René's URL Explorer Experiment


Title: GitHub - birui/Pentest_Note: 渗透测试常规操作记录 · GitHub

Open Graph Title: GitHub - birui/Pentest_Note: 渗透测试常规操作记录

X Title: GitHub - birui/Pentest_Note: 渗透测试常规操作记录

Description: 渗透测试常规操作记录. Contribute to birui/Pentest_Note development by creating an account on GitHub.

Open Graph Description: 渗透测试常规操作记录. Contribute to birui/Pentest_Note development by creating an account on GitHub.

X Description: 渗透测试常规操作记录. Contribute to birui/Pentest_Note development by creating an account on GitHub.

Opengraph URL: https://github.com/birui/Pentest_Note

X: @github

direct link

Domain: github.com

route-pattern/:user_id/:repository
route-controllerfiles
route-actiondisambiguate
fetch-noncev2:7958a649-f5ee-3dc3-a3b4-b765f90a847b
current-catalog-service-hashf3abb0cc802f3d7b95fc8762b94bdcb13bf39634c40c357301c4aa1d67a256fb
request-id9C86:51308:245D63A:32DE26B:6A5F532F
html-safe-noncedfe902f8046b9910138c405ecdf460f4fa8eee969ec537e4f46c5198e9114911
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI5Qzg2OjUxMzA4OjI0NUQ2M0E6MzJERTI2Qjo2QTVGNTMyRiIsInZpc2l0b3JfaWQiOiIxMzQ4MTAwOTkwODczNTg4NTI3IiwicmVnaW9uX2VkZ2UiOiJpYWQiLCJyZWdpb25fcmVuZGVyIjoiaWFkIn0=
visitor-hmac2f49680fc59666db23101bdcb402f14975d0df9f1cec0e1fc8e87f2586534c0e
hovercard-subject-tagrepository:567139630
github-keyboard-shortcutsrepository,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location//
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/birui/Pentest_Note
twitter:imagehttps://opengraph.githubassets.com/34aa19c2d4281cecc660a3b71dd4d790245679d30460647cddd21ef1df86e3f4/birui/Pentest_Note
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/34aa19c2d4281cecc660a3b71dd4d790245679d30460647cddd21ef1df86e3f4/birui/Pentest_Note
og:image:alt渗透测试常规操作记录. Contribute to birui/Pentest_Note development by creating an account on GitHub.
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
None9a0797c11799dbfd7df57fa3de31c7ea3a4c4bd055eb1a0427a5cde1d4d7ba3f
turbo-cache-controlno-cache
go-importgithub.com/birui/Pentest_Note git https://github.com/birui/Pentest_Note.git
octolytics-dimension-user_id3335761
octolytics-dimension-user_loginbirui
octolytics-dimension-repository_id567139630
octolytics-dimension-repository_nwobirui/Pentest_Note
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forktrue
octolytics-dimension-repository_parent_id272328468
octolytics-dimension-repository_parent_nwoxiaoy-sec/Pentest_Note
octolytics-dimension-repository_network_root_id272328468
octolytics-dimension-repository_network_root_nwoxiaoy-sec/Pentest_Note
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
releaseb099d96da147aea31036cd16b2fba0083a6defe4
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/birui/Pentest_Note#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fbirui%2FPentest_Note
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
Code QualityEnforce quality at mergehttps://github.com/features/code-quality
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/open-source/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/open-source/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fbirui%2FPentest_Note
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E&source=header-repo&source_repo=birui%2FPentest_Note
Reloadhttps://github.com/birui/Pentest_Note
Reloadhttps://github.com/birui/Pentest_Note
Reloadhttps://github.com/birui/Pentest_Note
birui https://github.com/birui
Pentest_Notehttps://github.com/birui/Pentest_Note
xiaoy-sec/Pentest_Notehttps://github.com/xiaoy-sec/Pentest_Note
Notifications https://github.com/login?return_to=%2Fbirui%2FPentest_Note
Fork 0 https://github.com/login?return_to=%2Fbirui%2FPentest_Note
Star 1 https://github.com/login?return_to=%2Fbirui%2FPentest_Note
Code https://github.com/birui/Pentest_Note
Pull requests 0 https://github.com/birui/Pentest_Note/pulls
Actions https://github.com/birui/Pentest_Note/actions
Projects https://github.com/birui/Pentest_Note/projects
Security and quality 0 https://github.com/birui/Pentest_Note/security
Insights https://github.com/birui/Pentest_Note/pulse
Code https://github.com/birui/Pentest_Note
Pull requests https://github.com/birui/Pentest_Note/pulls
Actions https://github.com/birui/Pentest_Note/actions
Projects https://github.com/birui/Pentest_Note/projects
Security and quality https://github.com/birui/Pentest_Note/security
Insights https://github.com/birui/Pentest_Note/pulse
https://github.com/birui/Pentest_Note
Brancheshttps://github.com/birui/Pentest_Note/branches
Tagshttps://github.com/birui/Pentest_Note/tags
https://github.com/birui/Pentest_Note/branches
https://github.com/birui/Pentest_Note/tags
186 Commitshttps://github.com/birui/Pentest_Note/commits/master/
https://github.com/birui/Pentest_Note/commits/master/
imghttps://github.com/birui/Pentest_Note/tree/master/img
imghttps://github.com/birui/Pentest_Note/tree/master/img
redhttps://github.com/birui/Pentest_Note/tree/master/red
redhttps://github.com/birui/Pentest_Note/tree/master/red
wikihttps://github.com/birui/Pentest_Note/tree/master/wiki
wikihttps://github.com/birui/Pentest_Note/tree/master/wiki
README.mdhttps://github.com/birui/Pentest_Note/blob/master/README.md
README.mdhttps://github.com/birui/Pentest_Note/blob/master/README.md
READMEhttps://github.com/birui/Pentest_Note
https://www.heresecurity.wiki/https://www.heresecurity.wiki/
https://github.com/xiaoy-sec/Pentest_Note/blob/master/img/wechat.png
https://github.com/birui/Pentest_Note#pentest_note
https://github.com/birui/Pentest_Note#主目录
收集信息https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/README.md
初始访问https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/README.md
防御规避https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/README.md
权限提升https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/README.md
文件操作https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/README.md
内网和域https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/README.md
HASH操作https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/README.md
横向移动https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/README.md
权限维持https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/README.md
赏金技巧https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/README.md
云安全https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/README.md
Redteam红队https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/README.md
https://github.com/birui/Pentest_Note#详细目录
收集信息https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/README.md
域名信息https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/%E5%9F%9F%E5%90%8D%E4%BF%A1%E6%81%AF/README.md
CDN是否存在https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/%E5%9F%9F%E5%90%8D%E4%BF%A1%E6%81%AF/CDN%E6%98%AF%E5%90%A6%E5%AD%98%E5%9C%A8.md
Bypass CDNhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/%E5%9F%9F%E5%90%8D%E4%BF%A1%E6%81%AF/%E7%BB%95%E8%BF%87CDN.md
DNS历史记录https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/%E5%9F%9F%E5%90%8D%E4%BF%A1%E6%81%AF/DNS%E5%8E%86%E5%8F%B2%E8%AE%B0%E5%BD%95.md
SSL证书信息https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/%E5%9F%9F%E5%90%8D%E4%BF%A1%E6%81%AF/SSL%E8%AF%81%E4%B9%A6%E4%BF%A1%E6%81%AF.md
Whois信息https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/%E5%9F%9F%E5%90%8D%E4%BF%A1%E6%81%AF/Whois%E4%BF%A1%E6%81%AF.md
子域名检查https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/%E5%AD%90%E5%9F%9F%E5%90%8D%E6%A3%80%E6%9F%A5.md
IP和端口信息https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/IP%E5%92%8C%E7%AB%AF%E5%8F%A3%E4%BF%A1%E6%81%AF/README.md
ASNhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/IP%E5%92%8C%E7%AB%AF%E5%8F%A3%E4%BF%A1%E6%81%AF/ASN.md
