Skip to content

Memory

Active Directory

Initializing search

Memory

Blue Team
Blue Team
- CICD
  CICD
  - Github Actions
- Networking
  Networking
  - Routers
    Routers
    
    Onsense
    
    RouterOS
    
    VyOS
  - BGP
  - DNS
  - Networks
- Self Hosted
  Self Hosted
  - Backups
  - SSO
  - Smart Home
- Threat Modeling
  Threat Modeling
  - Throttling
- Windows
  Windows
- Anonymity
- Cisco IOS
- Containers
- DNS
- GPG
- Hardening Linux
- Hardening macOS
- IDS
- Privacy
- Reverse Proxy
- Secure Boot
- Self Hosted
- Speed Test
- Systems Design
- Threat Modeling
- VPN
- Wifi
- Wireguard
Code Review
Code Review
- Code Scanners
  Code Scanners
  - Checkmarx
  - CodeQL
  - Fortify
  - Semgrep
- Configurations
  Configurations
  - Docker
  - Nginx
- Smart Contracts
  Smart Contracts
  - Vulnerability Classifications
- Bash
- C
- Flash
- Github Actions
- Gitlab
- Go
- JS
- Java
- Jira
- Nodejs
- Objective C
- PHP
- Perl
- Ruby
- Rust
- Scanning Code
- Setup
- Smart Contracts
- Swift
- Vulnerabilites
Crypto
Crypto
- Asymmetric Encryption
  Asymmetric Encryption
  - Curves
    Curves
    
    Montgomery Curves
    
    Short Weierstrass Curves
    
    Twisted Edwards Curves
  - ECC
  - ElGamal
  - GGH
  - Kyber
  - RSA
- Currencies
  Currencies
  - Ethereum
    Ethereum
    
    NFT
    
    Name Service
    
    Smart Contract Scanning
    
    Solidity Vulnerabilities
    
    Testing
  - Bitcoin
  - Botting
  - Contracts
  - DeFi
  - Ethereum
  - Solana
  - Trading
- Hash Functions
  Hash Functions
  - BCrypt
  - Blake
  - Blake2
  - Blake3
  - GHASH
  - Gimli
  - Hash Extention
  - MD2
  - MD4
  - MD5
  - RIPEMD
  - Rumba20
  - SHA1
  - SHA2
  - SHA3
  - Whirlpool
- Key Derivation
  Key Derivation
- Key Exchange
  Key Exchange
  - Authenticated Key Exchange
    Authenticated Key Exchange
    
    CPace
    
    Dragonfly
    
    JPAKE
    
    OPAQUE
    
    PAKE
    
    SIGMA
    
    Secure Remote Password Protocol
  - CECPQ1
  - CECPQ2
  - Diffie Hellman
  - Elliptic Curve Diffie Hellman
  - Elliptic Curve Menezes Qu Vanstone
  - Fully Hashed Menezes Qu Vanstone
  - PQXDH
  - RSA KEM
  - Superingular Isgeny Diffie Hellman.md
  - X3DH
- MAC
  MAC
  - CBC MAC
  - GMAC
  - HMAC
  - KMAC
  - OMAC
  - Poly1305
  - SipHash
  - UMAC
  - VMAC
  - Cmac
- Messaging
  Messaging
  - Key Rotation
  - MLS Protocol
- Random
  Random
- Signatures
  Signatures
  - Blind Signatures
  - DKIM
  - DSA
  - Dilithium
  - ECDSA
  - EdDSA
  - FALCON
  - Picnic
  - RSA
  - SPHINCS+
  - Schorr Signature
  - Unbalanced Oil and Vinegar
  - XEdDSA
- Symmetric Encryption
  Symmetric Encryption
  - Block Ciphers
    Block Ciphers
    
