Skip to content
My Hacking Notes
Always Install Elevated
Initializing search
My Hacking Notes
Home
General
General
Network Scanning
Ports / Services
Port Forwarding and Tunnelling
Reverse Shells
OSINT
OSINT
bbot
File Scraping
Windows / AD
Windows / AD
Methodology
Workstation Privesc
Workstation Privesc
Methodology
Startup Apps
Always Install Elevated
Privilege Abuse
Insecure File Permissions
Insecure Services
DLL Hijacking
Weak Registry Permissions
Bypass UAC
Finding Logged In Users
Scheduled Tasks
Cached Credentials
Dump Processes
External Password Spraying
External Password Spraying
Username Enumeration
Entra Token/ROPC
Exchange Endpoints
Remote Execution Tools
PowerShell Commands
CMD Commands
Relay & Coercion
Relay & Coercion
Relay (ntlmrelayx)
RPC Coercion
Responder
mitm6
Insecure Name Resolution Protocols
WPAD
Exchange Coercion (PrivExchange)
Discovery & Audit
Discovery & Audit
SMB & RPC Enumeration
SMB Shares & Data Hunting
LDAP Checks
BloodHound
User Enumeration
Password Spraying
Privilege Escalation
Privilege Escalation
ADCS Discovery
ADCS - ESC 1
ADCS - ESC 8
Shadow Credentials
BadSuccessor (dMSA Abuse)
ZeroLogon
Credential Access
Credential Access
SAM/SECURITY/SYSTEM
DCSync
DPAPI
AutoLogon
GPP/SYSVOL Credential Leaks
Delegation
Delegation
Discovery
Resource Based Constrained Delegation (RBCD)
Unconstrained Delegation (KUD)
Constrained Delegation (KCD)
Kerberos
Kerberos
Password / Hash / AES -> TGT
AS-REP Roast
Kerberoast
Ticket Forgery
Ticket Forgery
Golden Ticket
Silver Ticket
Knowledge
Knowledge
Authentication Process
S4U2self and S4U2Proxy
File Transfer
File Transfer
Download to Windows
Upload from Windows
Web Applications
Web Applications
Discovery & Scanning
Discovery & Scanning
Vulnerability Scanners
Information Gathering
Content Discovery
Content Discovery
Directory Enumeration
vHost Enumeration
Authentication & Session
Authentication & Session
Login Bruteforce
JSON Web Tokens (JWT)
CSRF
Cookies
Injection
Injection
SQL Injection (SQLi)
SQL Injection (SQLi)
General Information
SQLi Tools
Basic Injections
Login Bypass Examples
Error-Based SQLi (Method 1)
Error-Based SQLi (Method 2)
Union-Based SQLi (Quick Method)
Union-Based SQLi (Long Method)
Miscellaneous Useful Injections
NoSQL Basics
Cross-Site Scripting (XSS)
Server-Side Template Injection (SSTI)
XXE Injection
File Inclusion
File Handling
File Handling
Upload Restriction Bypass
Platforms
Platforms
Tomcat
Jenkins
Sharepoint
WordPress
WiFi
WiFi
Security Testing Tools
Security Types Overview
WPA
WPA2 (Personal)
WPA2 (Enterprise)
802.1X Authentication Methods
Attacks
Attacks
WPA/WPA2 PSK/PMKID Captures
WPS (PIN) Weaknesses
Password Cracking
Password Cracking
Hashcat
Wordlists
Linux Privesc
Linux Privesc
Methodology
Manual Enumeration
Enumeration Tools
File Transfers
Shell Upgrades
Sudo Environment Variables
SUID and GUID Executables
Groups
Persistence Methods
Phishing
Phishing
Evilginx
Miscellaneous
Miscellaneous
Tmux Configuration
VLAN Configuration
Zip File Analysis
Unprotect Excel Document
CTF Walkthroughs
CTF Walkthroughs
Proving Grounds
Proving Grounds
Cassios
Cobweb
Muddy
Forward
Always Install Elevated
¶