All Security Engineering Courses

🏃 AD CS LOLBAS Toolkit

Native Windows toolkit for AD CS enumeration and exploitation. Everything runs through built-in OS components (certreq.exe, certutil.exe, PowerShell AD module, .NET Framework) - no third-party tools needed. Build with a sprinkle of FAFO and some finding out in lab env

Скрипты:

🐥adcs-common.ps1 🐥Invoke-Enumerate.ps1 🐥Invoke-SnapshotAudit.ps1 🐥Invoke-RemoteAudit.ps1 🐥Invoke-ESC1.ps1 .. Invoke-ESC13.ps1 🐥Invoke-FindTemplates.ps1 🐥Invoke-PassTheCert.ps1 🐥Invoke-ShadowCredentials.ps1 🐥Invoke-Kerberoast.ps1 🐥Invoke-DomainRecon.ps1

😹 Repo #adcs #windows #powershell ✈️ Whitehat Lab 💬Chat

The Mimikatz Missing Manual My goal was to create the "Missing Manual" — the documentation that explains not just the commands, but the why and the how of the Windows protocols being manipulated. Parts:

• Foundations: Setting up your environment and the basic syntax. • System Internals: How Windows handles tokens, processes, and services. • LSASS & Credentials: The heart of Mimikatz—extracting secrets from memory. • Kerberos Deep Dive: Tickets, forgery, and delegation. • PKI & Certificates: Hardware and software-based identities. • Domain Persistence: Owning the directory through replication. •DPAPI: Unlocking the secrets at rest.

CVE-2025-61155: Arbitrary Process Termination in GameDriverX64.sys (BYOVD) The GameDriverX64.sys kernel-mode anti-cheat driver (v7.23.4.7 and earlier) contains an access control vulnerability in one of its IOCTL handlers. A user-mode process can open a handle to the driver device and send specially crafted IOCTL requests. These requests are executed in kernel-mode context, allowing the attacker to terminate arbitrary processes, including critical system and security services (AV / EDR), without requiring administrative privileges. Blog: https://vespalec.com/blog/tower-of-flaws/

360WFP_Exploit BYOVD: Use 360 Security WFP driver (360netmon_x64_wfp.sys) to block EDR/XDR network connection.

Lnk-it-up Project for generating and identifying deceptive LNK files. Blog post: Trust Me, I'm A Shortcut. Windows’ primary mechanism for shortcuts, LNK files, is frequently abused by threat actors for payload delivery and persistence. This blog post introduces several new LNK file flaws that, amongst other things, allow attackers to fully spoof an LNK’s target and hide any command-line arguments provided.

#ad #collector ADWSDomainDump - инструмент для дампа инфы об AD через протокол ADWS. Позволяет извлекать данные и генерировать вывод в формате ldapdomaindump поверх легитимного HTTP-based протокола Использование:

adwsdomaindump -u 'thewoods.local\mathijs.verschuuren' -p 'password' -n 10.10.10.1 dc01.thewoods.local
[*] Connecting to ADWS host...
[+] ADWS port 9389 is reachable
[*] Binding to ADWS host
[+] Bind OK
[*] Starting domain dump
[+] Domain dump finished

https://github.com/mverschu/adwsdomaindump Чат в МАХ Канал в МАХ Telegram ✉️ @freedomfox

Subfinder — самый быстрый passive DNS resolver. Находит поддомены из 30+ источников без единого DNS запроса к цели. Что использует:

🔵 Passive sources (VirusTotal, CRT.sh, CertSpotter) 🔵 AlienVault OTX, ThreatCrowd, Recon.dev 🔵 FindDomain, Crobat, Turbodork 🔵 Rate limit evasion и concurrency 🔵 JSON/YAML/TXT вывод

Установка:

# Linux/macOS
go install -v github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest

# Docker
docker run -it projectdiscovery/subfinder -d target.com

Использование:

subfinder -d target.com -all -o results.txt
subfinder -d target.com -silent -t 100
subfinder -d target.com -o results.txt -json
subfinder -d *.target.com -r resolvers.txt

