AV Software Key Components & Operations
15.1.3 - Detection methods
Dump binary representation of a string with xxd
xxd -b malware.txt
Calculate the hash of a file with sha256sum
sha256sum malware.txt
x
- 24.13 - Working with Password Hashes
- ACL Abuse
- Basic Exploits to Check
- Bloodhound
- Common Pitfalls
- DCOM Exploitation
- Domain Privilege Escalation
- Domain Rights Abuse
- GPO Exploitation & Passwords in SYSVOL
- Kerberos Lateral Movement
- Mimikatz
- PowerShell Lateral Movement
- Service Account Attacks
- Silver Ticket Attacks
- Spraying and Praying
- Ticket Attacks
- Token Abuse
- Useful Links
- Vulnerable Groups
- AD DNS (53)
- AD GC over LDAP (3268)
- AD GC over SSL TLS (3269)
- AD HTTP (80)
- AD HTTPAPI httpd 2.0 (SSDP,UPNP) (5357)
- AD HTTPAPI httpd 2.0 (SSDP,UPNP) (WinRM) (5985)
- AD HTTPS (443)
- AD Kerberos (88)
- AD LDAP (389)
- AD LDAPS (636)
- AD NetBIOS (139)
- AD RPC (135)
- AD SMB (445)
- AD kpasswd5 (464)
- AD nacn_http (593)
- Any Unidentified Ports (0)
- DNS (53)
- FTP (21)
- Finger (79)
- HTTP (80)
- IMAP (143, 993)
- IPMI (623)
- Kerberos (88)
- LDAP (389, 636, 3268, 3269)
- LLMNR (5355)
- MSRPC (135)
- MSSQL (1433)
- MySQL (3306)
- NFS (2049)
- POP3 (110)
- PostgreSQL (5432)
- R-Services (512, 513, 514)
- RDP (3389)
- RPC (111)
- RSync (873)
- Redis (6379)
- SMB (139,445)
- SMTP (25,465,587)
- SNMP (161,162,10161,10162)
- SSH (22)
- TFTP (69)
- Telnet (23)
- VNC (5900,5901)
- WinRM (5985, 5986)
- ident (113)
- Pasted image 20250217060209.png
- Pasted image 20250217060245.png
- Pasted image 20250220075344.png
- Pasted image 20250406201250.png
- Pasted image 20250406201306.png
- Pasted image 20250406201325.png
- Pasted image 20250406201353.png
- Pasted image 20250407115543.png
- Pasted image 20250407121548.png
- Pasted image 20250407124304.png
- Pasted image 20250407124323.png
- Pasted image 20250407124345.png
- Pasted image 20250407124459.png
- Pasted image 20250426171614.png
- Pasted image 20250426171626.png
- Pasted image 20250507173350.png
- Pasted image 20250508020305.png
- Pasted image 20250508020317.png
- Pasted image 20250508033354.png
- Pasted image 20250509144720.png
- Pasted image 20250510023102.png
- Pasted image 20250517182201.png
- Pasted image 20250517192903.png
- Pasted image 20250517193119.png
- Pasted image 20250517193226.png
- Pasted image 20250517194423.png
- Pasted image 20250517212440.png
- Pasted image 20250518005058.png
- Pasted image 20250526040826.png
- Pasted image 20250528051827.png
- Pasted image 20250528052444.png
- Pasted image 20250528052457.png
- Pasted image 20250528052751.png
- Pasted image 20250530040027.png
- Pasted image 20250609200218.png
- Pasted image 20250609202047.png
- Pasted image 20250609235308.png
- Pasted image 20250616131634.png
- Pasted image 20250616131740.png
- Pasted image 20250617101418.png
- Pasted image 20250617103059.png
- Pasted image 20250617104705.png
- Pasted image 20250617110426.png
- Pasted image 20250617120322.png
- Pasted image 20250617175431.png
- Pasted image 20250617184247.png
- Pasted image 20250617191117.png
- Pasted image 20250618162837.png
- Pasted image 20250618235120.png
- Pasted image 20250619092536.png
- Pasted image 20250619092705.png
- Pasted image 20250619093052.png
- Pasted image 20250619094922.png
- Pasted image 20250620150933.png
- Pasted image 20250620152201.png
- Pasted image 20250620152431.png
- Pasted image 20250620160604.png
- Pasted image 20250620173715.png
- Pasted image 20250620173900.png
- Pasted image 20250620173942.png
- Pasted image 20250620174200.png
