Red Teaming and Malware Analysis

About
Red Teaming
Cheat Sheet
Active Directory 101
Fuzzing and Web
Initial Foothold
- Browser In The Browser (BITB) Attack
- Phishing with Office
  Weaponizing XLM 4.0 macros
Privilege Escalation (Privesc)
Lateral Movement (Pivoting)
- From Windows VPN + Kali VPN + DC
  By using Proxifier
Persistence
Command and Control (C&C)
- CobaltStrike 101
  Pivoting DMZ: weevely + ngrok + CS Pivot COMBO via Linux
  Extras + Plugins
  Resources
Data Exfiltration
- Extracting certs/private keys from Windows using mimikatz and intercepting calls with burpsuite
CVE & Exploits / CTF
Tools
Resources
Pwnage
Malware Analysis
Unpacking
Basic tips
Malware instrumentation with frida
Tools
Resources
Mobile
IoT / Reverse / Firmware

Powered by GitBook

On this page

Exploits
Assets / Domains / PII
Buckets
Fake email & SMS
Spam Database Lookup / Blacklist

Was this helpful?

Tools

Intel

PreviousTools NextOSINT

Last updated 2 years ago

Exploits

Assets / Domains / PII

fierce --domain domain.yzy

Buckets

Fake email & SMS

Spam Database Lookup / Blacklist

Offensive Security’s Exploit Database Archive

GitHub - s0md3v/Smap: a drop-in replacement for Nmap powered by shodan.ioGitHub

💀 Sploitus | Exploits & Tools Search EngineSploitus_com

Spyse — Internet Assets Search Engine

https://skidsearch.netskidsearch.net

Tools - Intelligence X

Home - CensysCensys

ZoomEye - Cyberspace Search Engine

https://www.shodan.io/dashboardwww.shodan.io

Information by IP Address

Whois Lookup, Domain Availability & IP Search - DomainTools

https://securitytrails.com/dns-trails#/securitytrails.com

http://viewdns.infoviewdns.info

DNSdumpster.com - dns recon and research, find and lookup dns records

Subdomain Finder - C99.nl

GitHub - cybertoolbank/hidend: Tool for finding website backends.GitHub

fierce | Kali Linux ToolsKali Linux

https://hypestat.comhypestat.com

IBM X-Force Exchange

MX Lookup Tool - Check your DNS MX Records online - MxToolboxMxToolbox

Internet Archive: Wayback Machine

Arquivo.pt - pesquise páginas do passado!

Know. Before it mattersCanarytokens

Public Bucketssecgron

Public Buckets by GrayhatWarfare

Receive SMS Online | Temporary and Disposable Phone Numbers

SMAIL PRO | Temp mail - Temp Gmail - Disposable Fake Emailsonjj_com

DNSBL Information - Spam Database Lookup

Emkei's Fake Mailer

BarracudaCentral.org - Technical Insight for Security Pros

http://www.kloth.net/services/dnsbl.php

Cisco Talos Intelligence Group - Comprehensive Threat Intelligence