Tech Note

Technical notes organized by subject and tool.

These notes organize findings from hands-on testing and source code research by how a technique works and when it is useful. Start with a technical area to understand a target environment, or with a tool to follow a command’s behavior.

These commands include credential extraction, relay, remote execution, persistence, and other features that can have a substantial impact on target systems. Use them only in a test environment or one for which you have explicit authorization.

Browse by technical area

Windows / Active Directory: Authentication, accounts, permissions, credentials, and local privilege escalation.
Linux: Exposed services, post-compromise enumeration, privilege boundaries, and logs.
NTHash and HMAC-MD5: Values and calculations involved in NTLM.

Browse by tool

Impacket commands and implementation: How each command works and the protocols implemented by shared libraries.
Metasploit notes: Workspaces and databases, resource scripts, sessions, handlers, and module development.

You can also browse articles spanning several areas in the tag explorer.