RedTeaming_CheatSheet

Pentesting / RedTeaming cheatsheet with all the commands and techniques I learned during my learning journey. Will keep it up to date. If you have any recommendations for courses or links or have any questions feel free to dm me on discord. 0xjs#9027

Index

• General
  • Payloads
  • Open Source Intelligence
  • Python Dependancies
  • Windows System Security
• Infrastructure
  • Buffer overflow
  • Enumeration
  • Exploitation
  • Privilege Escalation Windows
  • Privilege Escalation Linux
  • Post Exploitation
• Windows AD
  • Initial Access
  • Host Reconnaissance
  • Host Persistence
  • Evasion
  • Local privilege escalation
  • Post-Exploitation
  • Lateral Movement
  • Domain Enumeration
  • Domain Privilege Escalation
  • Domain Persistence
• Cloud
  • Recon \ OSINT
  • Initial access attacks
  • Cloud services
    • Azure
    • Amazon Web Services
    • Google Cloud Platform
• C2 Frameworks
  • Cobalt Strike
  • Covenant
  • Metasploit

RedTeaming General

• Definition of Red Teaming by Joe Vest and James Tubberville:

Red Teaming is the process of using tactics, techniques and procedures (TTPs) to emulate a real-world threat, with the goal of measuring the effectiveness of the people, processes and technologies used to defend an environment.

• OPSEC (Operations Security) is a process that identifies critical information to determine if actions can be observed by enemy intelligence, determines if information obtained by adversaries could be interpreted to be useful to them, and then executes selected measures that eliminate or reduce adversary exploitation of critical information. It's generally used to describe the "ease" by which actions can be observed by "enemy" intelligence.

Sources

• Cloud: CARTP from Pentester Academy and breaching the cloud from antisyphon.
• Windows: CRTP, CRTE, PACES from Pentester Academy, ECPTX from eLearnSecurity and CRTO from RastaMouse.
• Infra: OSCP, PNPT from TCM Security and Tiberius privesc courses
• OSINT: PNPT Course

Data exfiltration simulation

• https://github.com/FortyNorthSecurity/Egress-Assess