    CBC
    
    CCM
    
    CFB
    
    CTR
    
    ECB
    
    GCM SIV
    
    GCM
    
    OCB
    
    OFB
    
    SIV
    
    XTS
  - AES
  - Block Ciphers
  - Blowfish
  - Camellia
  - DES
  - IDEA
  - RC4
  - RC6
  - Salsa ChaCha
  - Serpent
  - TEA
  - Twofish
- Zero Knowledge Proofs
  Zero Knowledge Proofs
- CRC
- Certificates
- Crypto
- Crypto ASD
- HSM
- Hashes
- Homomorphic Encryption
- Lattices
- Math
- OTP
- Padding
- Passwords
- Programing
- Secure Messaging
- Zero Knowlege Proofs
- Zip Plaintext Attack
Exploitation
Exploitation
- CPU Attacks
  CPU Attacks
- CVEs
  CVEs
- Development
  Development
- Fuzzing
  Fuzzing
  - AFL
  - Honggfuzz
  - Libfuzzer
- Heap
  Heap
- Memory
  Memory
- Stack
  Stack
  - BufferOverflows
  - Cookie
  - Ret2Libc
  - Return2
  - Stack
- ARM
- Cars
- Consoles
- Exploits
- Fuzzing
- GDB
- Javascript Exploits
- LLDB
- Malware
- Reverse Shells
- Rootkits
- Routers
- UEFI
Hardware
Hardware
- Electronics
  Electronics
- Glitching
  Glitching
- Protocols
  Protocols
  - JTAG
    JTAG
    
    RasPi
  - 1 Wire
  - I2C
  - ICSP
  - JTAG
  - SPI
  - SWD
  - UART
- RFID
  RFID
  - HF
    HF
    
    ASK CST
    
    Calypso
    
    CryptoRF
    
    EMV
    
    FeliCa
    
    HID iClass
    
    Legic Prime
    
    MIFARE Classic
    
    MIFARE DESFire
    
    MIFARE Plus
    
    MIFARE Ultralight C
    
    MIFARE Ultralight
    
    NFC
    
    NXP
    
    PIV
    
    SRIX4K
    
    Tagit
    
    Topaz
  - LF
    LF
    
    EM
    
    HID
    
    HITAG
    
    Q5B
    
    T5557
    
    T5577
    
    TK5551
  - Protocols
    Protocols
    
    EM4100 Protocol
    
    HDX Animal Identification Protocol
  - UHF
    UHF
    
    Reader&Writer
    
    Transcore
    
    UHF Cards
  - Active Types
  - HID
  - Hardware
  - Passive Types
  - Protocols
  - Proxmark
- SDR
  SDR
  - GPS
- Antennas
- Batteries
- BusPirate
- CPUs
- Coreboot
- ESP32
- Firmware
- FlipperZero
- HackBox
- Hardware
- LimeSDR
- Memory types
- Microcontrollers
- Over the Air Updates
- PSVita
- Projects
- Protocols
- Raspberry Pi
- SDR
- Security
- Side Channel Anaylsis
- Solar Pannels
Linux
Linux
- Kernel
  Kernel
  - Debugging
  - IO Uring
  - SysRq
- Programs
  Programs
  - 7z
  - Alacritty
  - Ansible
  - Bash
  - Docker
  - FFMpeg
  - Firejail
  - Ftrace
  - GCC
  - GPG
  - Goaccess
  - Grep
  - Haproxy
  - Journalctl
  - KExec
  - Kubernetes
  - Mikrotik
  - Network
  - Nginx
  - OBS
  - OpenSSL
  - Pacman
  - Qemu
  - SED
  - SSH
  - Strings
  - Tmux
  - VIM
  - VSCode
  - Xargs
  - Binwalk
  - Fwupd
  - Git
- Systemd
  Systemd
  - Cryptenroll
  - Cryptsetup
  - NSpawn
  - Podman
  - Services
  - Timers
  - Udev
- Aliases
- ArchLinux
- Booting
- Internals
- KVM
- Kernel
- NixOS
- Shadow File
- TOCTOU
- Tunneling
- Window Managers
Mobile
Mobile
- Android
  Android
  - APKs
  - Android Platform
  - Android
  - Application Components
  - Build form Source
  - Certificate Pinning
  - Emulator
  - Flashing Image
  - Flutter
  - Frida
  - Objection
  - Rooting
  - Safety Net
  - Storage
  - TrustZone
  - WebViews
  - Work Mode
  - Xamarin
  - Xposed
- iOS
  iOS
  - Findings
    Findings
    
