Ellie's cheatsheet & resource dump

## General Resources:

- [The Book of Secret Knowledge](https://github.com/trimstray/the-book-of-secret-knowledge)
- [VX Underground](https://www.vx-underground.org/)
- [Security List](https://github.com/ByteHackr/SecurityList)
- [HackerOne](https://www.hackerone.com/)
- [HackTricks](https://book.hacktricks.xyz/welcome/readme)
- [MITRE ATT&CK](https://attack.mitre.org/)
- [Ired Team](https://www.ired.team/)
- [Sec-Consult](https://sec-consult.com/)
- [PayloadsAllTheThings](https://github.com/swisskyrepo/PayloadsAllTheThings)
- [Awesome Pentest](https://github.com/sundaysec/awesome-pentest)
- [OWASP Cheat Sheets](https://cheatsheetseries.owasp.org/)
- [Enumeration Guide](https://github.com/beyondtheoryio/Enumeration-Guide)
- [Exploit Notes](https://exploit-notes.hdks.org/)
- [Kernel Exploits](https://github.com/lucyoa/kernel-exploits)
- [The Concise Blue Team Cheat Sheets](https://itblogr.com/wp-content/uploads/2020/04/The-Concise-Blue-Team-cheat-Sheets.pdf)
- [Bug Bounty Hunting](https://www.bugbountyhunting.com/)
- [The Hacker Recipes](https://www.thehacker.recipes/)
- [Pentester Academy](https://www.pentesteracademy.com/topics)
- [Infosec Institute Resources](https://resources.infosecinstitute.com/topics/)
- [Infosec Writeups](https://infosecwriteups.com/)
- [SecurityTube](http://www.securitytube.net/listing?type=popular)
- [CTF 101](https://ctf101.org/)
- [Crypto Cat CTF](https://github.com/Crypto-Cat/CTF)
- [Red Team Toolkit](https://github.com/HildeTeamTNT/Red-Teaming-Toolkit)

## Active Directory & Red Teaming:

- [AD Attack Defense](https://github.com/infosecn1nja/AD-Attack-Defense)
- [Active Directory Exploitation Cheat Sheet](https://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet/tree/master)
- [Red Team Handbook](https://kwcsec.gitbook.io/the-red-team-handbook/)
- [Red Team Infrastructure Wiki](https://github.com/bluscreenofjeff/Red-Team-Infrastructure-Wiki)
- [Red Team Cheat Sheet](https://github.com/0xJs/RedTeaming_CheatSheet)
- [Red Team Recipe](https://redteamrecipe.com/)
- [Red Team Guides](https://book.redteamguides.com/)
- [Attacking & Securing Active Directory](https://rmusser.net/docs/index.html#/./Active_Directory?id=active-directory)
- [Windows & Active Directory Exploitation Cheat Sheet](https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference/)
- [Sudoninja Book](https://sudoninja.gitbook.io/sudoninjabook/)
- [HTB Academy CPTS](https://nukercharlie.gitbook.io/htb-academy-cpts)
- [Internal All The Things](https://swisskyrepo.github.io/InternalAllTheThings/)
- [AD Attack & Defense](https://github.com/infosecn1nja/AD-Attack-Defense)

## Reverse Engineering:

- [Applied Reverse Engineering Series](https://revers.engineering/applied-reverse-engineering-series/)
- [Reversing](https://0xinfection.github.io/reversing/)

## Web Pentesting:

- [Total OSCP Guide](https://sushant747.gitbooks.io/total-oscp-guide/content/)
- [Web Pentesting Enumeration](https://csbygb.gitbook.io/pentips/web-pentesting/enumeration)
- [Master Web Penetration Testing](https://infosecwriteups.com/master-web-penetration-testing-essential-resources-to-get-started-today-47bf90c3137d)
- [Pentest Lab](https://pentestlab.blog/)

