Cookie's Red Team Recipe
Notes
NotesSome other stuff
test
Testing
Notes
NotesSome other stuff
  • Mixing...
  • General
    • Transferring Files
      • Serving Your Files
      • Transferring Files To Linux
      • Transferring Files To Windows
    • File Types
      • .vhd
    • Password Cracking
      • Hashcat
        • Wordlists
        • Wordlist + Rules
        • Masks
        • Mask Files
        • Combinator
        • Hybrid
        • Keyboard Walks
    • Trash to sift through
      • Cookie 3.1.24.ctd
  • OSINT
    • Test Page
  • Cloud
    • Azure
      • Discovery
      • Initial Access
        • Password Spray
        • Illicit Consent Grant
        • App Service Abuse
          • Insecure File Upload
          • SSTI
          • OS Command Injection
        • Blob Storage
        • Evilginx3
      • Enumeration
        • MG Module
        • Az PowerShell
        • Azure CLI
        • Tokens
        • ROADTools
        • StormSpotter
        • AzureHound
      • Privilege Escalation
        • Automation Account
        • Managed Identity Command Execution
        • Key Vault
  • Enumeration
  • Web Applications
    • Web Vulnerabilities
      • Web App Red Team Checklist
      • SSRF (Server Side Request Forgery)
      • Blind Data Exfiltration via DNS
      • XSS
      • XXE
      • XPath Injection
    • APIs
      • Web API Indicators
      • Passive Reconnaissance
      • Active API Reconnaissance
  • Active Directory
    • Reconnaissance
      • PowerView
      • SharpView
      • ADSearch
    • User Impersonation
      • Pass the Hash
      • Pass the Ticket
      • Overpass the Hash
      • Token Impersonation
      • Token Store
      • Make Token
      • Process Injection
    • Lateral Movement
      • Windows Remote Management
      • PsExec
      • Windows Management Instrumentation (WMI)
      • CoInitializeSecurity
      • DCOM
    • Kerberos
      • Kerberoasting
      • ASREP Roasting
      • Unconstrained Delegation
      • Constrained Delegation
      • Alternate Service Name
      • S4U2Self Abuse
      • Resource-Based Constrained Delegation
      • Shadow Credentials
      • Kerberos Relay Attacks
    • Pivoting
      • SOCKS Proxies
      • Linux Tools For Proxies
      • Windows Tools For Proxies
      • Pivoting with Kerberos
      • Pivoting A Browser
      • Reverse Port Forwards
      • NTLM Relaying
      • Relaying WebDAV
    • AD Certificate Services
      • Find Certificate Authorities
      • Misconfigured Certificate Templates
      • NTLM Relaying to ADCS HTTP Endpoints
      • User & Computer Persistence
    • Group Policy
      • Modify Existing GPO
      • Create & Link a GPO
    • MS SQL Servers
      • MS SQL Impersonation
      • MS SQL Command Execution
      • MS SQL Lateral Movement
      • MS SQL Privilege Escalation
    • Configuration Manager
      • Enumeration
      • Network Access Account Credentials
      • Lateral Movement
    • Domain Dominance
      • Silver Tickets
      • Golden Ticket
      • Diamond Tickets
      • Forged Certificates
    • Forest & Domain Trusts
      • Parent/Child
      • One-Way Inbound
      • One-Way Outbound
    • LAPS (Local Administrator Password Solution)
      • Reading ms-Mcs-AdmPwd
      • Password Expiration Protection
      • LAPS Backdoors
  • Report Writing
    • Wireless Pentesting
  • Cobalt Strike
    • Starting
      • Profile
      • Artifact Kit Changes
      • Resource Kit Changes
      • Start CS as a Service
      • Manual AMSI Bypass
      • Set Anti-Behavioural Detections
      • Generating Payloads
      • Listener Management
      • Prepare For Command Line Detections
    • Tools
      • Application Whitelisting
        • Policy Enumeration
        • Writeable Paths
        • Binaries, Scripts, and Libraries
        • PowerShell CLM
        • Beacon DLL
      • Credentials
        • Credential Manager
        • Scheduled Task Credentials
      • Session Passing
        • Beacon Passing
        • Foreign Listener
        • Spawn & Inject
      • DCSync
      • Extracting Kerberos Tickets
      • Mimikatz
        • NTLM Hashes
        • Kerberos Encryption Keys
        • Security Account Manager
        • Domain Cached Credentials
      • Take Screenshot
      • Evading Windows Defender
        • Artifact Kit
        • Malleable C2
        • Resource Kit
        • AMSI vs Post-Exploitation
        • Manual AMSI Bypasses
        • Behavioural Detections
        • Parent/Child Relationships
        • Command Line Detections
      • Pivot Listeners
Powered by GitBook
On this page
  1. Cloud

Azure

PreviousTest PageNextDiscovery

Last updated 3 days ago

5MB
AttackingAzureAD.pdf
pdf
7MB
LabManual.pdf
pdf
Page cover image