- Pasted image 20250620174557.png
- Pasted image 20250620174836.png
- Pasted image 20250620174947.png
- Pasted image 20250620175224.png
- Pasted image 20250620175241.png
- Pasted image 20250620175405.png
- Pasted image 20250620190835.png
- Pasted image 20250620192014.png
- Pasted image 20250620192359.png
- Pasted image 20250620200755.png
- Pasted image 20250620200925.png
- Pasted image 20250620203517.png
- Pasted image 20250620210926.png
- Pasted image 20250620211019.png
- Pasted image 20250620211913.png
- Pasted image 20250620212014.png
- Pasted image 20250620215435.png
- Pasted image 20250620221647.png
- Pasted image 20250620222635.png
- Pasted image 20250620224635.png
- Pasted image 20250621085841.png
- Pasted image 20250621090558.png
- Pasted image 20250621091308.png
- Pasted image 20250621093211.png
- Pasted image 20250621100244.png
- Pasted image 20250621100541.png
- Pasted image 20250621100810.png
- Pasted image 20250621103011.png
- Pasted image 20250621104333.png
- Pasted image 20250621104400.png
- Pasted image 20250621144743.png
- Pasted image 20250621145035.png
- Pasted image 20250621152643.png
- Pasted image 20250621153413.png
- Pasted image 20250621155350.png
- Pasted image 20250621161434.png
- Pasted image 20250621162100.png
- Pasted image 20250621185358.png
- Pasted image 20250621194425.png
- Pasted image 20250621195344.png
- Pasted image 20250621200729.png
- Pasted image 20250621200840.png
- Pasted image 20250621223008.png
- Pasted image 20250621223352.png
- Pasted image 20250621230802.png
- Pasted image 20250621230833.png
- Pasted image 20250621234454.png
- Pasted image 20250621234541.png
- Pasted image 20250621235821.png
- Pasted image 20250622000006.png
- Pasted image 20250622000105.png
- Pasted image 20250622144119.png
- Pasted image 20250622144219.png
- Pasted image 20250622150028.png
- Pasted image 20250622161536.png
- Pasted image 20250622162137.png
- Pasted image 20250622230320.png
- Pasted image 20250625125515.png
- Pasted image 20250625131411.png
- Pasted image 20250625132340.png
- Pasted image 20250625133647.png
- Pasted image 20250625140614.png
- Pasted image 20250625140830.png
- Pasted image 20250625141646.png
- Pasted image 20250625141958.png
- Pasted image 20250625145443.png
- Pasted image 20250625145530.png
- Pasted image 20250626022017.png
- Pasted image 20250626022020.png
- Pasted image 20250626131627.png
- Pasted image 20250626134948.png
- Pasted image 20250626135438.png
- Pasted image 20250626135657.png
- Pasted image 20250626140944.png
- Pasted image 20250626141047.png
- Pasted image 20250626142730.png
- Pasted image 20250626142916.png
- Pasted image 20250626143431.png
- Pasted image 20250626144306.png
- Pasted image 20250626144355.png
- Pasted image 20250626144533.png
- Pasted image 20250626144641.png
- Pasted image 20250626144659.png
- Pasted image 20250626150158.png
- Pasted image 20250626150354.png
- Pasted image 20250626152519.png
- Pasted image 20250626152833.png
- Pasted image 20250626161649.png
- Pasted image 20250626162313.png
- Pasted image 20250626162454.png
- Pasted image 20250626162820.png
- Pasted image 20250626163249.png
- Pasted image 20250626163326.png
- Pasted image 20250626163359.png
- Pasted image 20250626163537.png
- Pasted image 20250626165130.png
- Pasted image 20250626165416.png
- Pasted image 20250626165441.png
- Pasted image 20250626165607.png
- Pasted image 20250626170509.png
- Pasted image 20250626170601.png
- Pasted image 20250626170645.png
- Pasted image 20250626190719.png