历史IPhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/IP%E5%92%8C%E7%AB%AF%E5%8F%A3%E4%BF%A1%E6%81%AF/%E5%8E%86%E5%8F%B2IP.md
NMAP使用https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/IP%E5%92%8C%E7%AB%AF%E5%8F%A3%E4%BF%A1%E6%81%AF/NMAP%E4%BD%BF%E7%94%A8.md
工具https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/IP%E5%92%8C%E7%AB%AF%E5%8F%A3%E4%BF%A1%E6%81%AF/%E5%B7%A5%E5%85%B7.md
网站架构和指纹识别https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/%E7%BD%91%E7%AB%99%E6%9E%B6%E6%9E%84%E5%92%8C%E6%8C%87%E7%BA%B9%E8%AF%86%E5%88%AB.md
其他信息https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/%E5%85%B6%E4%BB%96%E4%BF%A1%E6%81%AF.md
人员信息https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/%E4%BA%BA%E5%91%98%E4%BF%A1%E6%81%AF.md
初始访问https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/README.md
Web服务突破https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/README.md
前端https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/%E5%89%8D%E7%AB%AF.md
SQL注入https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/SQL%E6%B3%A8%E5%85%A5/README.md
判断注入https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/SQL%E6%B3%A8%E5%85%A5/%E5%88%A4%E6%96%AD%E6%B3%A8%E5%85%A5.md
数据库类型识别https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/SQL%E6%B3%A8%E5%85%A5/%E6%95%B0%E6%8D%AE%E5%BA%93%E7%B1%BB%E5%9E%8B%E8%AF%86%E5%88%AB.md
MSSQLhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/SQL%E6%B3%A8%E5%85%A5/MSSQL.md
MYSQLhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/SQL%E6%B3%A8%E5%85%A5/MYSQL.md
Oraclehttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/SQL%E6%B3%A8%E5%85%A5/Oracle.md
PostgreSQLhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/SQL%E6%B3%A8%E5%85%A5/PostgreSQL.md
SQLitehttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/SQL%E6%B3%A8%E5%85%A5/SQLite.md
DB2https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/SQL%E6%B3%A8%E5%85%A5/DB2.md
SQLMAPhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/SQL%E6%B3%A8%E5%85%A5/SQLMAP.md
XSShttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/XSS.md
CSRFhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/CSRF.md
PHP包含下载读取https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/PHP%E5%8C%85%E5%90%AB%E4%B8%8B%E8%BD%BD%E8%AF%BB%E5%8F%96.md
XMLhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/XML.md
SSRFhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/SSRF.md
DNSLOGhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/DNSLOG.md
Xpath注入https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/Xpath%E6%B3%A8%E5%85%A5.md
SSTIhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/SSTI.md
命令注入https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/%E5%91%BD%E4%BB%A4%E6%B3%A8%E5%85%A5.md
PHPMyAdmin利用https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/PHPMyAdmin%E5%88%A9%E7%94%A8.md
PHP-FPM之RCEhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/PHP-FPM%E4%B9%8BRCE.md
PHPstudy后门https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/PHPstudy%E5%90%8E%E9%97%A8.md
IIS写权限https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/IIS%E5%86%99%E6%9D%83%E9%99%90.md
绕过WAFhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/%E7%BB%95%E8%BF%87WAF.md
数据库https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/%E6%95%B0%E6%8D%AE%E5%BA%93.md
命令执行https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C.md
CmdHijackhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/CmdHijack.md
Fuzz目录https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/Fuzz%E7%9B%AE%E5%BD%95.md
未授权访问https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/README.md
Redishttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/Redis.md
activemqhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/activemq.md
dockerhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/docker.md
elastichttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/elastic.md
hadoophttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/hadoop.md
jbosshttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/jboss.md
jenkinshttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/jenkins.md
memcachehttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/memcache.md
mongohttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/mongo.md
zookeeperhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/zookeeper.md
CouchDBhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/CouchDB.md
Jenkinshttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/Jenkins.md
Solrhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/Solr.md
VNChttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/VNC.md
Weblogichttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/Weblogic.md
Zabbixhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/Zabbix.md
一些Bypasshttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E4%B8%80%E4%BA%9BBypass/README.md
Linux绕过disable_functionhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E4%B8%80%E4%BA%9BBypass/Linux%E7%BB%95%E8%BF%87disable_function.md
Windows系统组件com绕过https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E4%B8%80%E4%BA%9BBypass/Windows%E7%B3%BB%E7%BB%9F%E7%BB%84%E4%BB%B6com%E7%BB%95%E8%BF%87.md
cgi启动方式https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E4%B8%80%E4%BA%9BBypass/cgi%E5%90%AF%E5%8A%A8%E6%96%B9%E5%BC%8F.md
蚁剑绕过https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E4%B8%80%E4%BA%9BBypass/%E8%9A%81%E5%89%91%E7%BB%95%E8%BF%87.md
ImageMagick组件绕过https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E4%B8%80%E4%BA%9BBypass/ImageMagick%E7%BB%84%E4%BB%B6%E7%BB%95%E8%BF%87.md
常规函数绕过https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E4%B8%80%E4%BA%9BBypass/%E5%B8%B8%E8%A7%84%E5%87%BD%E6%95%B0%E7%BB%95%E8%BF%87.md
Open_basedir绕过https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E4%B8%80%E4%BA%9BBypass/Open_basedir%E7%BB%95%E8%BF%87.md
TomcatAjp之LFI&RCEhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/TomcatAjp%E4%B9%8BLFI&RCE.md
MSSQL&Agent之Job上线https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/MSSQL&Agent%E4%B9%8BJob%E4%B8%8A%E7%BA%BF.md
MySQL开启外联https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/MySQL%E5%BC%80%E5%90%AF%E5%A4%96%E8%81%94.md
MySQL连接读取文件https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/MySQL%E8%BF%9E%E6%8E%A5%E8%AF%BB%E5%8F%96%E6%96%87%E4%BB%B6.md
MySQL不登陆执行命令https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/MySQL%E4%B8%8D%E7%99%BB%E9%99%86%E6%89%A7%E8%A1%8C%E5%91%BD%E4%BB%A4.md
近源攻击https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E8%BF%91%E6%BA%90%E6%94%BB%E5%87%BB/README.md
WI-FI破解https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E8%BF%91%E6%BA%90%E6%94%BB%E5%87%BB/WI-FI%E7%A0%B4%E8%A7%A3.md
钓鱼网络https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E8%BF%91%E6%BA%90%E6%94%BB%E5%87%BB/%E9%92%93%E9%B1%BC%E7%BD%91%E7%BB%9C.md
无线干扰https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E8%BF%91%E6%BA%90%E6%94%BB%E5%87%BB/%E6%97%A0%E7%BA%BF%E5%B9%B2%E6%89%B0.md
BadUSBhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E8%BF%91%E6%BA%90%E6%94%BB%E5%87%BB/BadUSB.md
蓝牙https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E8%BF%91%E6%BA%90%E6%94%BB%E5%87%BB/%E8%93%9D%E7%89%99.md
克隆卡https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E8%BF%91%E6%BA%90%E6%94%BB%E5%87%BB/%E5%85%8B%E9%9A%86%E5%8D%A1.md
鱼叉式攻击https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E9%B1%BC%E5%8F%89%E5%BC%8F%E6%94%BB%E5%87%BB/README.md
钓鱼邮件https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E9%B1%BC%E5%8F%89%E5%BC%8F%E6%94%BB%E5%87%BB/%E9%92%93%E9%B1%BC%E9%82%AE%E4%BB%B6.md
钓鱼连接https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E9%B1%BC%E5%8F%89%E5%BC%8F%E6%94%BB%E5%87%BB/%E9%92%93%E9%B1%BC%E8%BF%9E%E6%8E%A5.md
