# Pentester's Promiscuous Notebook

## Pentester's Promiscuous Notebook

- [README](https://ppn.snovvcra.sh/readme.md)
- [C2](https://ppn.snovvcra.sh/pentest/c2.md)
- [Cobalt Strike](https://ppn.snovvcra.sh/pentest/c2/cobalt-strike.md)
- [Covenant](https://ppn.snovvcra.sh/pentest/c2/covenant.md)
- [Empire](https://ppn.snovvcra.sh/pentest/c2/empire.md)
- [Havoc](https://ppn.snovvcra.sh/pentest/c2/havoc.md)
- [Meterpreter](https://ppn.snovvcra.sh/pentest/c2/meterpreter.md)
- [PoshC2](https://ppn.snovvcra.sh/pentest/c2/poshc2.md)
- [Sliver](https://ppn.snovvcra.sh/pentest/c2/sliver.md)
- [Infrastructure](https://ppn.snovvcra.sh/pentest/infrastructure.md)
- [AD](https://ppn.snovvcra.sh/pentest/infrastructure/ad.md)
- [ACL Abuse](https://ppn.snovvcra.sh/pentest/infrastructure/ad/acl-abuse.md): Access Control Lists
- [AD CS Abuse](https://ppn.snovvcra.sh/pentest/infrastructure/ad/ad-cs-abuse.md): Active Directory Certificate Services
- [dNSHostName Spoofing (Certifried)](https://ppn.snovvcra.sh/pentest/infrastructure/ad/ad-cs-abuse/dnshostname-spoofing-certifried.md): CVE-2022-26923
- [ESC1](https://ppn.snovvcra.sh/pentest/infrastructure/ad/ad-cs-abuse/esc1.md): Modifiable SAN + Smart Card Logon or Client Authentication or PKINIT Client Authentication EKUs
- [ESC4](https://ppn.snovvcra.sh/pentest/infrastructure/ad/ad-cs-abuse/esc4.md): Vulnerable Certificate Template ACEs
- [ESC8](https://ppn.snovvcra.sh/pentest/infrastructure/ad/ad-cs-abuse/esc8.md): NTLM Relay to AD CS HTTP Endpoints
- [ESC15](https://ppn.snovvcra.sh/pentest/infrastructure/ad/ad-cs-abuse/esc15.md): Inject Application Policies into Version 1 Certificate Templates (CVE-2024-49019)
- [Golden Certificate](https://ppn.snovvcra.sh/pentest/infrastructure/ad/ad-cs-abuse/golden-certificate.md): THEFT3 + DPERSIST1
- [Pass-the-Certificate](https://ppn.snovvcra.sh/pentest/infrastructure/ad/ad-cs-abuse/ptc.md): Schannel authentication
- [ADIDNS Abuse](https://ppn.snovvcra.sh/pentest/infrastructure/ad/adidns-abuse.md): Active Directory integrated DNS
- [Attack Trusts](https://ppn.snovvcra.sh/pentest/infrastructure/ad/attack-trusts.md)
- [Attack RODCs](https://ppn.snovvcra.sh/pentest/infrastructure/ad/attack-rodc.md): Read-Only Domain Controllers
- [AV / EDR Evasion](https://ppn.snovvcra.sh/pentest/infrastructure/ad/av-edr-evasion.md)
- [.NET Assembly](https://ppn.snovvcra.sh/pentest/infrastructure/ad/av-edr-evasion/dotnet-assembly.md)
- [.NET Config Loader](https://ppn.snovvcra.sh/pentest/infrastructure/ad/av-edr-evasion/dotnet-assembly/dotnet-config-loader.md)
- [.NET Dynamic API Invocation](https://ppn.snovvcra.sh/pentest/infrastructure/ad/av-edr-evasion/dotnet-assembly/dotnet-dynamic-api-invocation.md)
- [.NET In-Memory Assembly](https://ppn.snovvcra.sh/pentest/infrastructure/ad/av-edr-evasion/dotnet-assembly/dotnet-in-memory-assembly.md)
- [.NET Reflective Assembly](https://ppn.snovvcra.sh/pentest/infrastructure/ad/av-edr-evasion/dotnet-assembly/dotnet-reflective-assembly.md)