- Pasted image 20250626191701.png
- Pasted image 20250626192635.png
- Pasted image 20250626195048.png
- Pasted image 20250626200624.png
- Pasted image 20250626200940.png
- Pasted image 20250626201028.png
- Pasted image 20250626202848.png
- Pasted image 20250627001512.png
- Pasted image 20250627001733.png
- Pasted image 20250627001918.png
- Pasted image 20250627005835.png
- Pasted image 20250627013142.png
- Pasted image 20250627021255.png
- Pasted image 20250627124457.png
- Pasted image 20250627131903.png
- Pasted image 20250627152001.png
- Pasted image 20250627180331.png
- Pasted image 20250627180400.png
- Pasted image 20250627181132.png
- Pasted image 20250627181225.png
- Pasted image 20250627181419.png
- Pasted image 20250627181450.png
- Pasted image 20250627183230.png
- Pasted image 20250628142839.png
- Pasted image 20250628143309.png
- Pasted image 20250628143348.png
- Pasted image 20250628143454.png
- Pasted image 20250628155420.png
- Pasted image 20250628155547.png
- Pasted image 20250628155644.png
- Pasted image 20250628160538.png
- Pasted image 20250628172633.png
- Pasted image 20250628181526.png
- Pasted image 20250628192310.png
- Pasted image 20250628193656.png
- Pasted image 20250628204900.png
- Pasted image 20250628205331.png
- Pasted image 20250628212557.png
- Pasted image 20250628212616.png
- Pasted image 20250630155450.png
- Pasted image 20250630164306.png
- Pasted image 20250630185350.png
- Pasted image 20250630185454.png
- Pasted image 20250630190930.png
- Pasted image 20250630193510.png
- Pasted image 20250630193828.png
- Pasted image 20250630194903.png
- Pasted image 20250630195046.png
- Pasted image 20250630205347.png
- Pasted image 20250630205434.png
- Pasted image 20250630205540.png
- Pasted image 20250630205728.png
- Pasted image 20250630205828.png
- Pasted image 20250630213614.png
- Pasted image 20250630213918.png
- Pasted image 20250630214446.png
- Pasted image 20250630215148.png
- Pasted image 20250701204820.png
- Pasted image 20250701204857.png
- Pasted image 20250701205116.png
- Pasted image 20250701205704.png
- Pasted image 20250701205946.png
- Pasted image 20250701210254.png
- Pasted image 20250701211454.png
- Pasted image 20250701214446.png
- Pasted image 20250701223800.png
- Pasted image 20250701224203.png
- Pasted image 20250701224311.png
- Pasted image 20250701230754.png
- Pasted image 20250701230936.png
- Pasted image 20250701231005.png
- Pasted image 20250701231111.png
- Pasted image 20250702000429.png
- Pasted image 20250702005059.png
- Pasted image 20250702005659.png
- Pasted image 20250702010722.png
- Pasted image 20250702013548.png
- Pasted image 20250702013949.png
- Pasted image 20250702014106.png
- Pasted image 20250702014412.png
- Pasted image 20250702015246.png
- Pasted image 20250702103134.png
- Pasted image 20250702104007.png
- Pasted image 20250702104649.png
- Pasted image 20250702112137.png
- Pasted image 20250702112458.png
- Pasted image 20250702113606.png
- Pasted image 20250702113640.png
- Pasted image 20250702114738.png
- Pasted image 20250702114812.png
- Pasted image 20250702114955.png
- Pasted image 20250702120405.png
- Pasted image 20250702121943.png
- Pasted image 20250702122210.png
- Pasted image 20250702123628.png
- Pasted image 20250702124237.png
- Pasted image 20250702124249.png
- Pasted image 20250702124347.png
- Pasted image 20250702125016.png
- Pasted image 20250702125359.png
- Pasted image 20250702125637.png
- Pasted image 20250702125915.png
- Pasted image 20250702130021.png