第三方鱼叉https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E9%B1%BC%E5%8F%89%E5%BC%8F%E6%94%BB%E5%87%BB/%E7%AC%AC%E4%B8%89%E6%96%B9%E9%B1%BC%E5%8F%89.md
防御规避https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/README.md
C#源码免杀https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/C#%E6%BA%90%E7%A0%81%E5%85%8D%E6%9D%80/README.md
直接编译https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/C#%E6%BA%90%E7%A0%81%E5%85%8D%E6%9D%80/%E7%9B%B4%E6%8E%A5%E7%BC%96%E8%AF%91.md
CSC+InstallUtilhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/C#%E6%BA%90%E7%A0%81%E5%85%8D%E6%9D%80/CSC+InstallUtil.md
加密处理https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/C#%E6%BA%90%E7%A0%81%E5%85%8D%E6%9D%80/%E5%8A%A0%E5%AF%86%E5%A4%84%E7%90%86.md
XOR和AES编码https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/C#%E6%BA%90%E7%A0%81%E5%85%8D%E6%9D%80/XOR%E5%92%8CAES%E7%BC%96%E7%A0%81.md
Python源码免杀https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Python%E6%BA%90%E7%A0%81%E5%85%8D%E6%9D%80/README.md
pyinstaller加载C代码编译https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Python%E6%BA%90%E7%A0%81%E5%85%8D%E6%9D%80/pyinstaller%E5%8A%A0%E8%BD%BDC%E4%BB%A3%E7%A0%81%E7%BC%96%E8%AF%91.md
加载器分离https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Python%E6%BA%90%E7%A0%81%E5%85%8D%E6%9D%80/%E5%8A%A0%E8%BD%BD%E5%99%A8%E5%88%86%E7%A6%BB.md
Base64编码+Pyinstaller打包https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Python%E6%BA%90%E7%A0%81%E5%85%8D%E6%9D%80/Base64%E7%BC%96%E7%A0%81+Pyinstaller%E6%89%93%E5%8C%85.md
pyinstaller加载py代码编译https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Python%E6%BA%90%E7%A0%81%E5%85%8D%E6%9D%80/pyinstaller%E5%8A%A0%E8%BD%BDpy%E4%BB%A3%E7%A0%81%E7%BC%96%E8%AF%91.md
Powershell免杀https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Powershell%E5%85%8D%E6%9D%80/README.md
行为检测https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Powershell%E5%85%8D%E6%9D%80/%E8%A1%8C%E4%B8%BA%E6%A3%80%E6%B5%8B.md
分块免杀https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Powershell%E5%85%8D%E6%9D%80/%E5%88%86%E5%9D%97%E5%85%8D%E6%9D%80.md
拆分+C编译https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Powershell%E5%85%8D%E6%9D%80/%E6%8B%86%E5%88%86+C%E7%BC%96%E8%AF%91.md
CobaltStrike+Powershell免杀https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Powershell%E5%85%8D%E6%9D%80/CobaltStrike+Powershell%E5%85%8D%E6%9D%80.md
Out-EncryptedScripthttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Powershell%E5%85%8D%E6%9D%80/Out-EncryptedScript.md
Invoke-Shellcodehttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Powershell%E5%85%8D%E6%9D%80/Invoke-Shellcode.md
Invoke-Obfuscationhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Powershell%E5%85%8D%E6%9D%80/obfuscation.md
直接生成https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Powershell%E5%85%8D%E6%9D%80/%E7%9B%B4%E6%8E%A5%E7%94%9F%E6%88%90.md
PyFuscationhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Powershell%E5%85%8D%E6%9D%80/PyFuscation.md
Xencrypthttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Powershell%E5%85%8D%E6%9D%80/Xencrypt.md
the-backdoor-factoryhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/the-backdoor-factory.md
捆绑器https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/%E6%8D%86%E7%BB%91%E5%99%A8.md
DLL劫持https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/DLL%E5%8A%AB%E6%8C%81.md
Evasion模块https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Evasion%E6%A8%A1%E5%9D%97.md
Golanghttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Golang.md
GreatSCThttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/GreatSCT.md
hanzoInjectionhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/hanzoInjection.md
InstallUtilhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/InstallUtil.md
加载器免杀https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/%E5%8A%A0%E8%BD%BD%E5%99%A8%E5%85%8D%E6%9D%80/README.md
shellcode_launcherhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/%E5%8A%A0%E8%BD%BD%E5%99%A8%E5%85%8D%E6%9D%80/shellcode_launcher.md
SSI加载https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/%E5%8A%A0%E8%BD%BD%E5%99%A8%E5%85%8D%E6%9D%80/SSI%E5%8A%A0%E8%BD%BD.md
MSBuilthttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/MSBuilt.md
MSF捆绑https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/MSF%E6%8D%86%E7%BB%91.md
MSF+shellcode免杀https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/MSF+shellcode%E5%85%8D%E6%9D%80/README.md
c和c++源码免杀https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/MSF+shellcode%E5%85%8D%E6%9D%80/c%E5%92%8Cc++%E6%BA%90%E7%A0%81%E5%85%8D%E6%9D%80.md
编码器https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/MSF+shellcode%E5%85%8D%E6%9D%80/%E7%BC%96%E7%A0%81%E5%99%A8.md
nps_payloadhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/MSF+shellcode%E5%85%8D%E6%9D%80/nps_payload.md
Mshtahttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Mshta.md
Phantom-Evasionhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Phantom-Evasion.md
RC4https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/RC4.md
Rubyhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Ruby.md
Shellterhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Shellter.md
Veilhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Veil.md
zirikatuhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/zirikatu.md
carboncopyhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/carboncopy.md
avethttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/avet.md
c代码加载图片马https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/c%E4%BB%A3%E7%A0%81%E5%8A%A0%E8%BD%BD%E5%9B%BE%E7%89%87%E9%A9%AC.md
权限提升https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/README.md
Windows提权https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/README.md
RDP&Firewallhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/RDP&Firewall/README.md
爆破RDPhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/RDP&Firewall/%E7%88%86%E7%A0%B4RDP.md
注册表开启https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/RDP&Firewall/%E6%B3%A8%E5%86%8C%E8%A1%A8%E5%BC%80%E5%90%AF.md
防火墙https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/RDP&Firewall/%E9%98%B2%E7%81%AB%E5%A2%99.md
注入点开启https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/RDP&Firewall/%E6%B3%A8%E5%85%A5%E7%82%B9%E5%BC%80%E5%90%AF.md
MSF开启https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/RDP&Firewall/MSF%E5%BC%80%E5%90%AF.md
wmic开启https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/RDP&Firewall/wmic%E5%BC%80%E5%90%AF.md
多用户登陆https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/RDP&Firewall/%E5%A4%9A%E7%94%A8%E6%88%B7%E7%99%BB%E9%99%86.md
RDP连接记录https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/RDP&Firewall/RDP%E8%BF%9E%E6%8E%A5%E8%AE%B0%E5%BD%95.md
删除痕迹https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/RDP&Firewall/%E5%88%A0%E9%99%A4%E7%97%95%E8%BF%B9.md
impactet工具包https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/impactet%E5%B7%A5%E5%85%B7%E5%8C%85.md
Windows-exploit-suggesterhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/Windows-exploit-suggester.md
Wesnghttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/Wesng.md
Searchsploithttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/Searchsploit.md
激活guesthttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E6%BF%80%E6%B4%BBguest.md
MYSQLudfhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/MYSQLudf.md
MSSQLhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/MSSQL.md
MSFhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/MSF.md
BypassUAChttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/BypassUAC.md