- [AMSI Bypass](https://ppn.snovvcra.sh/pentest/infrastructure/ad/av-edr-evasion/amsi-bypass.md): Antimalware Scan Interface
- [Application Whitelist Bypass](https://ppn.snovvcra.sh/pentest/infrastructure/ad/av-edr-evasion/application-whitelist-bypass.md)
- [AppLocker Bypass](https://ppn.snovvcra.sh/pentest/infrastructure/ad/av-edr-evasion/applocker-bypass.md)
- [BYOVD](https://ppn.snovvcra.sh/pentest/infrastructure/ad/av-edr-evasion/byovd.md): Bring Your Own Vulnerable Driver
- [CLM Bypass](https://ppn.snovvcra.sh/pentest/infrastructure/ad/av-edr-evasion/clm-bypass.md): PowerShell Constrained Language Mode
- [Defender](https://ppn.snovvcra.sh/pentest/infrastructure/ad/av-edr-evasion/defender.md): Microsoft Defender
- [ETW Block](https://ppn.snovvcra.sh/pentest/infrastructure/ad/av-edr-evasion/etw-block.md): Event Tracing for Windows
- [Execution Policy Bypass](https://ppn.snovvcra.sh/pentest/infrastructure/ad/av-edr-evasion/executionpolicy-bypass.md)
- [Mimikatz](https://ppn.snovvcra.sh/pentest/infrastructure/ad/av-edr-evasion/mimikatz.md)
- [UAC Bypass](https://ppn.snovvcra.sh/pentest/infrastructure/ad/av-edr-evasion/uac-bypass.md): User Account Control
- [Authentication Coercion](https://ppn.snovvcra.sh/pentest/infrastructure/ad/authentication-coercion.md)
- [Credentials Harvesting](https://ppn.snovvcra.sh/pentest/infrastructure/ad/credential-harvesting.md)
- [From Memory](https://ppn.snovvcra.sh/pentest/infrastructure/ad/credential-harvesting/from-memory.md)
- [lsass.exe](https://ppn.snovvcra.sh/pentest/infrastructure/ad/credential-harvesting/from-memory/lsass.md): Local Security Authority Subsystem Service
- [svchost.exe](https://ppn.snovvcra.sh/pentest/infrastructure/ad/credential-harvesting/from-memory/svchost-exe.md)
- [Credential Phishing](https://ppn.snovvcra.sh/pentest/infrastructure/ad/credential-harvesting/credential-phishing.md)
- [DCSync](https://ppn.snovvcra.sh/pentest/infrastructure/ad/credential-harvesting/dcsync.md): DS-Replication-Get-Changes + DS-Replication-Get-Changes-All
- [DPAPI](https://ppn.snovvcra.sh/pentest/infrastructure/ad/credential-harvesting/dpapi.md): Data Protection API
- [KeePass](https://ppn.snovvcra.sh/pentest/infrastructure/ad/credential-harvesting/keepass.md)
- [Linux](https://ppn.snovvcra.sh/pentest/infrastructure/ad/credential-harvesting/linux.md)
- [LSA](https://ppn.snovvcra.sh/pentest/infrastructure/ad/credential-harvesting/lsa.md): Local Security Authority
- [NetSync](https://ppn.snovvcra.sh/pentest/infrastructure/ad/credential-harvesting/netsync.md): Silver Ticket -> Netlogon (MS-NRPC)
- [NPLogonNotify](https://ppn.snovvcra.sh/pentest/infrastructure/ad/credential-harvesting/nplogonnotify.md)
- [NTDS](https://ppn.snovvcra.sh/pentest/infrastructure/ad/credential-harvesting/ntds.md): Windows NT Directory Services + DCSync
- [Password Filter](https://ppn.snovvcra.sh/pentest/infrastructure/ad/credential-harvesting/password-filter.md)
