Skip to main content
Link
Menu
Expand
(external link)
Document
Search
OSEP Notes
Home
Recon
General
Shell Preparation
Meterpreter
Powershell
Execute Assembly
Shellcode
Office VBA (File)
Jscript (File)
Powershell and Win32 API (In Memory)
Jscript and C# (In Memory)
SuperSharpShooter JScript (In Memory)
Powershell and Win32 API (In Memory)
Deliver
HTML Smuggling
Process Injection / Migration / Hollowing
C# Process Injection
DLL Injection with C# (Disk)
Reflective DLL Injection (Memory)
Process Hollowing
Antivirus Evasion
Methods
AMSI (Antimalware Scan Interface)
UAC Included
Locating Signature (Less Effective)
Application Whitelisting
AppLocker Bypass
PowerShell Constrained Langunage Mode Bypass
Linux
Linux Persistence
Linux Privilege Escalation
Bypassing Antivirus
Windows Credentials
SAM Database
LAPS
Windows Privilege Escalation
Local Security Authority (LSA)
Lateral Movement
Pivot
Windows
Linux
Template Repository
Shell Preparation
Powershell
PowerShell allow ps1:
Set-ExecutionPolicy
-Scope
CurrentUser
-ExecutionPolicy
Unrestricted