Clik here to view.
File Transfer Cheatsheet: Windows and Linux
File transfer is a crucial step in the post-exploitation scenario while performing penetration testing or red teaming. There are various ways to do the file transfer, here in this article we are going...
View ArticleClik here to view.
A Detailed Guide on Feroxbuster
Feroxbuster is a robust tool designed to identify directories and files on web servers using brute-force techniques. It is frequently utilized in penetration testing and security evaluations to detect...
View ArticleClik here to view.
PostgreSQL Penetration Testing
PostgreSQL is one of the most popular open-source relational database systems, powering everything from small web applications to enterprise-scale platforms. Its widespread adoption makes it a...
View ArticleClik here to view.
Windows Dll Execution Techniques
Overview Dynamic Link Libraries (DLLs) are shared code modules on Microsoft Windows that can be loaded and executed at runtime by host processes. Because DLL functionality is deeply integrated into the...
View ArticleClik here to view.
NTLM Reflection Attack
In Active Directory environments, delegation abuse via NTLM reflection is a common attack technique. Attackers exploit misconfigured delegation settings to reflect NTLM authentication back to target...
View ArticleClik here to view.
Network Pivoting using Ligolo-MP – Complete Guide
In modern penetration testing, gaining an initial foothold on an internet-facing machine is rarely the end goal. The most sensitive assets — databases, domain controllers, internal web applications,...
View ArticleClik here to view.
A Detailed Guide on Local Port Forwarding
In the contemporary digital world, penetration testing and red team engagements, direct access to target systems from the attacker’s machine is uncommon. Many services are bound solely to localhost or...
View ArticleClik here to view.
A Detailed Guide on SSH Port forwarding & Tunnelling
This article walks through SSH tunnelling in a practical, lab‑oriented way. You will see how to set up a loopback‑bound Apache2 web server as a protected target, then use Local, Dynamic, and Remote...
View ArticleClik here to view.
Windows Privilege Escalation: Bypass UAC
Overview This article delivers a complete, hands-on walkthrough of User Account Control (UAC) bypass techniques against a default-configured Windows 10 host. The walkthrough begins with reconnaissance...
View ArticleClik here to view.
Arsenal-NG: A Terminal Cheat-Sheet Launcher for Faster Penetration Testing
Overview Arsenal-NG is an interactive, terminal-based launcher that turns a sprawling collection of offensive-security tools into a single searchable command cheat-sheet. Instead of memorising flags...
View Article