- [RDP](https://ppn.snovvcra.sh/pentest/infrastructure/ad/credential-harvesting/rdp.md): Remote Desktop Protocol
- [SAM](https://ppn.snovvcra.sh/pentest/infrastructure/ad/credential-harvesting/sam.md): Security Account Manager
- [SSH Clients](https://ppn.snovvcra.sh/pentest/infrastructure/ad/credential-harvesting/ssh-clients.md)
- [SSPI](https://ppn.snovvcra.sh/pentest/infrastructure/ad/credential-harvesting/sspi.md): Security Support Provider Interface
- [Windows Hello](https://ppn.snovvcra.sh/pentest/infrastructure/ad/credential-harvesting/windows-hello.md)
- [Discovery](https://ppn.snovvcra.sh/pentest/infrastructure/ad/discovery.md)
- [DnsAdmins](https://ppn.snovvcra.sh/pentest/infrastructure/ad/dnsadmins.md)
- [Dominance](https://ppn.snovvcra.sh/pentest/infrastructure/ad/dominance.md)
- [gMSA / dMSA](https://ppn.snovvcra.sh/pentest/infrastructure/ad/gmsa-dmsa.md): Group Managed Service Accounts / Delegated Managed Service Accounts
- [GPO Abuse](https://ppn.snovvcra.sh/pentest/infrastructure/ad/gpo-abuse.md): Group Policy Objects
- [Kerberos](https://ppn.snovvcra.sh/pentest/infrastructure/ad/kerberos.md)
- [Delegation Abuse](https://ppn.snovvcra.sh/pentest/infrastructure/ad/kerberos/delegation-abuse.md)
- [Constrained](https://ppn.snovvcra.sh/pentest/infrastructure/ad/kerberos/delegation-abuse/kcd.md)
- [Resource-based Constrained](https://ppn.snovvcra.sh/pentest/infrastructure/ad/kerberos/delegation-abuse/rbcd.md)
- [Unconstrained](https://ppn.snovvcra.sh/pentest/infrastructure/ad/kerberos/delegation-abuse/kud.md)
- [Kerberos Relay](https://ppn.snovvcra.sh/pentest/infrastructure/ad/kerberos/kerberos-relay.md)
- [Roasting](https://ppn.snovvcra.sh/pentest/infrastructure/ad/kerberos/roasting.md)
- [Key Credentials Abuse](https://ppn.snovvcra.sh/pentest/infrastructure/ad/key-credentials-abuse.md)
- [LAPS](https://ppn.snovvcra.sh/pentest/infrastructure/ad/laps.md): Local Administrator Password Solution
- [Lateral Movement](https://ppn.snovvcra.sh/pentest/infrastructure/ad/lateral-movement.md)
- [DCOM](https://ppn.snovvcra.sh/pentest/infrastructure/ad/lateral-movement/dcom.md): Distributed COM
- [Overpass-the-Hash](https://ppn.snovvcra.sh/pentest/infrastructure/ad/lateral-movement/over-pth.md)
- [Pass-the-Hash](https://ppn.snovvcra.sh/pentest/infrastructure/ad/lateral-movement/pth.md)
- [Pass-the-Ticket](https://ppn.snovvcra.sh/pentest/infrastructure/ad/lateral-movement/ptt.md)
- [RDP](https://ppn.snovvcra.sh/pentest/infrastructure/ad/lateral-movement/rdp.md): Remote Desktop Protocol
- [RPC](https://ppn.snovvcra.sh/pentest/infrastructure/ad/lateral-movement/rpc.md): Remote Procedure Call
- [RunAs](https://ppn.snovvcra.sh/pentest/infrastructure/ad/lateral-movement/runas.md)
- [SMB](https://ppn.snovvcra.sh/pentest/infrastructure/ad/lateral-movement/smb.md): Server Message Block
- [SPN-jacking](https://ppn.snovvcra.sh/pentest/infrastructure/ad/lateral-movement/spn-jacking.md)
- [WinRM / PSRemoting](https://ppn.snovvcra.sh/pentest/infrastructure/ad/lateral-movement/winrm.md): Windows Remote Management / PowerShell Remoting
