
SQL injection attacks
AttackCycle/Exploitation/SQLi
Language/PHP
Protocol/HTTP
Application/BurpSuite
Language/SQL
Application/MySQL
AttackCycle/PrivEsc
AttackCycle/Reconnaissance
Sunday, March 2, 2025
SQLMap
Application/SQLMap
AttackCycle/Exploitation/SQLi
Application/Metasploit/meterpreter
Application/MySQL
Application/PostgreSQL
Sunday, March 2, 2025
ss
Application/ss
Application/netstat
Protocol/TCP
Protocol/UDP
Sunday, March 2, 2025
SSH
Application/SSH
AttackCycle/LateralMovement
Protocol/SOCKS
OS/Windows
Protocol/Kerberos
Sunday, March 2, 2025
sudo
Application/sudo
AttackCycle/Exploitation
Sunday, March 2, 2025
systemctl
Application/systemctl
AttackCycle/PrivEsc
Application/sudo
Sunday, March 2, 2025
systeminfo
Application/systeminfo
OS/Windows
Application/findstr
OS/Windows/ActiveDirectory
AttackCycle/Reconnaissance
Sunday, March 2, 2025
tar
Application/tar
AttackCycle/Exploitation
Sunday, March 2, 2025
TCP
Protocol/TCP
Standard/OSI
Application/Wireshark
Sunday, March 2, 2025
tcpdump
Application/tcpdump
Application/Wireshark
AttackCycle/Reconnaissance
Sunday, March 2, 2025
TCP header flags
Protocol/TCP
Sunday, March 2, 2025
TCP headers
Protocol/TCP
Sunday, March 2, 2025
TCP window size
Protocol/TCP
Sunday, March 2, 2025
Telnet
Application/telnet
Protocol/Telnet
Protocol/TCP
Sunday, March 2, 2025
tmux
Application/tmux
Sunday, March 2, 2025
Transfer files over FTP using netcat
Application/netcat
Protocol/FTP
HowTo
Sunday, March 2, 2025
UDP
Protocol/UDP
Sunday, March 2, 2025
unbuffer
Application/unbuffer
Application/tee
Sunday, March 2, 2025
Uniform resource locators (URLs)
Standard/URI
Sunday, March 2, 2025
UNIX file descriptors
OS/Linux
OS/AIX
Language/Bash
OS/macOS
Standard/POSIX
Sunday, March 2, 2025
UNIX password hashes
OS/Linux
Cryptography/Hashes/MD5
Cryptography/Hashes/bcrypt
Cryptography/Hashes/SHA512
Sunday, March 2, 2025
UNIX permissions
OS/Linux
OS/macOS
OS/AIX
Standard/POSIX
Sunday, March 2, 2025
Unquoted path handling in Windows
OS/Windows
AttackCycle/Exploitation
Sunday, March 2, 2025
Upgrade PostgreSQL
Application/PostgreSQL
HowTo
Sunday, March 2, 2025
Use an alternate SSH key with Git
HowTo
Application/SSH
Application/Git
Application/GPG
Application/KeePassXC
Sunday, March 2, 2025
Use Bash functions to “backdoor” executables
Language/Bash
AttackCycle/Exploitation
AttackCycle/PrivEsc
HowTo
Sunday, March 2, 2025
Use Burp Suite with Firefox
Application/BurpSuite
Application/Firefox
OS/Linux/Distros/Kali
HowTo
Sunday, March 2, 2025
Use Burp Suite with mobile apps
Application/BurpSuite
HowTo
Sunday, March 2, 2025
Use curl and jq with web APIs
Application/curl
Application/jq
HowTo
Sunday, March 2, 2025
Useful built-in commands for Linux reconnaissance
OS/Linux
AttackCycle/Reconnaissance
LoLBins
Sunday, March 2, 2025
Useful built-in commands for Windows reconnaissance
OS/Windows
AttackCycle/Reconnaissance
Application/arp
Application/cmdkey
Application/driverquery
Application/hostname
Application/net
Application/query
Application/reg
OS/Windows/Services
OS/Windows/Tasks
Application/systeminfo
Application/whoami
Sunday, March 2, 2025
Useful Linux reconnaissance scripts
OS/Linux
AttackCycle/Reconnaissance
Sunday, March 2, 2025
Useful scripts for Windows reconnaissance
AttackCycle/Reconnaissance
OS/Windows
Application/WinPEAS
Application/Metasploit
Application/WindowsExploitSuggester
OS/Windows/Defender
Application/PowerShell/PowerUp
Application/Metasploit/meterpreter
Application/systeminfo
Sunday, March 2, 2025
Use OpenSSL to encrypt and decrypt files
HowTo
Application/OpenSSL
Cryptography/Cryptosystems/RSA
Sunday, March 2, 2025
Use a Raspberry Pi 4B as hacking accessory
HowTo
Hardware/RaspberryPi/4B
OS/Linux/Distros/Kali
Application/MicrosoftRemoteDesktop
Application/SSH/Dropbear
Application/JumpDesktop
Hardware/iPadPro
Sunday, March 2, 2025
Use unsupported display resolutions with Samsung DeX
HowTo
OS/Android
Application/SamsungDeX
Application/GoodLock
Application/ADB
Sunday, March 2, 2025
Use the Windows Firewall to relay ports