- Pasted image 20250702130056.png
- Pasted image 20250702191130.png
- Pasted image 20250702192216.png
- Pasted image 20250702193203.png
- Pasted image 20250702193513.png
- Pasted image 20250702204252.png
- Pasted image 20250702204329.png
- Pasted image 20250702231735.png
- Pasted image 20250702231948.png
- Pasted image 20250702232128.png
- Pasted image 20250702233711.png
- Pasted image 20250702234534.png
- Pasted image 20250703005106.png
- Pasted image 20250703005309.png
- Pasted image 20250703012247.png
- Pasted image 20250703012316.png
- Pasted image 20250703012629.png
- Pasted image 20250703235533.png
- Pasted image 20250704000630.png
- Pasted image 20250704000808.png
- Pasted image 20250704000846.png
- Pasted image 20250704004241.png
- Pasted image 20250704004322.png
- Pasted image 20250704005656.png
- Pasted image 20250704014811.png
- Pasted image 20250704015205.png
- Pasted image 20250704015408.png
- Pasted image 20250704015601.png
- Pasted image 20250704015715.png
- Pasted image 20250704020128.png
- Pasted image 20250704020250.png
- Pasted image 20250705124714.png
- Pasted image 20250706235544.png
- Pasted image 20250706235628.png
- Pasted image 20250707030142.png
- Pasted image 20250707030239.png
- Pasted image 20250709205216.png
- Pasted image 20250709205238.png
- Pasted image 20250709214816.png
- Pasted image 20250712031812.png
- Pasted image 20250718090827.png
- Pasted image 20250718091236.png
- Pasted image 20250718091659.png
- Pasted image 20250718094123.png
- Pasted image 20250718104304.png
- Pasted image 20250718112523.png
- Pasted image 20250718112611.png
- Pasted image 20250718184551.png
- Pasted image 20250718194647.png
- Pasted image 20250719140056.png
- Pasted image 20250719140116.png
- Pasted image 20250719152025.png
- Pasted image 20250719152941.png
- Pasted image 20250719153112.png
- Pasted image 20250719153308.png
- Pasted image 20250719153344.png
- Pasted image 20250719163650.png
- Pasted image 20250719165618.png
- Pasted image 20250719170702.png
- Pasted image 20250719170939.png
- Pasted image 20250719171412.png
- Pasted image 20250719171445.png
- Pasted image 20250719172039.png
- Pasted image 20250719172709.png
- Pasted image 20250719172751.png
- Pasted image 20250720173051.png
- Pasted image 20250720180756.png
- Pasted image 20250723225403.png
- Pasted image 20250723225453.png
- Pasted image 20250723225754.png
- Pasted image 20250723231041.png
- Pasted image 20250723231119.png
- Pasted image 20250723231225.png
- Pasted image 20250723231612.png
- Pasted image 20250724005349.png
- Pasted image 20250724011413.png
- Pasted image 20250724013344.png
- Pasted image 20250725023318.png
- Pasted image 20250725031910.png
- Pasted image 20250725035632.png
- Pasted image 20250725040913.png
- Pasted image 20250728225004.png
- Pasted image 20250730003611.png
- Pasted image 20250807145602.png
- Pasted image 20250808033502.png
- Pasted image 20250808033908.png
- Pasted image 20250808034010.png
- Pasted image 20250808040629.png
- Pasted image 20250818164353.png
- Pasted image 20250818164441.png
- Pasted image 20250818165021.png
- Pasted image 20250818213830.png
- Pasted image 20250829155034.png
- Pasted image 20250829165021.png
- Pasted image 20250829165345.png
- Pasted image 20250829165428.png
- Pasted image 20250829165641.png
- Pasted image 20250830004858.png
- Pasted image 20250831144251.png
- Pasted image 20250831144735.png
- Pasted image 20250831144855.png
- Pasted image 20250831150726.png
- Pasted image 20250831152653.png
- Pasted image 20250831155012.png