- [WMI](https://ppn.snovvcra.sh/pentest/infrastructure/ad/lateral-movement/wmi.md): Windows Management Instrumentation
- [LDAP](https://ppn.snovvcra.sh/pentest/infrastructure/ad/ldap-ldaps.md): Lightweight Directory Access Protocol
- [NTLM](https://ppn.snovvcra.sh/pentest/infrastructure/ad/ntlm.md): NT / LM Hashes
- [NTLM Relay](https://ppn.snovvcra.sh/pentest/infrastructure/ad/ntlm/ntlm-relay.md)
- [NTLMv1 Downgrade](https://ppn.snovvcra.sh/pentest/infrastructure/ad/ntlm/ntlmv1-downgrade.md)
- [Password Spraying](https://ppn.snovvcra.sh/pentest/infrastructure/ad/password-spraying.md)
- [Post Exploitation](https://ppn.snovvcra.sh/pentest/infrastructure/ad/post-exploitation.md): Post Exploitation in Active Directory
- [Pre-created Computers Abuse](https://ppn.snovvcra.sh/pentest/infrastructure/ad/pre-created-computers-abuse.md): Pre-created Computer Accounts & Pre-Windows 2000
- [PrivExchange](https://ppn.snovvcra.sh/pentest/infrastructure/ad/privexchange.md): CVE-2019-0686, CVE-2019-0724
- [Privileges Abuse](https://ppn.snovvcra.sh/pentest/infrastructure/ad/privileges-abuse.md)
- [SeBackupPrivilege & SeRestorePrivilege](https://ppn.snovvcra.sh/pentest/infrastructure/ad/privileges-abuse/sebackup-serestore.md)
- [SeImpersonatePrivilege](https://ppn.snovvcra.sh/pentest/infrastructure/ad/privileges-abuse/seimpersonate.md)
- [Potatoes](https://ppn.snovvcra.sh/pentest/infrastructure/ad/privileges-abuse/seimpersonate/potatoes.md)
- [PrintSpoofer](https://ppn.snovvcra.sh/pentest/infrastructure/ad/privileges-abuse/seimpersonate/printspoofer.md)
- [SeTrustedCredmanAccess](https://ppn.snovvcra.sh/pentest/infrastructure/ad/privileges-abuse/setrustedcredmanaccess.md)
- [RID Cycling](https://ppn.snovvcra.sh/pentest/infrastructure/ad/rid-cycling.md): Relative Identifier
- [SCCM Abuse](https://ppn.snovvcra.sh/pentest/infrastructure/ad/sccm-abuse.md): System Center Configuration Manager / Microsoft Endpoint Configuration Manager
- [SMB](https://ppn.snovvcra.sh/pentest/infrastructure/ad/smb.md): Server Message Block
- [Token Manipulation](https://ppn.snovvcra.sh/pentest/infrastructure/ad/token-manipulation.md)
- [User Hunt](https://ppn.snovvcra.sh/pentest/infrastructure/ad/user-hunt.md)
- [WSUS](https://ppn.snovvcra.sh/pentest/infrastructure/ad/wsus.md): Windows Server Update Services
- [Zerologon](https://ppn.snovvcra.sh/pentest/infrastructure/ad/zerologon.md): CVE-2020-1472
- [Azure AD](https://ppn.snovvcra.sh/pentest/infrastructure/azure-ad.md)
- [On-Prem ↔ Cloud](https://ppn.snovvcra.sh/pentest/infrastructure/azure-ad/on-prem-cloud.md)
- [Cloud → On-Prem](https://ppn.snovvcra.sh/pentest/infrastructure/azure-ad/on-prem-cloud/cloud-on-prem.md)
- [On-Prem → Cloud](https://ppn.snovvcra.sh/pentest/infrastructure/azure-ad/on-prem-cloud/on-prem-cloud.md)
- [PRT Abuse](https://ppn.snovvcra.sh/pentest/infrastructure/azure-ad/prt-abuse.md): Primary Refresh Tokens