Пример вывода:

mail.target.com
api.target.com
dev.target.com
staging.target.com
cdn.target.com
*.wildcard.target.com

👽 CodeGuard: SciencePop | Чат

Build Your Own Professional Cybersecurity Lab at Home (100% Legal & Free) Designed for learners and professionals pursuing Bug Bounty • Ethical Hacking • SOC Analysis • Penetration Testing Core Lab Components Kali Linux — Primary attack & testing operating system https://www.kali.org/get-kali Metasploitable 2 — Safe environment for exploit practice https://sourceforge.net/projects/metasploitable Vulnerable-AD — Hands-on Active Directory attack scenarios https://github.com/WazeHell/vulnerable-AD WebGoat — Learn web vulnerabilities interactively https://owasp.org/www-project-webgoat OWASP Juice Shop — Modern SQL injection, XSS, and logic flaw practice https://owasp.org/www-project-juice-shop GoPhish — Ethical phishing simulations https://getgophish.com PortSwigger Web Security Labs — Structured web hacking labs https://portswigger.net/web-security Vulnserver — Buffer overflow exploitation training https://github.com/stephenbradshaw/vulnserver Vulnerable WordPress — WordPress exploitation practice https://github.com/wpscanteam/VulnerableWordpress CTFlearn — Capture-the-Flag challenges (Beginner → Advanced) https://ctflearn.com pfSense — Network segmentation & firewalling https://pfsense.org/download Suricata — Intrusion detection & prevention https://docs.suricata.io Wazuh — SIEM & log analysis https://wazuh.com/install OpenSearch — Dashboards & security analytics https://opensearch.org Security Onion — Blue-team monitoring platform https://securityonionsolutions.com/software Cowrie — Attack interaction & logging https://github.com/cowrie/cowrie WireGuard — Secure remote lab access https://www.wireguard.com/install Sysmon — Advanced Windows event logging https://learn.microsoft.com/sysinternals/downloads/sysmon Ansible — Lab deployment & orchestration https://ansible.com/resources/get-started MITRE Caldera — Simulated real-world attacks https://caldera.mitre.org Wireshark — Deep traffic inspection https://wireshark.org/download.html Zeek — Network security monitoring https://zeek.org/get-zeek REMnux — Reverse engineering environment https://remnux.org Sigma — Threat detection rule writing https://sigmahq.io Skills You’ll Develop Real-world attack methodology Exploitation and bug bounty techniques SOC detection and threat analysis Network forensics and malware investigation Build it once. Practice daily. Master both red and blue team operations from your own home lab.

Name : Mr. Robot SEASON : 4 Language : Eng Quality : 720p @HD_Web_Series_collection_2

Name : Mr. Robot SEASON : 3 Language : Hindi, Eng Quality : 720p Total Episode : 10 @HD_Web_Series_collection_2

Name : Mr. Robot SEASON : 2 Language : Hindi, Eng Quality : 720p Total Episode : 12 @HD_Web_Series_collection_2

Name : Mr. Robot SEASON : 1 Language : Hindi, Eng Quality : 720p Total Episode : 10

#Malware_analysis 1⃣ Netdragon Botnet https://blog.xlab.qianxin.com/netdragon/ 2⃣ Spying Chrome Extensions https://qcontinuum.substack.com/p/spying-chrome-extensions-287-extensions-495 3⃣ AgreeToSteal: The First Malicious Outlook Add-In https://www.koi.ai/blog/agreetosteal-the-first-malicious-outlook-add-in-leads-to-4-000-stolen-credentials 4⃣ OysterLoader - Multi-Stage Evasion Loader https://blog.sekoia.io/oysterloader-unmasked-the-multi-stage-evasion-loader 5⃣ RenEngine Malware https://securelist.com/renengine-campaign-with-hijackloader-lumma-and-acr-stealer/118891 6⃣ Foxveil Malware Loader https://www.catonetworks.com/blog/cato-ctrl-foxveil-new-malware

CobaltStrike-Linux-Beacon https://github.com/EricEsquivel/CobaltStrike-Linux-Beacon