Whitelist白名单https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/Whitelist%E7%99%BD%E5%90%8D%E5%8D%95.md
Powerup-AlwaysInstallElevatedhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/Powerup-AlwaysInstallElevated.md
AlwaysInstallElevated提权https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/AlwaysInstallElevated%E6%8F%90%E6%9D%83.md
密码窃取https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E5%AF%86%E7%A0%81%E7%AA%83%E5%8F%96.md
RottenPotatohttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/RottenPotato.md
PowerUphttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/PowerUp.md
Runashttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/Runas.md
令牌窃取https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E4%BB%A4%E7%89%8C%E7%AA%83%E5%8F%96.md
未引用的服务路径https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E6%9C%AA%E5%BC%95%E7%94%A8%E7%9A%84%E6%9C%8D%E5%8A%A1%E8%B7%AF%E5%BE%84.md
Vulnerable-Serviceshttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/Vulnerable-Services.md
DNS组到DomainAdminhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/DNS%E7%BB%84%E5%88%B0DomainAdmin.md
HiveNightmarehttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/HiveNightmare.md
PrintNightmarehttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/PrintNightmare.md
SamAccountSpoofinghttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/SamAccountSpoofing.md
SeBackupPrivilegehttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/SeBackupPrivilege.md
SeImpersonatePrivilegehttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/SeImpersonatePrivilege.md
SpoolFoolhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/SpoolFool.md
弱注册表权限https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E5%BC%B1%E6%B3%A8%E5%86%8C%E8%A1%A8%E6%9D%83%E9%99%90.md
CVE-2020-1472https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/CVE-2020-1472.md
AppLockerhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/AppLocker.md
DLL劫持https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/DLL%E5%8A%AB%E6%8C%81.md
EFSPotatohttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/EFSPotato.md
JuicyPotatohttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/JuicyPotato.md
RoguePotatohttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/RoguePotato.md
watsonhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/watson.md
WSL子系统https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/WSL%E5%AD%90%E7%B3%BB%E7%BB%9F.md
本机文件和脚本https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E6%9C%AC%E6%9C%BA%E6%96%87%E4%BB%B6%E5%92%8C%E8%84%9A%E6%9C%AC.md
不安全的GUI应用程序https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E4%B8%8D%E5%AE%89%E5%85%A8%E7%9A%84GUI%E5%BA%94%E7%94%A8%E7%A8%8B%E5%BA%8F.md
从administrator到systemhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E4%BB%8Eadministrator%E5%88%B0system.md
打印机漏洞https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E6%89%93%E5%8D%B0%E6%9C%BA%E6%BC%8F%E6%B4%9E.md
服务中的不正确权限https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E6%9C%8D%E5%8A%A1%E4%B8%AD%E7%9A%84%E4%B8%8D%E6%AD%A3%E7%A1%AE%E6%9D%83%E9%99%90.md
环境变量优先https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E7%8E%AF%E5%A2%83%E5%8F%98%E9%87%8F%E4%BC%98%E5%85%88.md
恢复服务帐户的权限https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E6%81%A2%E5%A4%8D%E6%9C%8D%E5%8A%A1%E5%B8%90%E6%88%B7%E7%9A%84%E6%9D%83%E9%99%90.md
弱权限的PATH目录https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E5%BC%B1%E6%9D%83%E9%99%90%E7%9A%84PATH%E7%9B%AE%E5%BD%95.md
特权文件写入https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E7%89%B9%E6%9D%83%E6%96%87%E4%BB%B6%E5%86%99%E5%85%A5.md
未引用的服务路径https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E6%9C%AA%E5%BC%95%E7%94%A8%E7%9A%84%E6%9C%8D%E5%8A%A1%E8%B7%AF%E5%BE%84.md
Linux提权https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/README.md
查找辅助信息https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/%E6%9F%A5%E6%89%BE%E8%BE%85%E5%8A%A9%E4%BF%A1%E6%81%AF.md
查找可能泄露的密码https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/%E6%9F%A5%E6%89%BE%E5%8F%AF%E8%83%BD%E6%B3%84%E9%9C%B2%E7%9A%84%E5%AF%86%E7%A0%81.md
Linux-Exploit-Suggesterhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/Linux-Exploit-Suggester.md
一些检测工具https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/%E4%B8%80%E4%BA%9B%E6%A3%80%E6%B5%8B%E5%B7%A5%E5%85%B7.md
Linux计划任务https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/Linux%E8%AE%A1%E5%88%92%E4%BB%BB%E5%8A%A1.md
可写文件提权https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/%E5%8F%AF%E5%86%99%E6%96%87%E4%BB%B6%E6%8F%90%E6%9D%83.md
Sudo提权https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/Sudo%E6%8F%90%E6%9D%83.md
Linux SUID提权https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/LinuxSUID%E6%8F%90%E6%9D%83.md
漏洞提权https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/%E6%BC%8F%E6%B4%9E%E6%8F%90%E6%9D%83.md
MYSQL-Linux-Roothttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/MYSQL-Linux-Root.md
LD_Preload提权https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/LD_Preload.md
Lxd提权https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/Lxd%E6%8F%90%E6%9D%83.md
MYSQL漏洞https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/MYSQL%E6%BC%8F%E6%B4%9E.md
环境变量提权https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/%E7%8E%AF%E5%A2%83%E5%8F%98%E9%87%8F%E6%8F%90%E6%9D%83.md
通配符提权https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/%E9%80%9A%E9%85%8D%E7%AC%A6%E6%8F%90%E6%9D%83.md
文件操作https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/README.md
创建https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E5%88%9B%E5%BB%BA.md
Windows查找文件https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/Windows%E6%9F%A5%E6%89%BE%E6%96%87%E4%BB%B6.md
Linux查找文件https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/Linux%E6%9F%A5%E6%89%BE%E6%96%87%E4%BB%B6.md
解压https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E8%A7%A3%E5%8E%8B.md
压缩https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E5%8E%8B%E7%BC%A9.md
查找可写目录https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E6%9F%A5%E6%89%BE%E5%8F%AF%E5%86%99%E7%9B%AE%E5%BD%95.md
传输https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E4%BC%A0%E8%BE%93/README.md
Bitsadminhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E4%BC%A0%E8%BE%93/bitsadmin.md
Certutilhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E4%BC%A0%E8%BE%93/certutil.md
Curlhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E4%BC%A0%E8%BE%93/curl.md
Ftphttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E4%BC%A0%E8%BE%93/ftp.md
JShttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E4%BC%A0%E8%BE%93/js.md
nchttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E4%BC%A0%E8%BE%93/nc.md
perlhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E4%BC%A0%E8%BE%93/perl.md
phphttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E4%BC%A0%E8%BE%93/php.md
powershellhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E4%BC%A0%E8%BE%93/powershell.md
pyhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E4%BC%A0%E8%BE%93/py.md
SCPhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E4%BC%A0%E8%BE%93/scp.md
vbshttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E4%BC%A0%E8%BE%93/vbs.md
wgethttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E4%BC%A0%E8%BE%93/wget.md
内网和域https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/README.md
信息搜集https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E4%BF%A1%E6%81%AF%E6%90%9C%E9%9B%86/README.md
Windows安全标识符SIDhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E4%BF%A1%E6%81%AF%E6%90%9C%E9%9B%86/Windows%E5%AE%89%E5%85%A8%E6%A0%87%E8%AF%86%E7%AC%A6SID.md