- [DevOps](https://ppn.snovvcra.sh/pentest/infrastructure/devops.md)
- [Ansible](https://ppn.snovvcra.sh/pentest/infrastructure/devops/ansible.md)
- [Artifactory](https://ppn.snovvcra.sh/pentest/infrastructure/devops/artifactory.md)
- [Atlassian](https://ppn.snovvcra.sh/pentest/infrastructure/devops/atlassian.md)
- [Containerization / Orchestration](https://ppn.snovvcra.sh/pentest/infrastructure/devops/containerization-orchestration.md)
- [GitLab](https://ppn.snovvcra.sh/pentest/infrastructure/devops/gitlab.md)
- [HashiCorp Vault](https://ppn.snovvcra.sh/pentest/infrastructure/devops/hashicorp-vault.md)
- [Jenkins](https://ppn.snovvcra.sh/pentest/infrastructure/devops/jenkins.md)
- [VS Code](https://ppn.snovvcra.sh/pentest/infrastructure/devops/vscode.md): Visual Studio Code
- [Zabbix](https://ppn.snovvcra.sh/pentest/infrastructure/devops/zabbix.md)
- [DBMS](https://ppn.snovvcra.sh/pentest/infrastructure/dbms.md): Database Management System
- [FireBird](https://ppn.snovvcra.sh/pentest/infrastructure/dbms/firebird.md)
- [MS SQL](https://ppn.snovvcra.sh/pentest/infrastructure/dbms/mssql.md)
- [MySQL / MariaDB](https://ppn.snovvcra.sh/pentest/infrastructure/dbms/mysql-mariadb.md)
- [Oracle](https://ppn.snovvcra.sh/pentest/infrastructure/dbms/oracle.md)
- [Redis](https://ppn.snovvcra.sh/pentest/infrastructure/dbms/redis.md)
- [SQLite](https://ppn.snovvcra.sh/pentest/infrastructure/dbms/sqlite.md)
- [Authentication Brute Force](https://ppn.snovvcra.sh/pentest/infrastructure/authentication-brute-force.md)
- [File Transfer](https://ppn.snovvcra.sh/pentest/infrastructure/file-transfer.md)
- [IPMI](https://ppn.snovvcra.sh/pentest/infrastructure/ipmi.md): Intelligent Platform Management Interface
- [Kiosk Breakout](https://ppn.snovvcra.sh/pentest/infrastructure/kiosk-breakout.md)
- [Low-Hanging Fruits](https://ppn.snovvcra.sh/pentest/infrastructure/low-hanging-fruits.md)
- [LPE](https://ppn.snovvcra.sh/pentest/infrastructure/lpe.md): Local Privilege Escalation
- [Networks](https://ppn.snovvcra.sh/pentest/infrastructure/networks.md)
- [L2](https://ppn.snovvcra.sh/pentest/infrastructure/networks/l2.md): Data Link Layer (OSI Layer 2)
- [ARP Spoofing](https://ppn.snovvcra.sh/pentest/infrastructure/networks/l2/arp-spoofing.md): Address Resolution Protocol
- [DHCPv6 Spoofing](https://ppn.snovvcra.sh/pentest/infrastructure/networks/l2/dhcpv6-spoofing.md): Dynamic Host Configuration Protocol version 6
- [LLMNR / NBNS Poisoning](https://ppn.snovvcra.sh/pentest/infrastructure/networks/l2/llmnr-nbns-poisoning.md): Link-Local Multicast Name Resolution / NetBIOS Name Service
- [SNACs Abuse](https://ppn.snovvcra.sh/pentest/infrastructure/networks/l2/snacs-abuse.md): Stale Network Address Configuration
- [VLAN Hopping](https://ppn.snovvcra.sh/pentest/infrastructure/networks/l2/vlan-hopping.md): Virtual Local Area Network
- [NAC Bypass](https://ppn.snovvcra.sh/pentest/infrastructure/networks/nac-bypass.md): Network Access Control & Port Security (MAB, IEEE 802.1X, etc.)