OS/Windows/Firewall
AttackCycle/LateralMovement
HowTo
Application/netsh
Sunday, March 2, 2025
Use WinRM with PowerShell
HowTo
Protocol/WinRM
Application/PowerShell
OS/Windows
Sunday, March 2, 2025
ViM
Language/Python
AttackCycle/PrivEsc
Application/ViM
Sunday, March 2, 2025
Visual Basic for Applications
Language/VisualBasic
OS/Windows/WSH
AttackCycle/Exploitation
Sunday, March 2, 2025
wfuzz
Application/wfuzz
AttackCycle/Reconnaissance/Fuzzing
Application/BurpSuite
Sunday, March 2, 2025
whoami
Application/whoami
OS/Linux
OS/macOS
OS/AIX
OS/Windows
Sunday, March 2, 2025
Wi-Fi
Protocol/WiFi
Hardware/MACAddress
Sunday, March 2, 2025
Windows DLL search order
OS/Windows
Application/ProcMon
Sunday, March 2, 2025
Windows event IDs
OS/Windows/EventLog
Sunday, March 2, 2025
Windows event logs
OS/Windows/EventLog
Sunday, March 2, 2025
Windows local service accounts
OS/Windows/Services
Sunday, March 2, 2025
Windows logon scripts
OS/Windows/UserInit
OS/Windows/Registry
AttackCycle/Exploitation
AttackCycle/PrivEsc
Sunday, March 2, 2025
Windows permissions
OS/Windows/Permissions
OS/Linux/Permissions
Sunday, March 2, 2025
Windows reconnaissance with PowerShell
OS/Windows/ActiveDirectory
OS/Windows/Firewall
Application/PowerShell
OS/Windows
AttackCycle/Reconnaissance
OS/Windows/EventLog
OS/Windows/Services
Sunday, March 2, 2025
Windows Remote Management
Application/PowerShell
OS/Windows/Registry
OS/Windows/UAC
AttackCycle/LateralMovement
Protocol/WinRM
Sunday, March 2, 2025
Windows Run and RunOnce Registry keys
OS/Windows/Registry
Sunday, March 2, 2025
Windows Scripting Host
OS/Windows/WSH
Language/VisualBasic
AttackCycle/Exploitation
Sunday, March 2, 2025
Windows SeBackup and SeRestore permissions
OS/Windows/SAM
OS/Windows/Permissions/SeBackup
OS/Windows/Permissions/SeRestore
Application/reg
Application/Impacket
Sunday, March 2, 2025
Windows SeImpersonate and SeAssignPrimaryToken permissions
OS/Windows/Permissions/SeImpersonate
OS/Windows/Permissions/SeAssignPrimaryToken
Protocol/WinRM
Application/RogueWinRM
Application/PowerShell
AttackCycle/LateralMovement
AttackCycle/PrivEsc
Sunday, March 2, 2025
Windows service ACLs
OS/Windows/Permissions
OS/Windows/Services
Protocol/WinRM
Application/PowerShell
Sunday, March 2, 2025
Windows services
OS/Windows/Services
OS/Windows/Registry
OS/Windows/Drivers
Sunday, March 2, 2025
Windows SeTakeOwnership permission
Application/icacls
OS/Windows/Permissions/SeTakeOwnership
Application/takeown
OS/Windows
Sunday, March 2, 2025
Windows Startup folder
OS/Windows
Sunday, March 2, 2025
Windows unattended installation data
OS/Windows
AttackCycle/Reconnaissance
Sunday, March 2, 2025
winrs
OS/Windows
Application/winrs
Protocol/WinRM
Application/PowerShell
Sunday, March 2, 2025
Wireshark
Application/Wireshark
Protocol/TCP
Protocol/HTTP
Protocol/ARP
Sunday, March 2, 2025
wmic
OS/Windows
Application/wmic
Application/WindowsExploitSuggester
AttackCycle/Reconnaissance
AttackCycle/Exploitation
AttackCycle/LateralMovement
Application/PowerShell
Sunday, March 2, 2025
Working with services in PowerShell
Application/PowerShell
OS/Windows/Services
Sunday, March 2, 2025
Work with base64 encoding using PowerShell
HowTo
Application/PowerShell
Standard/Base64
Sunday, March 2, 2025
Work with remote services using WMI and PowerShell
OS/Windows/WMI
Application/PowerShell
OS/Windows/Services
HowTo
Sunday, March 2, 2025
Work with remote tasks using WMI and PowerShell
HowTo
Application/PowerShell
OS/Windows/Tasks
AttackCycle/Exploitation
AttackCycle/PrivEsc
OS/Windows/WMI
Sunday, March 2, 2025
XFreeRDP
Application/XFreeRDP
Cryptography/Hashes/NT
AttackCycle/LateralMovement
Sunday, March 2, 2025
XML external entity (XXE) attacks
AttackCycle/Exploitation/XXE
Standard/URI
FileFormat/XML
Sunday, March 2, 2025
Xterm
Application/Xterm
Protocol/X11
AttackCycle/LateralMovement
Sunday, March 2, 2025
xxd
Application/xxd
OS/Linux
Sunday, March 2, 2025
youtube-dl
Application/youtube-dl
Application/ffmpeg
Language/Python
Standard/HD