All notes

179 notes, grouped by branch.

Active Directory20

15 Sep 2026Active Directory ACL Abuse
15 Sep 2026Active Directory Certificate Services (ADCS) Attack
15 Sep 2026Active Directory Delegation Attacks
15 Oct 2026Active Directory Federation Services (AD FS) Attacks
15 Sep 2026Active Directory — LDAP Search Query
15 Oct 2026Azure AD / Entra ID Attacks
15 Sep 2026BloodHound Cypher Queries
15 Sep 2026BloodHound Data Collection
15 Sep 2026Cross Forest Trusts
15 Sep 2026DACL Attacks
15 Oct 2026DNS Admin Attacks
15 Sep 2026GPO Abuse
15 Sep 2026Kerberos Attacks
15 Sep 2026Kerberos Ticket Attacks
15 Sep 2026Linux in Active Directory — Enumeration
15 Sep 2026MSSQL, Exchange & SCCM Attack
15 Sep 2026NTLM Relay Attacks
15 Sep 2026Persisting on Active Directory
15 Sep 2026SID History Abuse
15 Sep 2026Windows Lateral Movement

Windows21

15 Sep 2026Coercion Attacks
17 Sep 2026COM & DCOM Attacks
15 Sep 2026Complete Windows & Active Directory Ports
15 Sep 2026DPAPI Abuse
15 Sep 2026Intro to Windows API
15 Oct 2026LAPS Attacks
15 Sep 2026Living Off the Land (LOLBAS)
15 Sep 2026Mimikatz
15 Sep 2026Password Attacks & Credential Harvesting
17 Sep 2026Potato Privilege Escalation Techniques
15 Sep 2026PowerShell Offensive Power Tools
15 Sep 2026Sharp C# Offensive Tools
15 Sep 2026Sysinternals Suite
17 Sep 2026UAC Bypass Techniques
15 Sep 2026Windows Groups & Privileges — Privilege Escalation
15 Sep 2026Windows Persistence
15 Sep 2026Windows PowerShell
15 Sep 2026Windows Privilege Escalation
17 Sep 2026Windows Privilege Escalation (A to Z)
09 Oct 2026Windows Token Attacks
15 Oct 2026WMI Attacks

Malware development41

15 Sep 2026AMSI Bypass
11 Oct 2026Anti-Debugging Techniques
15 Sep 2026APC Injection
28 Sep 2026API Hashing
03 Oct 2026API Hooking
15 Sep 2026AppLocker & PowerShell Constrained Language Mode
22 Sep 2026Argument Spoofing
08 Oct 2026Call Stack Spoofing in AV/EDR Evasion
16 Sep 2026Callback Code Execution
29 Sep 2026Compile-Time API Hashing
15 Oct 2026Delayed Execution Techniques
15 Sep 2026Direct Syscalls in AV/EDR Evasion
15 Sep 2026DLL Injection
15 Sep 2026Early Bird APC Injection
15 Sep 2026EDR Evasion & Unhooking
16 Oct 2026EDR User-Mode Hooking Internals
15 Sep 2026ETW Bypass
19 Oct 2026IAT Camouflage
27 Sep 2026IAT Hiding
08 Oct 2026Indirect Syscalls in AV/EDR Evasion
15 Sep 2026Introduction to Antivirus Evasion
18 Sep 2026Local Function Stomping Injection
16 Sep 2026Local Mapping Injection
15 Sep 2026Malware Binary Signing
22 Oct 2026NTDLL Unhooking
16 Oct 2026Packing Techniques
21 Sep 2026Parent Process ID (PPID) Spoofing
20 Sep 2026Payload Execution Control
15 Sep 2026Payload Staging
15 Oct 2026PE Relocations & Import Resolution
15 Oct 2026PEB & TEB Internals
15 Sep 2026Process Enumeration for Process Injection
15 Sep 2026Process Enumeration for Thread Hijacking
15 Sep 2026Process Injection
15 Oct 2026Reflective Loading Internals
19 Sep 2026Remote Function Stomping Injection
17 Sep 2026Remote Mapping Injection
15 Oct 2026Sandbox Detection Techniques
15 Sep 2026Shellcode Encryption & Encoding
15 Sep 2026Shellcode Loaders
15 Sep 2026Windows Shellcode Injection Techniques

