Yggdrasil

A living knowledge base for red team tradecraft. Active Directory, Windows, Linux, Web, Malware Development, Binary Exploitation, Cloud and more — built from real labs, real CTFs and real engagements.

179 notes across 10 branches. Press / to search any of them.

Recently updated

• 22 Oct 2026NTDLL Unhooking
• 19 Oct 2026IAT Camouflage
• 16 Oct 2026EDR User-Mode Hooking Internals
• 16 Oct 2026Packing Techniques
• 15 Oct 2026WMI Attacks
• 15 Oct 2026PE Relocations & Import Resolution
• 15 Oct 2026Reflective Loading Internals
• 15 Oct 2026PEB & TEB Internals

Branches

• Active DirectoryKerberos, delegation, ACLs, ADCS, trusts.20
• WindowsPrivilege escalation, tokens, credentials, persistence.21
• Malware developmentInjection, loaders, evasion, unhooking.41
• WebInjection, deserialization, smuggling, logic flaws.25
• LinuxPrivesc, capabilities, containers, shell craft.10
• BinaryAssembly, overflows, shellcoding, PE internals.6
• TradecraftC2, pivoting, payloads, transfers, cracking.19
• Tool referencesFlag-by-flag notes for the daily rotation.27
• CloudAWS, Azure and GCP attack paths.3
• AndroidStatic and dynamic analysis of mobile apps.7