Powershell基础操作https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E4%BF%A1%E6%81%AF%E6%90%9C%E9%9B%86/Powershell%E5%9F%BA%E7%A1%80%E6%93%8D%E4%BD%9C.md
Cmdhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E4%BF%A1%E6%81%AF%E6%90%9C%E9%9B%86/Cmd.md
Linuxhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E4%BF%A1%E6%81%AF%E6%90%9C%E9%9B%86/Linux.md
Powerviewhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E4%BF%A1%E6%81%AF%E6%90%9C%E9%9B%86/Powerview.md
BloodHoundADhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E4%BF%A1%E6%81%AF%E6%90%9C%E9%9B%86/BloodHoundAD.md
ADDomainhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E4%BF%A1%E6%81%AF%E6%90%9C%E9%9B%86/ADDomain.md
临时HTTP服务架设https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E4%BF%A1%E6%81%AF%E6%90%9C%E9%9B%86/%E4%B8%B4%E6%97%B6HTTP%E6%9C%8D%E5%8A%A1%E6%9E%B6%E8%AE%BE.md
Wmihttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E4%BF%A1%E6%81%AF%E6%90%9C%E9%9B%86/Wmi.md
端口映射和转发https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E7%AB%AF%E5%8F%A3%E6%98%A0%E5%B0%84%E5%92%8C%E8%BD%AC%E5%8F%91/README.md
chiselhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E7%AB%AF%E5%8F%A3%E6%98%A0%E5%B0%84%E5%92%8C%E8%BD%AC%E5%8F%91/chisel.md
iptableshttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E7%AB%AF%E5%8F%A3%E6%98%A0%E5%B0%84%E5%92%8C%E8%BD%AC%E5%8F%91/iptables.md
lcxhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E7%AB%AF%E5%8F%A3%E6%98%A0%E5%B0%84%E5%92%8C%E8%BD%AC%E5%8F%91/lcx.md
msfhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E7%AB%AF%E5%8F%A3%E6%98%A0%E5%B0%84%E5%92%8C%E8%BD%AC%E5%8F%91/msf.md
netshhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E7%AB%AF%E5%8F%A3%E6%98%A0%E5%B0%84%E5%92%8C%E8%BD%AC%E5%8F%91/netsh.md
ssfhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E7%AB%AF%E5%8F%A3%E6%98%A0%E5%B0%84%E5%92%8C%E8%BD%AC%E5%8F%91/ssf.md
sshhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E7%AB%AF%E5%8F%A3%E6%98%A0%E5%B0%84%E5%92%8C%E8%BD%AC%E5%8F%91/ssh.md
SharpChiselhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E7%AB%AF%E5%8F%A3%E6%98%A0%E5%B0%84%E5%92%8C%E8%BD%AC%E5%8F%91/SharpChisel.md
Ligolohttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E7%AB%AF%E5%8F%A3%E6%98%A0%E5%B0%84%E5%92%8C%E8%BD%AC%E5%8F%91/Ligolo.md
命令与控制https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/README.md
Metasploithttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Metasploit/README.md
常规使用https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Metasploit/%E5%B8%B8%E8%A7%84%E4%BD%BF%E7%94%A8.md
细节使用https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Metasploit/%E7%BB%86%E8%8A%82%E4%BD%BF%E7%94%A8.md
模块https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Metasploit/%E6%A8%A1%E5%9D%97.md
meterpreterhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Metasploit/meterpreter.md
与cs和empire交互https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Metasploit/%E4%B8%8Ecs%E5%92%8Cempire%E4%BA%A4%E4%BA%92.md
CobaltStrikehttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/README.md
安装https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E5%AE%89%E8%A3%85.md
部署https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E9%83%A8%E7%BD%B2.md
模块https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E6%A8%A1%E5%9D%97.md
连接https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E8%BF%9E%E6%8E%A5.md
监听https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E7%9B%91%E5%90%AC.md
攻击模块https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E6%94%BB%E5%87%BB%E6%A8%A1%E5%9D%97.md
视图模块https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E8%A7%86%E5%9B%BE%E6%A8%A1%E5%9D%97.md
交互https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E4%BA%A4%E4%BA%92.md
Beaconhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/Beacon.md
克隆https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E5%85%8B%E9%9A%86.md
office宏https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/office%E5%AE%8F.md
钓鱼邮件https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E9%92%93%E9%B1%BC%E9%82%AE%E4%BB%B6.md
加载脚本https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E5%8A%A0%E8%BD%BD%E8%84%9A%E6%9C%AC.md
浏览器劫持https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E6%B5%8F%E8%A7%88%E5%99%A8%E5%8A%AB%E6%8C%81.md
权限维持https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81.md
横向移动https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8.md
隔离网络https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E9%9A%94%E7%A6%BB%E7%BD%91%E7%BB%9C.md
代理https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E4%BB%A3%E7%90%86.md
Malleable C2https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4&%E6%8E%A7%E5%88%B6/CobaltStrike/Malleable-C2.md
部署VPNhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E9%83%A8%E7%BD%B2VPN.md
与msf和empire交互https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E4%B8%8Emsf%E5%92%8Cempire%E4%BA%A4%E4%BA%92.md
上线提醒https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E4%B8%8A%E7%BA%BF%E6%8F%90%E9%86%92.md
Empirehttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Empire/README.md
安装https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Empire/%E5%AE%89%E8%A3%85.md
监听https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Empire/%E7%9B%91%E5%90%AC.md
生成https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Empire/%E7%94%9F%E6%88%90.md
后门https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Empire/%E5%90%8E%E9%97%A8.md
连接靶机及其他操作https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Empire/%E8%BF%9E%E6%8E%A5%E9%9D%B6%E6%9C%BA%E5%8F%8A%E5%85%B6%E4%BB%96%E6%93%8D%E4%BD%9C.md
权限提升https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Empire/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87.md
横向移动https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Empire/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8.md
模块https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Empire/%E6%A8%A1%E5%9D%97.md
与cs和msf交互https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Empire/%E4%B8%8Ecs%E5%92%8Cmsf%E4%BA%A4%E4%BA%92.md
Empire_Wordhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Empire/Empire_Word.md
交互式shellhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/%E4%BA%A4%E4%BA%92%E5%BC%8Fshell.md
crackmaphttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/crackmap.md
CobaltStrikehttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike.md
dnscathttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/dnscat.md
DNS-TXT-Commandhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/DNS-TXT-Command.md
Empirehttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Empire.md
Jsrathttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Jsrat.md
koadichttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/koadic.md
MSFhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/MSF.md
Opensslhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Openssl.md
Powershellhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Powershell.md
反弹shellhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/%E5%8F%8D%E5%BC%B9shell.md
SILENTTRINITYhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/SILENTTRINITY.md
telegramhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/telegram.md
browserhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/browser.md
Gmailhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Gmail.md
Dropboxhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Dropbox.md
工具https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/%E5%B7%A5%E5%85%B7.md