- Pasted image 20250831155255.png
- Pasted image 20250831155520.png
- Pasted image 20250905132943.png
- Pasted image 20250905133947.png
- Pasted image 20250905140254.png
- Pasted image 20250905194556.png
- Pasted image 20250913221954.png
- Pasted image 20250913223141.png
- Pasted image 20250916225229.png
- Pasted image 20250916225310.png
- Pasted image 20250916225607.png
- Pasted image 20250916225746.png
- Pasted image 20250916230431.png
- Pasted image 20250916231001.png
- Pasted image 20250916231126.png
- Pasted image 20250917110244.png
- Pasted image 20250917110302.png
- Pasted image 20250917111225.png
- Pasted image 20250917111441.png
- Pasted image 20250917111737.png
- Pasted image 20250917112002.png
- Pasted image 20250917112210.png
- Pasted image 20250917112249.png
- Pasted image 20250922104030.png
- Pasted image 20250922112319.png
- Pasted image 20250922120913.png
- Pasted image 20250922120929.png
- Pasted image 20250922142906.png
- Pasted image 20250922143044.png
- Pasted image 20250922143103.png
- Pasted image 20250922143515.png
- Pasted image 20250922144029.png
- Pasted image 20250922144159.png
- Pasted image 20250922144648.png
- Pasted image 20250922145050.png
- Pasted image 20250922145609.png
- Pasted image 20250922145845.png
- Pasted image 20251006175518.png
- Pasted image 20251006175731.png
- Pasted image 20251006202338.png
- Pasted image 20251006202611.png
- Pasted image 20251006202809.png
- Pasted image 20251006203410.png
- Pasted image 20251008231102.png
- Pasted image 20251008231212.png
- Pasted image 20251008232136.png
- Pasted image 20251008233326.png
- Pasted image 20251008235206.png
- Pasted image 20251009000028.png
- Pasted image 20251009003224.png
- Pasted image 20251009111152.png
- Pasted image 20251009112357.png
- Pasted image 20251009113442.png
- Pasted image 20251009113629.png
- Pasted image 20251009113904.png
- Pasted image 20251009114220.png
- Pasted image 20251009120248.png
- Pasted image 20251009120604.png
- Pasted image 20251009122136.png
- Pasted image 20251009122327.png
- Pasted image 20251009122625.png
- Pasted image 20251009123001.png
- Pasted image 20251009225557.png
- Pasted image 20251009231609.png
- Pasted image 20251009235946.png
- Pasted image 20251010000133.png
- Pasted image 20251019103813.png
- Pasted image 20251019103906.png
- Pasted image 20251019111926.png
- Pasted image 20251019151718.png
- Pasted image 20251019155312.png
- Pasted image 20251019155603.png
- Pasted image 20251019155744.png
- Pasted image 20251019160552.png
- Pasted image 20251019182407.png
- Pasted image 20251214020558.png
- Pasted image 20251214164823.png
- Pasted image 20251222114131.png
- Pasted image 20251222115042.png
- Pasted image 20251222182008.png
- Pasted image 20251226145505.png
- Pasted image 20251228130058.png
- Pasted image 20260124003616.png
- Pasted image 20260124160528.png
- Pasted image 20260129013925.png
- Pasted image 20260129015703.png
- AMSI Bypass
- Abusing Other Windows Components (Misc)
- Access Tokens - Enumerating Windows
- AlwaysInstallElevated Privilege
- DLL Hijacking
- Enumerating Windows
- File Transfers & Shells
- Files with Sensitive Data
- Hashes in Windows
- Icacls & File Permissions -Enumerating Windows
- Leveraging Windows Services
- MIC & UAC
- Potato Exploits and PrintSpoofer
- PowerShell Commands
- Registry Hives & Critical Registry Paths
- SIDs & RIDs
- Scheduled Tasks
- Stored Credentials & Windows Vault
- Windows & AD Persistence
Left-click: follow link, Right-click: select node, Scroll: zoom
x