## Miscellaneous:

- [Dark Vortex Blog](https://0xdarkvortex.dev/blogs/)
- [Lolbas Project](https://lolbas-project.github.io/#)
- [Cobalt Blog](https://www.cobalt.io/blog)
- [Outflank Publications](https://www.outflank.nl/blog/)
- [Hacking Life](https://amandaguglieri.github.io/hackinglife/)
- [Apriorit Dev Blog](https://www.apriorit.com/dev-blog)
- [Crypt0ace](https://crypt0ace.github.io/)
- [Info-Sec Docs](https://docs.azumi.fr/)
- [Infinitelogins](https://infinitelogins.com/)
- [Hideandsec](https://hideandsec.sh/)
- [Zero Infection](https://0xd4y.com/)
- [Red Fox Security](https://redfoxsec.com/blog/category/red-team/)
- [Repos ZENK](https://repo.zenk-security.com/)
- [Burmat](https://burmat.gitbook.io/security/)
- [Pwn College](https://pwn.college/)
- [Security Reference Guide](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/grey-privacy-tor-opsec)
- [Reversing](https://0xinfection.github.io/reversing/)
- [The Pentesting Guide](https://the-pentesting-guide.marmeus.com/)
- [Infosec Reference](https://github.com/rmusser01/Infosec_Reference)
- [Guy in a Tuxedo](https://guyinatuxedo.github.io/index.html)
- [AD Exploitation Cheat Sheet](https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet)
- [Attacking AD](https://zer1t0.gitlab.io/posts/attacking_ad/)
- [WADCOMS](https://wadcoms.github.io/)
- [Windows Security](https://unprotect.it/map/)
- [Active Directory Exploitation](https://vladtoie.gitbook.io/secure-coding/client-side/xss)
- [Active Directory Exploitation](https://github.com/yeyintminthuhtut/Awesome-Red-Teaming)


### Tools and Repositories:
https://github.com/Cn33liz/p0wnedLoader

https://rastamouse.me/2018/05/csharp-dotnettojscript-xsl/

https://github.com/Arno0x/PowerShellScripts

https://github.com/cobbr/PSAmsi/wiki/Introduction-To-PSAmsi

https://github.com/secabstraction/WmiSploit

### More Resources:

https://bohops.com/2019/01/10/com-xsl-transformation-bypassing-microsoft-application-control-solutions-cve-2018-8492/

https://tyranidslair.blogspot.com/2018/06/disabling-amsi-in-jscript-with-one.html

https://oddvar.moe/

https://www.fortynorthsecurity.com/building-a-windows-defender-application-control-lab/

https://posts.specterops.io/threat-detection-using-windows-defender-application-control-device-guard-in-audit-mode-602b48cd1c11

https://www.mdsec.co.uk/2018/06/exploring-powershell-amsi-and-logging-evasion/

https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-exploit-guard/evaluate-windows-defender-exploit-guard

http://www.exploit-monday.com/2018/06/device-guard-and-application.html

https://lolbas-project.github.io/#

https://www.contextis.com/en/blog/amsi-bypass

### References:

- [SNEAKING PAST DEVICE GUARD - Cybereason - Philip Tsukerman](https://troopers.de/downloads/troopers19/TROOPERS19_AR_Sneaking_Past_Device_Guard.pdf)
- [PowerShell about_Logging_Windows - Microsoft Documentation](https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_logging_windows?view=powershell-7.3)
- [Do You Really Know About LSA Protection (RunAsPPL)? - itm4n - Apr 7, 2021](https://itm4n.github.io/lsass-runasppl/)
- [Determine the Enterprise Context of an app running in Windows Information Protection (WIP) - 03/10/2023 - Microsoft](https://learn.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/wip-app-enterprise-context)
- [Create and verify an Encrypting File System (EFS) Data Recovery Agent (DRA) certificate - 12/09/2022 - Microsoft](https://learn.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate)
- [DISABLING AV WITH PROCESS SUSPENSION - March 24, 2023 - By Christopher Paschen](https://www.trustedsec.com/blog/disabling-av-with-process-suspension/)
- [Disabling Event Tracing For Windows - UNPROTECT PROJECT - Tuesday 19 April 2022](https://unprotect.it/technique/disabling-event-tracing-for-windows-etw/)
- [ETW: Event Tracing for Windows 101 - ired.team](https://www.ired.team/miscellaneous-reversing-forensics/windows-kernel-internals/etw-event-tracing-for-windows-101)
- [Remove Windows Defender Application Control (WDAC) policies - Microsoft - 12/09/2022](https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/disable-windows-defender-application-control-policies)