下载并执行https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/%E4%B8%8B%E8%BD%BD%E5%B9%B6%E6%89%A7%E8%A1%8C.md
HASH操作https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/README.md
密码破解网站https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E5%AF%86%E7%A0%81%E7%A0%B4%E8%A7%A3%E7%BD%91%E7%AB%99.md
GoogleColab破解HASH操作https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/GoogleColab%E7%A0%B4%E8%A7%A3HASH%E6%93%8D%E4%BD%9C.md
密码策略https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E5%AF%86%E7%A0%81%E7%AD%96%E7%95%A5.md
开启Wdigesthttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E5%BC%80%E5%90%AFWdigest.md
Getpasshttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/Getpass.md
QuarksPwDumphttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/QuarksPwDump.md
MSFhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/MSF.md
mimikatzhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/README.md
绕过卡巴斯基https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/%E7%BB%95%E8%BF%87%E5%8D%A1%E5%B7%B4%E6%96%AF%E5%9F%BA.md
Cisco_Jabber转储lsasshttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/Cisco_Jabber%E8%BD%AC%E5%82%A8lsass.md
dotnet2.0https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/dotnet2.0.md
dotnet4.0Msbuildhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/dotnet4.0Msbuild.md
Dumperthttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/Dumpert.md
JScripthttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/JScript.md
mimikatzhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/mimikatz.md
mimipenguinhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/mimipenguin.md
横向批量抓HASH操作https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/%E6%A8%AA%E5%90%91%E6%89%B9%E9%87%8F%E6%8A%93HASH%E6%93%8D%E4%BD%9C.md
远程LSASS进程转储-Physmem2profithttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/%E8%BF%9C%E7%A8%8BLSASS%E8%BF%9B%E7%A8%8B%E8%BD%AC%E5%82%A8-Physmem2profit.md
Powershell_Bypasshttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/Powershell_Bypass.md
Procdump64+mimikatzhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/Procdump64+mimikatz.md
调用mimikatz远程抓取https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/%E8%B0%83%E7%94%A8mimikatz%E8%BF%9C%E7%A8%8B%E6%8A%93%E5%8F%96.md
SqlDumper+mimikatzhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/sqldumpermimikatz.md
域HASH提取https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E5%9F%9FHASH%E6%8F%90%E5%8F%96/README.md
impacket工具包https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E5%9F%9FHASH%E6%8F%90%E5%8F%96/impacket%E5%B7%A5%E5%85%B7%E5%8C%85.md
mimikatzhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E5%9F%9FHASH%E6%8F%90%E5%8F%96/mimikatz.md
MSFhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E5%9F%9FHASH%E6%8F%90%E5%8F%96/MSF.md
Nishang脚本https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E5%9F%9FHASH%E6%8F%90%E5%8F%96/Nishang%E8%84%9A%E6%9C%AC.md
NTDSDumpexhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E5%9F%9FHASH%E6%8F%90%E5%8F%96/NTDSDumpex.md
Ntdsutilhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E5%9F%9FHASH%E6%8F%90%E5%8F%96/Ntdsutil.md
Powersploithttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E5%9F%9FHASH%E6%8F%90%E5%8F%96/Powersploit.md
Vssadminhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E5%9F%9FHASH%E6%8F%90%E5%8F%96/Vssadmin.md
Wmivssadminhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E5%9F%9FHASH%E6%8F%90%E5%8F%96/Wmivssadmin.md
esentutlhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E5%9F%9FHASH%E6%8F%90%E5%8F%96/esentutl.md
缓存HASH获取https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E7%BC%93%E5%AD%98HASH%E8%8E%B7%E5%8F%96/README.md
Ninjacopyhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E7%BC%93%E5%AD%98HASH%E8%8E%B7%E5%8F%96/Ninjacopy.md
Quarks-pwdumphttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E7%BC%93%E5%AD%98HASH%E8%8E%B7%E5%8F%96/Quarks-pwdump.md
注册表https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E7%BC%93%E5%AD%98HASH%E8%8E%B7%E5%8F%96/%E6%B3%A8%E5%86%8C%E8%A1%A8.md
Empirehttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/Empire.md
Invoke-Dcsynchttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/Invoke-Dcsync.md
laZagnehttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/laZagne.md
获取其他密码https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E8%8E%B7%E5%8F%96%E5%85%B6%E4%BB%96%E5%AF%86%E7%A0%81/README.md
chromehttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E8%8E%B7%E5%8F%96%E5%85%B6%E4%BB%96%E5%AF%86%E7%A0%81/chrome.md
firefoxhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E8%8E%B7%E5%8F%96%E5%85%B6%E4%BB%96%E5%AF%86%E7%A0%81/firefox.md
foxmailhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E8%8E%B7%E5%8F%96%E5%85%B6%E4%BB%96%E5%AF%86%E7%A0%81/foxmail.md
navicathttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E8%8E%B7%E5%8F%96%E5%85%B6%E4%BB%96%E5%AF%86%E7%A0%81/navicat.md
seatbelthttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E8%8E%B7%E5%8F%96%E5%85%B6%E4%BB%96%E5%AF%86%E7%A0%81/seatbelt.md
securecrthttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E8%8E%B7%E5%8F%96%E5%85%B6%E4%BB%96%E5%AF%86%E7%A0%81/securecrt.md
vncpasshttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E8%8E%B7%E5%8F%96%E5%85%B6%E4%BB%96%E5%AF%86%E7%A0%81/vncpass.md
破解工具https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E7%A0%B4%E8%A7%A3%E5%B7%A5%E5%85%B7/README.md
hydrahttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E7%A0%B4%E8%A7%A3%E5%B7%A5%E5%85%B7/hydra.md
medusahttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E7%A0%B4%E8%A7%A3%E5%B7%A5%E5%85%B7/medusa.md
横向移动https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/README.md
添加域管命令https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%B7%BB%E5%8A%A0%E5%9F%9F%E7%AE%A1%E5%91%BD%E4%BB%A4.md
探测存活主机https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E5%AD%98%E6%B4%BB%E4%B8%BB%E6%9C%BA/README.md
For+Ping命令查询存活主机https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E5%AD%98%E6%B4%BB%E4%B8%BB%E6%9C%BA/For+Ping%E5%91%BD%E4%BB%A4%E6%9F%A5%E8%AF%A2%E5%AD%98%E6%B4%BB%E4%B8%BB%E6%9C%BA.md
MSFhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E5%AD%98%E6%B4%BB%E4%B8%BB%E6%9C%BA/MSF.md
NbtScanhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E5%AD%98%E6%B4%BB%E4%B8%BB%E6%9C%BA/NbtScan.md
NetDiscoverhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E5%AD%98%E6%B4%BB%E4%B8%BB%E6%9C%BA/NetDiscover.md
NMAPhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E5%AD%98%E6%B4%BB%E4%B8%BB%E6%9C%BA/NMAP.md
rp-scanhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E5%AD%98%E6%B4%BB%E4%B8%BB%E6%9C%BA/rp-scan.md
代理nmap扫描https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E5%AD%98%E6%B4%BB%E4%B8%BB%E6%9C%BA/%E4%BB%A3%E7%90%86nmap%E6%89%AB%E6%8F%8F.md
内外网资产对应https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E5%AD%98%E6%B4%BB%E4%B8%BB%E6%9C%BA/%E5%86%85%E5%A4%96%E7%BD%91%E8%B5%84%E4%BA%A7%E5%AF%B9%E5%BA%94.md
探测服务&端口https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E6%9C%8D%E5%8A%A1&%E7%AB%AF%E5%8F%A3/README.md
CobaltStrike+K8Aggressorhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E6%9C%8D%E5%8A%A1&%E7%AB%AF%E5%8F%A3/CobaltStrike+K8Aggressor.md
Linux_Samba服务https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E6%9C%8D%E5%8A%A1&%E7%AB%AF%E5%8F%A3/Linux_Samba%E6%9C%8D%E5%8A%A1.md
Masscanhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E6%9C%8D%E5%8A%A1&%E7%AB%AF%E5%8F%A3/Masscan.md
MSFhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E6%9C%8D%E5%8A%A1&%E7%AB%AF%E5%8F%A3/MSF.md
Nchttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E6%9C%8D%E5%8A%A1&%E7%AB%AF%E5%8F%A3/Nc.md
