w0rk3r's Windows Hacking Library

https://github.com/SandboxEscaper/polarbearrepo @WindowsHackingLibrary

Breach: From Recon to penetrating the perimeter, to actions on the target https://youtu.be/e99iQC-dod8 @SecTalks

Choose Your Own Red Team Adventure https://medium.com/@malcomvetter/choose-your-own-red-team-adventure-f87d6a3b0b76 @WindowsHackingLibrary

Dynamic Microsoft Office 365 AMSI In Memory Bypass Using VBA https://secureyourit.co.uk/wp/2019/05/10/dynamic-microsoft-office-365-amsi-in-memory-bypass-using-vba @WindowsHackingLibrary

Malicious Payloads vs Deep Visibility: A PowerShell Story https://www.slideshare.net/DanielBohannon2/malicious-payloads-vs-deep-visibility-a-powershell-story @BlueTeamLibrary

Bypassing Windows Defender: One TCP Socket Away From Meterpreter and Beacon Sessions https://ired.team/offensive-security/bypassing-windows-defender-one-tcp-socket-away-from-meterpreter-and-cobalt-strike-beacon @WindowsHackingLibrary

T1093: Process Hollowing and Portable Executable Relocations https://ired.team/offensive-security/t1055-process-injection/process-hollowing-and-pe-image-relocations @WindowsHackingLibrary

Evil Clippy: MS Office maldoc assistant https://outflank.nl/blog/2019/05/05/evil-clippy-ms-office-maldoc-assistant @WindowsHackingLibrary

Power of Covenant https://notoriousrebel.space/2019-05-01-power-of-covenant @WindowsHackingLibrary

Designing Peer-To-Peer Command and Control https://posts.specterops.io/designing-peer-to-peer-command-and-control-ad2c61740456 @WindowsHackingLibrary

Building Meterpreter for the CLR Part1: https://vimeo.com/331977092 Part2: https://vimeo.com/332426022 Part3: https://vimeo.com/332827701 Part4: https://vimeo.com/333091819 @WindowsHackingLibrary

Weaponizing Privileged File Writes with Windows Collector Service https://rastamouse.me/2019/04/weaponizing-privileged-file-writes-with-windows-collector-service @WindowsHackingLibrary

Getting in the Zone: dumping Active Directory DNS using adidnsdump https://dirkjanm.io/getting-in-the-zone-dumping-active-directory-dns-with-adidnsdump @WindowsHackingLibrary

Next Gen Phishing – Leveraging Azure Information Protection https://www.trustedsec.com/2019/04/next-gen-phishing-leveraging-azure-information-protection @WindowsHackingLibrary

Windows 10 egghunter (wow64) and more https://www.corelan.be/index.php/2019/04/23/windows-10-egghunter @WindowsHackingLibrary

Under-the-hood: WMImplant Invoking PowerShell https://www.fortynorthsecurity.com/under-the-hood-wmimplant-invoking-powershell @WindowsHackingLibrary

Lateral Movement — SCM and Dll Hijacking Primer https://posts.specterops.io/lateral-movement-scm-and-dll-hijacking-primer-d2f61e8ab992 @WindowsHackingLibrary

Purple Team ATT&CK™ Automation https://github.com/praetorian-inc/purple-team-attack-automation @WindowsHackingLibrary

Windows Exploitation Tricks: Abusing the User-Mode Debugger https://googleprojectzero.blogspot.com/2019/04/windows-exploitation-tricks-abusing.html @WindowsHackingLibrary