- [Scanning](https://ppn.snovvcra.sh/pentest/infrastructure/networks/scanning.md)
- [SIP / VoIP](https://ppn.snovvcra.sh/pentest/infrastructure/networks/sip-voip.md): Session Initiation Protocol / Voice over IP
- [Sniff Traffic](https://ppn.snovvcra.sh/pentest/infrastructure/networks/sniff-traffic.md)
- [NFS](https://ppn.snovvcra.sh/pentest/infrastructure/nfs.md): Network File System
- [Persistence](https://ppn.snovvcra.sh/pentest/infrastructure/persistence.md)
- [Pivoting](https://ppn.snovvcra.sh/pentest/infrastructure/pivoting-tunneling.md)
- [Post Exploitation](https://ppn.snovvcra.sh/pentest/infrastructure/post-exploitation.md): General Post Exploitation
- [SNMP](https://ppn.snovvcra.sh/pentest/infrastructure/snmp.md): Simple Network Management Protocol
- [SSH](https://ppn.snovvcra.sh/pentest/infrastructure/ssh.md): Secure Shell
- [TFTP](https://ppn.snovvcra.sh/pentest/infrastructure/tftp.md): Trivial File Transfer Protocol
- [VNC](https://ppn.snovvcra.sh/pentest/infrastructure/vnc.md): Virtual Network Computing
- [OSINT](https://ppn.snovvcra.sh/pentest/osint.md): Open Source Intelligence
- [Shodan](https://ppn.snovvcra.sh/pentest/osint/shodan.md)
- [Password Brute Force](https://ppn.snovvcra.sh/pentest/password-brute-force.md)
- [Generate Wordlists](https://ppn.snovvcra.sh/pentest/password-brute-force/generate-wordlists.md)
- [Perimeter](https://ppn.snovvcra.sh/pentest/perimeter.md)
- [1C](https://ppn.snovvcra.sh/pentest/perimeter/1c.md)
- [ADFS](https://ppn.snovvcra.sh/pentest/perimeter/adfs.md): Active Directory Federation Services
- [Cisco](https://ppn.snovvcra.sh/pentest/perimeter/cisco.md)
- [DNS](https://ppn.snovvcra.sh/pentest/perimeter/dns.md): Domain Name System
- [Exchange](https://ppn.snovvcra.sh/pentest/perimeter/exchange.md)
- [Information Gathering](https://ppn.snovvcra.sh/pentest/perimeter/information-gathering.md)
- [IPSec](https://ppn.snovvcra.sh/pentest/perimeter/ipsec.md): IP Security
- [Java RMI](https://ppn.snovvcra.sh/pentest/perimeter/java-rmi.md): Java Remote Method Invocation
- [Log4j / Log4Shell](https://ppn.snovvcra.sh/pentest/perimeter/log4j-log4shell.md)
- [Lync & Skype for Business](https://ppn.snovvcra.sh/pentest/perimeter/lync-s4b.md)
- [NTP](https://ppn.snovvcra.sh/pentest/perimeter/ntp.md): Network Time Protocol
- [Outlook](https://ppn.snovvcra.sh/pentest/perimeter/outlook.md)
- [OWA](https://ppn.snovvcra.sh/pentest/perimeter/owa.md): Outlook Web Access
- [SharePoint](https://ppn.snovvcra.sh/pentest/perimeter/sharepoint.md)
- [SMTP](https://ppn.snovvcra.sh/pentest/perimeter/smtp.md): Simple Mail Transfer Protocol
- [SSH](https://ppn.snovvcra.sh/pentest/perimeter/ssh.md): Secure Shell
- [Subdomain Takeover](https://ppn.snovvcra.sh/pentest/perimeter/subdomain-takeover.md)
- [Shells](https://ppn.snovvcra.sh/pentest/shells.md)
- [Reverse Shells](https://ppn.snovvcra.sh/pentest/shells/reverse-shells.md)
- [Web Shells](https://ppn.snovvcra.sh/pentest/shells/web-shells.md)
- [Web](https://ppn.snovvcra.sh/pentest/web.md)
- [2FA Bypass](https://ppn.snovvcra.sh/pentest/web/2fa-bypass.md)
- [LFI / RFI](https://ppn.snovvcra.sh/pentest/web/lfi-rfi.md): Local / Remote File Inclusion
- [SOP / CORS](https://ppn.snovvcra.sh/pentest/web/sop-cors.md): Same-Origin Policy / Cross-Origin Resource Sharing
- [SQLi](https://ppn.snovvcra.sh/pentest/web/sqli.md): SQL Injection
