Skip to content
PurpleSec
LNK File Attacks
Search
Home
Blog
Knowledge Base
Pwned
About
Contact
PurpleSec
Home
Blog
Knowledge Base
Knowledge Base
Reconnaissance
Reconnaissance
Network Footprinting
Network Footprinting
SMTP
IMAP & POP3
SNMP
MySQL
MSSQL
Oracle TNS
IPMI
DNS
NFS
SMB
FTP
Information Gathering - Web Edition
Information Gathering - Web Edition
WHOIS
Digging DNS
Subdomain Bruteforcing
DNS Zone Transfers
Virtual Hosts
Fingerprinting
Crawling
Search Engine Discovery
Web Archives
Automating Recon
Certificate Transparency Logs
Web Attacks
Web Attacks
File Upload Attacks
File Upload Attacks
Fingerprinting the Web Stack
Absent Validation
Weaponization
Client-Side Validation
Blacklist Filters
Whitelist Filters
Type & MIME Filters
Limited File Uploads
Prevention & Hardening
Cheatsheet
Practice
SQL Injection
SQL Injection
Theory & Exploitation
Theory & Exploitation
Subverting Logic & Comments
Identifying Vulnerabilities
In-Band SQLi
Blind SQLi
Out-of-Band SQLi
Advanced Exploitation
WAF Bypassing
Database Cheatsheet
SQLMap
SQLMap
Getting Started
Output Description
Running on HTTP Requests
Handling Errors
Attack Tuning
Database Enumeration
Advanced Enumeration
Advanced Usage
Bypassing Protections
OS Exploitation
Attacking with Ffuf
Attacking with Ffuf
Directory Fuzzing
Extension Fuzzing
Page Fuzzing
Recursive Fuzzing
Subdomain Fuzzing
VHost Fuzzing
Parameter Fuzzing — GET
Parameter Fuzzing — POST
Value Fuzzing
Cheatsheet
Attacking Common Applications
Attacking Common Applications
Application Discovery & Enumeration
Attacking WordPress
Credential Attacks
Credential Attacks
Password Cracking Techniques
Password Cracking Techniques
Introduction to John The Ripper
Introduction to Hashcat
Writing Custom Wordlists and Rules
Cracking Protected Files
Cracking Protected Archives
Remote Password Attacks
Remote Password Attacks
Network Services
Spraying, Stuffing, and Defaults
Exercise
Extracting Passwords from Windows Systems
Extracting Passwords from Windows Systems
Windows Authentication Process
Attacking SAM, SYSTEM, and SECURITY
Attacking LSASS
Attacking Windows Credential Manager
Attacking Active Directory and NTDS.dit
Credential Hunting in Windows
Extracting Passwords from Linux Systems
Extracting Passwords from Linux Systems
Linux Authentication Process
Credential Hunting in Linux
Extracting Passwords from the Network
Extracting Passwords from the Network
Credential Hunting in Network Traffic
Credential Hunting in Network Shares
Windows Lateral Movement Techniques
Windows Lateral Movement Techniques
Pass the Hash (PtH)
Pass the Ticket (PtT) from Windows
Pass the Ticket (PtT) from Linux
Pass the Certificate
Password Management
Password Management
Password Policies
Password Managers
NTLMv2 Hash Coercion
NTLMv2 Hash Coercion
File-Based Coercion
RPC-Based Coercion
NTLMv2 Hash Theft
NTLMv2 Hash Theft
File-Based Coercion
Protocol-Based Coercion & Relay
Capture & Relay Tools
Active Directory
Active Directory
Initial Attack Vectors
Initial Attack Vectors
LLMNR Poisoning
SMB Relay
mitm6
Post-Compromise Enumeration
Post-Compromise Enumeration
BloodHound
ldapdomaindump
PingCastle
Post Compromise Attacks
Post Compromise Attacks
Dumping & Cracking Hashes
Kerberoasting
GPP Attacks
Token Impersonation
Mimikatz Credential Dumping
LNK File Attacks
SeBackup & SeRestore Abuse
SeTcbPrivilege Abuse
Post Domain Compromise
Post Domain Compromise
Dumping NTDS.dit
Golden Ticket
ADCS Attacks
ADCS Attacks
Overview
ESC1 - Misconfigured Templates
ESC2 - Misconfigured Templates II
ESC3 - Enrollment Agent
ESC4 - Access Control
ESC5 - PKI Object Access
ESC6 - EDITF_ATTRIBUTESUBJECTALTNAME2
ESC7 - CA Access Control
ESC8 - Web Enrollment Relay
ESC9 - No Security Extension
ESC10 - Weak Cert Mapping
ESC11 - NTLM Relay to ICPR
ESC12 - ADCS on YubiHSM
ESC13 - Issuance Policy
ESC14 - altSecurityIdentities
ESC15 - EKUwu Application Policies
Golden Certificate
Important Attacks
Important Attacks
Pass the Hash
Exploitation Frameworks
Exploitation Frameworks
Metasploit
Metasploit
Introduction to MSFconsole
Modules
Targets
Payloads
Encoders
Databases
Plugins & Mixins
Sessions & Jobs
Meterpreter
Writing & Importing Modules
Introduction to MSFVenom
Firewall & IDS/IPS Evasion
Pivoting, Tunneling & Port Forwarding
Pivoting, Tunneling & Port Forwarding
SSH & Meterpreter Tunneling
Socat Redirection
Pivoting Tools
Advanced Tunneling
Double Pivots
Detection & Prevention
Tool Deep Dives
Tool Deep Dives
Ligolo-ng
Proxychains
SSH Tunneling & Port Forwarding
sshuttle
Windows Privilege Escalation
Windows Privilege Escalation
Tools & Enumeration
User & Group Privileges
User & Group Privileges
Quick Decision Guide
SeImpersonate & Potato Attacks
SeDebug & LSASS Dumping
SeBackup & SeRestore
SeTakeOwnership & SeLoadDriver
Windows Group Privileges
OS & Service Exploitation
OS & Service Exploitation
Quick Decision Guide
Unquoted Service Paths
Weak Service Permissions
DLL Hijacking
AlwaysInstallElevated & Tasks
UAC Bypass
Kernel Exploits
Credentials & Environment
Credentials & Environment
Quick Decision Guide
Credential Hunting
Restricted Environment Breakouts
Pwned
About
Contact
Home
Knowledge Base
Active Directory
Post Compromise Attacks
LNK File Attacks
Back to top