    Insecure Data Storage
  - Corellium
  - IPA
  - Jailbreaking
  - Kernel
  - Runtime Hooking
  - Setting up Devices
  - Swift
  - Tools
  - Virtualization
  - iOS Hooking
  - iOS
- Android Findings
- Android TestCases
- Container Checklist
- Container Findings
- Findings
- Programs
- iOS Findings
- iOS TestCases
OSX
OSX
- Airdrop
- Airtag
- Command Line
- Internals
- Kernel Debugging
- Keychain
- M1
- Programs
- XNU Training
- iMessage
Programing
Programing
- Assembly
- Bash Programing
- C
- CSS
- Databases
- Excel
- Foundery
- Frontend
- Go Lang
- Javascript
- Languages
- Networking
- Notes on Tak AI
- Programing
- Python
- Rust
- TypeScript
- Web Assembly
Red Team
Red Team
- Exploits
  Exploits
- Physical
  Physical
  - Keys
  - Locks
- Post Exploitation
  Post Exploitation
- Recon
  Recon
  - DNS
    DNS
    
    DNS Recon
    
    DoH
    
    Domain Squatting
    
    Hostile Subdomain Takeover
  - OSI
    OSI
    
    Emails
    
    History
    
    IP
    
    Misc
    
    Money
    
    Phisical
    
    Photos
    
    Social Media
  - Recon
- Scanning
  Scanning
- Services
  Services
  - Databases
  - Office 365 and Outlook
  - SIP
  - SMB
  - SMTP
  - SSH
- Wifi
  Wifi
  - WPA Personal
    WPA Personal
    
    WPA
    
    WPA2
    
    WPA3
  - 802.11
  - Airgeddon
  - OWE
  - OpenWrt
  - PPSK
  - SAE
  - WEP
  - WPA Enterprise
  - WPS
  - Wifi Attacks
  - Wifi
- Internal Penetration Testing Guide
- Nat Punching
- OSCP
- OSI
- Phishing
- Physical Security
- Proxying
- Red teaming
- Report Writing
- Responder
- SMB
- TCPDump
- VLAN Hopping
Reverse Engineering
Reverse Engineering
- Dissessembaly
  Dissessembaly
  - Binary Ninja
  - Games
  - Ghidra
  - Go Lang
  - IDA Pro
  - WinDbg
  - R2
- File Formats
  File Formats
  - Audio
  - BSON
  - BZIP2
  - C++
  - Certificates
  - DRM
  - Dot Net
  - ELF
  - EXT4
  - Emails
  - Flash
  - G Code
  - Ghidra
  - GoLang
  - Java Classes
  - Java
  - PNG
  - PRG
  - Radare2
  - Rosetta 2
  - Windows PE
  - Openssl
- Firmware
  Firmware
  - Embeded Devices
    Embeded Devices
    
    4G LTE mobile hotspot
    
    ESP32
    
    HDD
    
    Starlink
    
    USB Mouse
    
    hi3815 IP Camera
  - Automotive
  - Braudcom
  - Canon Camera
  - D Link DIR3060
  - Emulating
  - Intel Hex
  - Motorola S Record
  - NVRAM
  - RAW Nand Flash
  - STM32s
  - Samsung S10 TEEGRIS
  - TP Link HS110
  - UEFI
  - Unknown Microcontrollers
  - Ti txt
- Protocols
  Protocols
  - BGP
  - CAN Bus
  - DHCP
  - DNS
  - Discord
  - GPS
  - Garage Doors
  - Misc
  - NTMLSSP
  - Network
  - Noise Protocol
  - Protobuf
  - Rolling Codes
  - SS7
  - TURN Protocol
  - WWV
  - WhatsApp
- RFID
  RFID
  - Mag Stripe
  - NFC
  - RFID Gen2
  - RFID Gen2v2
- Signals
  Signals
  - Bluetooth
    Bluetooth
    