- [WAF](https://ppn.snovvcra.sh/pentest/web/waf.md): Web Application Firewall
- [WordPress](https://ppn.snovvcra.sh/pentest/web/wordpress.md)
- [XSS](https://ppn.snovvcra.sh/pentest/web/xss.md): Cross-Site Scripting
- [Wi-Fi](https://ppn.snovvcra.sh/pentest/wi-fi.md)
- [WPA / WPA2](https://ppn.snovvcra.sh/pentest/wi-fi/wpa-wpa2.md)
- [Enterprise](https://ppn.snovvcra.sh/pentest/wi-fi/wpa-wpa2/enterprise.md): Wi-Fi Protected Access Enterprise
- [Personal](https://ppn.snovvcra.sh/pentest/wi-fi/wpa-wpa2/personal.md): Wi-Fi Protected Access Personal
- [Basics](https://ppn.snovvcra.sh/red-team/basics.md)
- [Infrastructure](https://ppn.snovvcra.sh/red-team/infrastructure.md)
- [Development](https://ppn.snovvcra.sh/red-team/dev.md)
- [API Hashing](https://ppn.snovvcra.sh/red-team/dev/api-hashing.md)
- [API Hooking](https://ppn.snovvcra.sh/red-team/dev/api-hooking.md)
- [BOF / COFF](https://ppn.snovvcra.sh/red-team/dev/bof-coff.md): Beacon Object Files / Common Object File Format
- [CFG](https://ppn.snovvcra.sh/red-team/dev/cfg.md): Control Flow Guard
- [Code Injection](https://ppn.snovvcra.sh/red-team/dev/code-injection.md)
- [DLL Injectors](https://ppn.snovvcra.sh/red-team/dev/code-injection/dll-injectors.md): Inject DLLs into remote process's virtual address space
- [Process Hollowing](https://ppn.snovvcra.sh/red-team/dev/code-injection/process-hollowing.md)
- [DLL Hijacking](https://ppn.snovvcra.sh/red-team/dev/dll-hijacking.md): DLL Hijacking / DLL Side-Loading / DLL Proxying
- [Golang](https://ppn.snovvcra.sh/red-team/dev/golang.md)
- [Kernel Mode](https://ppn.snovvcra.sh/red-team/dev/kernel-mode.md)
- [PIC / Shellcode](https://ppn.snovvcra.sh/red-team/dev/pic-shellcode.md): Position-Independent Code / Shellcode
- [Nim](https://ppn.snovvcra.sh/red-team/dev/nim.md)
- [Sandbox Evasion](https://ppn.snovvcra.sh/red-team/dev/sandbox-evasion.md)
- [Syscalls](https://ppn.snovvcra.sh/red-team/dev/syscalls.md)
- [Windows API](https://ppn.snovvcra.sh/red-team/dev/winapi.md)
- [BOF](https://ppn.snovvcra.sh/exploit-dev/bof.md)
- [OSCP BOF](https://ppn.snovvcra.sh/exploit-dev/bof/oscp-bof.md): Buffer Overflow (PEN-200 Edit)
- [OSED SEH Overflow](https://ppn.snovvcra.sh/exploit-dev/bof/osed-sehof.md): Structured Exception Handling Overflow (EXP-301 Edit)
- [RE](https://ppn.snovvcra.sh/exploit-dev/re.md): Reverse Engineering
- [WinDbg](https://ppn.snovvcra.sh/exploit-dev/windbg.md)
- [Git](https://ppn.snovvcra.sh/admin/git.md)
- [Linux](https://ppn.snovvcra.sh/admin/linux.md)
- [Kali](https://ppn.snovvcra.sh/admin/linux/kali.md)
- [Networking](https://ppn.snovvcra.sh/admin/networking.md)
- [DHCP Server & Linux Hotspot](https://ppn.snovvcra.sh/admin/networking/dhcp-hostapd.md)
- [Quick Configurations](https://ppn.snovvcra.sh/admin/networking/quick-configurations.md)
- [Routing](https://ppn.snovvcra.sh/admin/networking/routing.md)
- [WireGuard](https://ppn.snovvcra.sh/admin/networking/wireguard.md)
- [Virtualization](https://ppn.snovvcra.sh/admin/virtualization.md)
- [Docker](https://ppn.snovvcra.sh/admin/virtualization/docker.md)
- [Hyper-V](https://ppn.snovvcra.sh/admin/virtualization/hyper-v.md)
- [VirtualBox](https://ppn.snovvcra.sh/admin/virtualization/virtualbox.md)
- [VMWare](https://ppn.snovvcra.sh/admin/virtualization/vmware.md)
- [Windows](https://ppn.snovvcra.sh/admin/windows.md)