Web25

15 Sep 2026API Security Testing — OWASP API Top 10 (2023)
15 Sep 2026CMS Recon & Exploitation
15 Sep 2026Command Injection
17 Sep 2026Cross-Origin Resource Sharing (CORS)
15 Sep 2026File Upload Attacks
15 Sep 2026GraphQL Attacks
15 Sep 2026HTTP Host Header Attacks
15 Sep 2026HTTP Request Smuggling
15 Sep 2026JWT Attacks
15 Sep 2026Local File Inclusion (LFI)
15 Sep 2026NoSQL Injection
15 Sep 2026OAuth Attacks
15 Sep 2026Prototype Pollution
15 Sep 2026Race Condition
15 Sep 2026Reverse Shells & Web Shells
15 Sep 2026Server Side Request Forgery
15 Sep 2026Server-Side Template Injection (SSTI)
15 Sep 2026SQL Injection
15 Sep 2026Web Application Attacks
15 Sep 2026Web Cache Poisoning
15 Sep 2026Web Deserialization Attacks
15 Sep 2026Web Fuzzing
15 Sep 2026Web Vulnerability Exploitation
15 Sep 2026Whitebox Web Application Pentesting
15 Sep 2026XML External Entity Injection

Linux10

15 Sep 2026Bash
15 Sep 2026Container Escaping
15 Sep 2026Linux Capabilities & Privilege Escalation
15 Sep 2026Linux Groups & Privilege Escalation via Groups
15 Sep 2026Linux Persistence
15 Sep 2026Linux Privilege Escalation
15 Sep 2026Linux Restricted Shell Escape
15 Sep 2026Linux Text Parsing Tools
17 Sep 2026Regular Expressions
15 Sep 2026Text Parsing

Binary6

15 Sep 2026Buffer Overflow (x86/x64)
15 Sep 2026GDB (GNU Debugger)
15 Sep 2026Introduction to Assembly Language
15 Sep 2026PE File Internals
27 Sep 2026pwntools — Complete Guide
15 Sep 2026Shellcoding

Tradecraft19

17 Sep 2026C2 Frameworks
15 Sep 2026Covenant C2
15 Sep 2026Exfiltration
15 Sep 2026File Transfer Techniques
15 Sep 2026Hash & Password Cracking
15 Sep 2026Havoc C2
15 Sep 2026HoaxShell & Villain Framework
15 Sep 2026Intro to C2 Operations with Sliver
15 Sep 2026Kerberos Recon & Exploitation
15 Sep 2026LDAP Recon & Exploitation
15 Sep 2026Merlin C2
15 Sep 2026Mythic C2
20 Sep 2026Network Scanning
15 Sep 2026Payload Generation
17 Sep 2026Pivoting & Tunneling
15 Sep 2026Port Fingerprinting & Enumeration
15 Sep 2026PowerShell Empire
17 Sep 2026Reverse Shells
15 Sep 2026SMB Recon & Exploitation

Tool references27

17 Sep 2026Adaptix C2 Wiki
15 Sep 2026BloodyAD Wiki
15 Sep 2026Certipy Wiki
17 Sep 2026Chisel Wiki
17 Sep 2026Cobalt Strike Wiki
15 Sep 2026Coercer Wiki
17 Sep 2026Covenant C2 Wiki
15 Sep 2026Donut Wiki
17 Sep 2026Havoc C2 Wiki
17 Sep 2026Impacket Wiki
17 Sep 2026Ligolo-ng Wiki
17 Sep 2026Merlin C2 Wiki
17 Sep 2026Metasploit Framework Wiki
15 Sep 2026Mimikatz Wiki
17 Sep 2026Mythic C2 Wiki
17 Sep 2026NetExec (nxc) Wiki
17 Sep 2026Nmap Wiki
17 Sep 2026PHPGGC Wiki
17 Sep 2026PoshC2 Wiki
17 Sep 2026PowerShell Empire Wiki
17 Sep 2026PowerView Wiki
17 Sep 2026Rubeus Wiki
17 Sep 2026ScareCrow Wiki
17 Sep 2026Sliver C2 Wiki
17 Sep 2026sqlmap Wiki
17 Sep 2026ysoserial Wiki
17 Sep 2026ysoserial.net Wiki

Cloud3

Android7

15 Sep 2026Android APK Analysis & Application Patching
15 Sep 2026Android Application Malware Analysis
15 Sep 2026Android Application Pentesting
15 Sep 2026Android Attacks — OWASP Mobile Top 10
15 Sep 2026Android Dynamic Pentesting — Exploitation, Frida & Traffic Interception
15 Sep 2026Android Forensics
15 Sep 2026Android Penetration Testing Automation