常见端口https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E6%9C%8D%E5%8A%A1&%E7%AB%AF%E5%8F%A3/%E5%B8%B8%E8%A7%81%E7%AB%AF%E5%8F%A3.md
Powershellhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E6%9C%8D%E5%8A%A1&%E7%AB%AF%E5%8F%A3/Powershell.md
PTScanhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E6%9C%8D%E5%8A%A1&%E7%AB%AF%E5%8F%A3/PTScan.md
SMBhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E6%9C%8D%E5%8A%A1&%E7%AB%AF%E5%8F%A3/SMB.md
执行命令&IPC&计划任务https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%89%A7%E8%A1%8C%E5%91%BD%E4%BB%A4&IPC&%E8%AE%A1%E5%88%92%E4%BB%BB%E5%8A%A1/README.md
AThttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%89%A7%E8%A1%8C%E5%91%BD%E4%BB%A4&IPC&%E8%AE%A1%E5%88%92%E4%BB%BB%E5%8A%A1/AT.md
IPChttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%89%A7%E8%A1%8C%E5%91%BD%E4%BB%A4&IPC&%E8%AE%A1%E5%88%92%E4%BB%BB%E5%8A%A1/IPC.md
Schtaskshttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%89%A7%E8%A1%8C%E5%91%BD%E4%BB%A4&IPC&%E8%AE%A1%E5%88%92%E4%BB%BB%E5%8A%A1/Schtasks.md
Wmichttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%89%A7%E8%A1%8C%E5%91%BD%E4%BB%A4&IPC&%E8%AE%A1%E5%88%92%E4%BB%BB%E5%8A%A1/Wmic.md
共享https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E5%85%B1%E4%BA%AB.md
快速定位域管理登过的机器https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E5%BF%AB%E9%80%9F%E5%AE%9A%E4%BD%8D%E5%9F%9F%E7%AE%A1%E7%90%86%E7%99%BB%E8%BF%87%E7%9A%84%E6%9C%BA%E5%99%A8.md
MSF管道监听https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/MSF%E7%AE%A1%E9%81%93%E7%9B%91%E5%90%AC.md
MSF添加路由https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/MSF%E6%B7%BB%E5%8A%A0%E8%B7%AF%E7%94%B1.md
代理https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E4%BB%A3%E7%90%86/README.md
chiselhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E4%BB%A3%E7%90%86/chisel.md
earthwormhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E4%BB%A3%E7%90%86/earthworm.md
frphttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E4%BB%A3%E7%90%86/frp.md
goproxyhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E4%BB%A3%E7%90%86/goproxy.md
shadowsockshttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E4%BB%A3%E7%90%86/shadowsocks.md
sock4ahttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E4%BB%A3%E7%90%86/sock4a.md
socks5https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E4%BB%A3%E7%90%86/socks5.md
socks5webhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E4%BB%A3%E7%90%86/socks5web.md
SSFhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E4%BB%A3%E7%90%86/ssf.md
SSHhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E4%BB%A3%E7%90%86/ssh.md
Gosthttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E4%BB%A3%E7%90%86/Gost.md
revsockshttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E4%BB%A3%E7%90%86/revsocks.md
代理软件https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E4%BB%A3%E7%90%86/%E4%BB%A3%E7%90%86%E8%BD%AF%E4%BB%B6.md
Ngrok内网穿透https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/Ngrok%E5%86%85%E7%BD%91%E7%A9%BF%E9%80%8F.md
MS08_067https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/MS08_067.md
MS17_010https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/MS17_010.md
方程式内网不产生sessionhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%96%B9%E7%A8%8B%E5%BC%8F%E5%86%85%E7%BD%91%E4%B8%8D%E4%BA%A7%E7%94%9Fsession.md
域内爆破https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E5%9F%9F%E5%86%85%E7%88%86%E7%A0%B4.md
隔离主机payloadhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E9%9A%94%E7%A6%BB%E4%B8%BB%E6%9C%BApayload.md
PASS-THE-HASHhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/PASS-THE-HASH.md
PASS-THE-TICKEThttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/PASS-THE-TICKET.md
PASS-THE-KEYhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/PASS-THE-KEY.md
ASEPRoastinghttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ASEPRoasting.md
攻击MSSQL数据库https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%94%BB%E5%87%BBMSSQL%E6%95%B0%E6%8D%AE%E5%BA%93.md
攻击MySQL数据库https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%94%BB%E5%87%BBMySQL%E6%95%B0%E6%8D%AE%E5%BA%93.md
账户委派https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E8%B4%A6%E6%88%B7%E5%A7%94%E6%B4%BE.md
kerberos约束委派https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/kerberos%E7%BA%A6%E6%9D%9F%E5%A7%94%E6%B4%BE.md
kerberos无约束委派https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/kerberos%E6%97%A0%E7%BA%A6%E6%9D%9F%E5%A7%94%E6%B4%BE.md
kerberos青铜比特攻击CVE-2020-17049https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/kerberos%E9%9D%92%E9%93%9C%E6%AF%94%E7%89%B9%E6%94%BB%E5%87%BBCVE-2020-17049.md
基于kerberos资源的约束委派https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E5%9F%BA%E4%BA%8Ekerberos%E8%B5%84%E6%BA%90%E7%9A%84%E7%BA%A6%E6%9D%9F%E5%A7%94%E6%B4%BE.md
CVE-2019-0708https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/CVE-2019-0708.md
获取保存的RDP密码https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E8%8E%B7%E5%8F%96%E4%BF%9D%E5%AD%98%E7%9A%84RDP%E5%AF%86%E7%A0%81.md
GPP-Passwordhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/GPP-Password.md
Kerberoastinghttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/Kerberoasting/README.md
申请票据https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/Kerberoasting/%E7%94%B3%E8%AF%B7%E7%A5%A8%E6%8D%AE.md
破解密码https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/Kerberoasting/%E7%A0%B4%E8%A7%A3%E5%AF%86%E7%A0%81.md
导出票据https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/Kerberoasting/%E5%AF%BC%E5%87%BA%E7%A5%A8%E6%8D%AE.md
SPN发现https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/Kerberoasting/SPN%E5%8F%91%E7%8E%B0.md
GetUserSPNshttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/Kerberoasting/GetUserSPNs.md
重写票据https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/Kerberoasting/%E9%87%8D%E5%86%99%E7%A5%A8%E6%8D%AE.md
NTLM中继和中间人攻击https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/NTLM%E4%B8%AD%E7%BB%A7%E5%92%8C%E4%B8%AD%E9%97%B4%E4%BA%BA%E6%94%BB%E5%87%BB/README.md
Ntlmrelayx+资源受限委派https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/NTLM%E4%B8%AD%E7%BB%A7%E5%92%8C%E4%B8%AD%E9%97%B4%E4%BA%BA%E6%94%BB%E5%87%BB/Ntlmrelayx+%E8%B5%84%E6%BA%90%E5%8F%97%E9%99%90%E5%A7%94%E6%B4%BE.md
Responder+LLMNR毒害https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/NTLM%E4%B8%AD%E7%BB%A7%E5%92%8C%E4%B8%AD%E9%97%B4%E4%BA%BA%E6%94%BB%E5%87%BB/Responder+LLMNR%E6%AF%92%E5%AE%B3.md
捕获和破解Net-NTLMv1和NTLMv1哈希https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/NTLM%E4%B8%AD%E7%BB%A7%E5%92%8C%E4%B8%AD%E9%97%B4%E4%BA%BA%E6%94%BB%E5%87%BB/%E6%8D%95%E8%8E%B7%E5%92%8C%E7%A0%B4%E8%A7%A3Net-NTLMv1%E5%92%8CNTLMv1%E5%93%88%E5%B8%8C.md
CVE-2019-1040https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/NTLM%E4%B8%AD%E7%BB%A7%E5%92%8C%E4%B8%AD%E9%97%B4%E4%BA%BA%E6%94%BB%E5%87%BB/CVE-2019-1040.md
CVE-2019-1384https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/NTLM%E4%B8%AD%E7%BB%A7%E5%92%8C%E4%B8%AD%E9%97%B4%E4%BA%BA%E6%94%BB%E5%87%BB/CVE-2019-1384.md
DNS-Poisonninghttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/NTLM%E4%B8%AD%E7%BB%A7%E5%92%8C%E4%B8%AD%E9%97%B4%E4%BA%BA%E6%94%BB%E5%87%BB/DNS-Poisonning.md
MS08-068-NTLM反射https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/NTLM%E4%B8%AD%E7%BB%A7%E5%92%8C%E4%B8%AD%E9%97%B4%E4%BA%BA%E6%94%BB%E5%87%BB/MS08-068-NTLM%E5%8F%8D%E5%B0%84.md
RemotePotato0https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/NTLM%E4%B8%AD%E7%BB%A7%E5%92%8C%E4%B8%AD%E9%97%B4%E4%BA%BA%E6%94%BB%E5%87%BB/RemotePotato0.md
SMB签名禁用和IPv4https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/NTLM%E4%B8%AD%E7%BB%A7%E5%92%8C%E4%B8%AD%E9%97%B4%E4%BA%BA%E6%94%BB%E5%87%BB/SMB%E7%AD%BE%E5%90%8D%E7%A6%81%E7%94%A8%E5%92%8CIPv4.md
