Thanks to the teachers on the road of growth
  Post Categories
Tips 19 Actual combat record 4 Learning record 50 Simple repetition 1
Use The Registry To Bypassuac(BypassAV) Use The Registry To Bypassuac(BypassAV)
Some of the wordsYesterday, the program can to bypassAV OR EDR, in this program I use the registry to bypassuac, now I u
2021-09-27 Learning record
Redteam Bypass UAC
Add A Scheduled Task BypassAV（WEBSHELL） Add A Scheduled Task BypassAV（WEBSHELL）
Some of the wordsAfter Windows machine obtains target Webshell in red team task, progress maintains permissions through
2021-09-20 Learning record
Redteam Bypass ScheduledTask
Add A Scheduled Task BypassAV Add A Scheduled Task BypassAV
Some of the wordsBased on the idea, I developed a small tool for adding scheduled tasks by BYpassav More personal tools
2021-09-14 Learning record
Redteam Bypass ScheduledTask
CVE-2021-1732 Windows Privilege promotion CVE-2021-1732 Windows Privilege promotion
IntroductionBITTER APT's 0day exploit, used in one of its disclosed attacks, allows ordinary user processes to be gi
2021-09-07 Learning record
Redteam Windows Privilege Promotion LPE CVE-2021-1732
MS17010 Common ETERNAL Series Attack MS17010 Common ETERNAL Series Attack
Some of the wordsMaybe talke about the 17010 you just know the ETERNALBLUE? Now I will take more way to attack the ETERN
2021-09-07 Learning record
Redteam Bypass MS17010 ETERNALCHAMPION ETERNALROMANCE ETERNALSYNERGY ETERNALBLUE
MS17010 Bypass Attack MS17010 Bypass Attack
Some of the wordsAs we all know how to attack the ms17010, now I will tell you a way to bypass the EDR OR AV, of course
2021-09-07 Learning record
Redteam Bypass MS17010 ETERNALCHAMPION ETERNALROMANCE ETERNALSYNERGY ETERNALBLUE
ADCS&DomainGoldenCertificate ADCS&DomainGoldenCertificate
Some of the wordsMost of the time domain set branch of CA and AD authentication system, using the CA certificate issued
2021-09-02 Learning record
Redteam Domain Environment Golden Certificate PTT
ADCS&ESC2-7Attack ADCS&ESC2-7Attack
前言关于最基本的一些知识点、ESC1、ESC8的攻击方式，请看我先前写的文章 https://yangsirrr.github.io/2021/08/16/adcs-esc1-es
2021-09-01 Learning record
Redteam Domain Environment PTT DPE ADCS ESC2 ESC3 ESC4 ESC5 ESC6 ESC7
CVE-2021-1675 Windows Privilege Promotion CVE-2021-1675 Windows Privilege Promotion
IntroductionThis vulnerability level belongs to one of the powerful tools for domain opening slightly inferior to zerolo
2021-08-20 Learning record
Redteam Windows Privilege Promotion LPE CVE-2021-1675 Mimikatz RCE
CVE-2021-36934 Windows Privilege Promotion CVE-2021-36934 Windows Privilege Promotion
IntroductionA privilege promotion vulnerability exists because access control lists (ACLs) are too loose on multiple sys
2021-08-17 Learning record
Redteam Windows Privilege Promotion LPE Mimikatz CVE-2021-36934
4 / 5