    Bluetooth Low Energy
    
    Bluetooth
    
    Govee lights
    
    Ble ctf
  - 802.15.4
  - Display Port
  - Falcon 9
  - GNURadio
  - IQ
  - IR
  - LORA
  - RF Time Sync
  - SDQ
  - SigFox
  - Signals
  - TETRA
  - Telecommunication
  - USB
  - Zigbee
- ARM
- Assembly
- Bar Codes
- Disassembly
- Dynamic Analysis
- File Formats
- File
- Firmware
- Malware Analysis
- MicroControlers
- Patch Analysis
- QRCodes
- Stenography
- X86
Web Exploitation
Web Exploitation
- Auth
  Auth
  - 2FA
  - Auth
  - FIDO
  - JWT
  - OAuth
  - Oauth2
  - OpenID Connect
  - OpenID
  - SAML
  - SOAP
- CMS
  CMS
- Cloud
  Cloud
  - AWS
    AWS
    
    AWS
    
    CloudTrail
    
    DynamoDB
    
    EC2
    
    GCP
    
    IAM
    
    KMS
    
    Kinesis
    
    Lambda
    
    S3
    
    SNS
    
    SQS
    
    Secrets Manager
  - AWS
  - Cloud
  - Cloudflare
  - Privlage Escaltion
- Deseralization
  Deseralization
- File Upload
  File Upload
  - Images
  - PDF
  - Php
- Injection
  Injection
  - Databases
    Databases
    
    NoSQL
    NoSQL
    
    MongoDB
    
    Redis
    
    GraphQL
    
    Hibernation
    
    LDAP
    
    Memcache
    
    MongoDB
    
    MySQL
    
    NoSQL
    
    Oracle Database
    
    Postgres
    
    SQL Injection
  - XML
    XML
    
    ESI
    
    External Entity XML Injection
    
    Internal Entity XML Injection
    
    XSLT Injection
  - XSS
    XSS
    
    XSS
  - YAML
    YAML
    
    YAML
  - Command Injection
  - Header Injection
  - Injection
  - JSON
  - Object Graph Navigation Language Injection
  - Pickle
  - Request Smuggling
  - SSI
  - Template Injection
  - View State
  - XPATH
- Proxies
  Proxies
  - Reverse Proxy
  - Testing Proxies
- SSRF
  SSRF
  - SSRF
  - Cloud metadata
- Technologies
  Technologies
- API Testing
- Automated Web Scanning
- Botting
- Browser Exploits
- Cache
- DoS
- Exploits
- File Upload
- HTTP Headers
- Javascript
- Local File Inclusion
- PHP htaccess
- Parameter Exploits
- SSL
- Web Scanning
Windows
Windows
- Credentials
  Credentials
- Kernel
  Kernel
  - Debugging
  - Drivers
  - Exploitation
  - Hyper V Security
  - Logs
  - Memory
  - Named Pipes
  - Processes
- Powershell
  Powershell
- Programs
  Programs
  - Photoshop
  - Remote Connections
- Active Directory Active Directory
  Table of contents
  - Active Directory
    
    Policies
    
    Priv Escalation
- AntiVirus Bypass
- Applock Bypass
- Autorun Locations
- Empire
- Native Binary Tricks
- Registry
- UAC Bypass
- Windows
Home
Hacking Pratice

Table of contents

Active Directory
- Policies
  - Priv Escalation

Active Directory

Active Directory¶

Policies¶

Priv Escalation¶

A not-so-common and stupid privilege escalation

2022-04-29

Made with Material for MkDocs