SMB签名禁用和IPv6https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/NTLM%E4%B8%AD%E7%BB%A7%E5%92%8C%E4%B8%AD%E9%97%B4%E4%BA%BA%E6%94%BB%E5%87%BB/SMB%E7%AD%BE%E5%90%8D%E7%A6%81%E7%94%A8%E5%92%8CIPv6.md
WebDav中继https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/NTLM%E4%B8%AD%E7%BB%A7%E5%92%8C%E4%B8%AD%E9%97%B4%E4%BA%BA%E6%94%BB%E5%87%BB/WebDav%E4%B8%AD%E7%BB%A7.md
资源受限委派https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E8%B5%84%E6%BA%90%E5%8F%97%E9%99%90%E5%A7%94%E6%B4%BE.md
WinRM无文件执行https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/WinRM%E6%97%A0%E6%96%87%E4%BB%B6%E6%89%A7%E8%A1%8C.md
组策略对象GPOhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E7%BB%84%E7%AD%96%E7%95%A5%E5%AF%B9%E8%B1%A1GPO.md
危险的内置组使用https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E5%8D%B1%E9%99%A9%E7%9A%84%E5%86%85%E7%BD%AE%E7%BB%84%E4%BD%BF%E7%94%A8.md
ActiveDirectory证书服务https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E8%AF%81%E4%B9%A6%E6%9C%8D%E5%8A%A1/README.md
查找证书服务器https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E8%AF%81%E4%B9%A6%E6%9C%8D%E5%8A%A1/%E6%9F%A5%E6%89%BE%E8%AF%81%E4%B9%A6%E6%9C%8D%E5%8A%A1%E5%99%A8.md
ESC1-配置错误的证书模板https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E8%AF%81%E4%B9%A6%E6%9C%8D%E5%8A%A1/ESC1-%E9%85%8D%E7%BD%AE%E9%94%99%E8%AF%AF%E7%9A%84%E8%AF%81%E4%B9%A6%E6%A8%A1%E6%9D%BF.md
ESC2-配置错误的证书模板https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E8%AF%81%E4%B9%A6%E6%9C%8D%E5%8A%A1/ESC2-%E9%85%8D%E7%BD%AE%E9%94%99%E8%AF%AF%E7%9A%84%E8%AF%81%E4%B9%A6%E6%A8%A1%E6%9D%BF.md
ESC3-配置错误的注册代理模板https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E8%AF%81%E4%B9%A6%E6%9C%8D%E5%8A%A1/ESC3-%E9%85%8D%E7%BD%AE%E9%94%99%E8%AF%AF%E7%9A%84%E6%B3%A8%E5%86%8C%E4%BB%A3%E7%90%86%E6%A8%A1%E6%9D%BF.md
ESC4-访问控制漏洞https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E8%AF%81%E4%B9%A6%E6%9C%8D%E5%8A%A1/ESC4-%E8%AE%BF%E9%97%AE%E6%8E%A7%E5%88%B6%E6%BC%8F%E6%B4%9E.md
ESC6-EDITF_ATTRIBUTESUBJECTALTNAME2https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E8%AF%81%E4%B9%A6%E6%9C%8D%E5%8A%A1/ESC6-EDITF_ATTRIBUTESUBJECTALTNAME2.md
ESC7-易受攻击的证书颁发机构访问控制https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E8%AF%81%E4%B9%A6%E6%9C%8D%E5%8A%A1/ESC7-%E6%98%93%E5%8F%97%E6%94%BB%E5%87%BB%E7%9A%84%E8%AF%81%E4%B9%A6%E9%A2%81%E5%8F%91%E6%9C%BA%E6%9E%84%E8%AE%BF%E9%97%AE%E6%8E%A7%E5%88%B6.md
ESC8-ADCS中继攻击https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E8%AF%81%E4%B9%A6%E6%9C%8D%E5%8A%A1/ESC8-ADCS%E4%B8%AD%E7%BB%A7%E6%94%BB%E5%87%BB.md
经过认证的CVE-2022-26923https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E8%AF%81%E4%B9%A6%E6%9C%8D%E5%8A%A1/%E7%BB%8F%E8%BF%87%E8%AE%A4%E8%AF%81%E7%9A%84CVE-2022-26923.md
Pass-The-Certificatehttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E8%AF%81%E4%B9%A6%E6%9C%8D%E5%8A%A1/Pass-The-Certificate.md
ActiveDirectory的ACL和ACEhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E7%9A%84ACL%E5%92%8CACE/README.md
GenericAllhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E7%9A%84ACL%E5%92%8CACE/GenericAll.md
GenericWritehttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E7%9A%84ACL%E5%92%8CACE/GenericWrite.md
WriteDACLhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E7%9A%84ACL%E5%92%8CACE/WriteDACL.md
WriteOwnerhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E7%9A%84ACL%E5%92%8CACE/WriteOwner.md
读取GMSA密码https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E7%9A%84ACL%E5%92%8CACE/%E8%AF%BB%E5%8F%96GMSA%E5%AF%86%E7%A0%81.md
读取LAPS密码https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E7%9A%84ACL%E5%92%8CACE/%E8%AF%BB%E5%8F%96LAPS%E5%AF%86%E7%A0%81.md
强制更改密码https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E7%9A%84ACL%E5%92%8CACE/%E5%BC%BA%E5%88%B6%E6%9B%B4%E6%94%B9%E5%AF%86%E7%A0%81.md
DCOM-Exploitationhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/DCOM-Exploitation/README.md
DCOMhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/DCOM-Exploitation/DCOM.md
通过MMC应用程序类进行DCOMhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/DCOM-Exploitation/%E9%80%9A%E8%BF%87MMC%E5%BA%94%E7%94%A8%E7%A8%8B%E5%BA%8F%E7%B1%BB%E8%BF%9B%E8%A1%8CDCOM.md
通过Office进行DCOMhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/DCOM-Exploitation/%E9%80%9A%E8%BF%87Office%E8%BF%9B%E8%A1%8CDCOM.md
通过ShellExecute进行DCOMhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/DCOM-Exploitation/%E9%80%9A%E8%BF%87ShellExecute%E8%BF%9B%E8%A1%8CDCOM.md
通过ShellBrowserWindow进行DCOMhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/DCOM-Exploitation/%E9%80%9A%E8%BF%87ShellBrowserWindow%E8%BF%9B%E8%A1%8CDCOM.md
域与域https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E5%9F%9F%E4%B8%8E%E5%9F%9F.md
SCCM部署https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/SCCM%E9%83%A8%E7%BD%B2.md
WSUS部署https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/WSUS%E9%83%A8%E7%BD%B2.md
PrivExchange攻击https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/PrivExchange%E6%94%BB%E5%87%BB.md
RODC-只读域控制器入侵https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/RODC-%E5%8F%AA%E8%AF%BB%E5%9F%9F%E6%8E%A7%E5%88%B6%E5%99%A8%E5%85%A5%E4%BE%B5.md
PXE启动映像攻击https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/PXE%E5%90%AF%E5%8A%A8%E6%98%A0%E5%83%8F%E6%94%BB%E5%87%BB.md
权限维持https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/README.md
Windowshttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/README.md
关闭防病毒软件https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E5%85%B3%E9%97%AD%E9%98%B2%E7%97%85%E6%AF%92%E8%BD%AF%E4%BB%B6.md
启动文件夹https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E5%90%AF%E5%8A%A8%E6%96%87%E4%BB%B6%E5%A4%B9.md
Invoke-ADSBackdoorhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/Invoke-ADSBackdoor.md
ADS隐藏webshellhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/ADS%E9%9A%90%E8%97%8Fwebshell.md
ADS&JavaScripthttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/ADS&JavaScript.md
使用AMSI扫描接口维持权限https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E4%BD%BF%E7%94%A8AMSI%E6%89%AB%E6%8F%8F%E6%8E%A5%E5%8F%A3%E7%BB%B4%E6%8C%81%E6%9D%83%E9%99%90.md
Bitadminhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/Bitadmin.md
CLR Injectionhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/CLR-Injection.md
COM OBJECT hijackinghttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/COM-OBJECT-hijacking.md
受限委派后门https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E5%8F%97%E9%99%90%E5%A7%94%E6%B4%BE%E5%90%8E%E9%97%A8.md
通过控制面板加载项维持权限https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E9%80%9A%E8%BF%87%E6%8E%A7%E5%88%B6%E9%9D%A2%E6%9D%BF%E5%8A%A0%E8%BD%BD%E9%A1%B9%E7%BB%B4%E6%8C%81%E6%9D%83%E9%99%90.md
创建服务https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E5%88%9B%E5%BB%BA%E6%9C%8D%E5%8A%A1.md
DCShadow&SIDHistoryhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/DCShadow&SIDHistory.md
DCSync后门https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/DCSync%E5%90%8E%E9%97%A8.md
DLL劫持https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/DLL%E5%8A%AB%E6%8C%81.md
DLL注入https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/DLL%E6%B3%A8%E5%85%A5.md
DLL代理劫持右键https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/DLL%E4%BB%A3%E7%90%86%E5%8A%AB%E6%8C%81%E5%8F%B3%E9%94%AE.md
DLL劫持计划任务https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/DLL%E5%8A%AB%E6%8C%81%E8%AE%A1%E5%88%92%E4%BB%BB%E5%8A%A1.md
通过自定义.net垃圾回收机制进行DLL注入https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E9%80%9A%E8%BF%87%E8%87%AA%E5%AE%9A%E4%B9%89.net%E5%9E%83%E5%9C%BE%E5%9B%9E%E6%94%B6%E6%9C%BA%E5%88%B6%E8%BF%9B%E8%A1%8CDLL%E6%B3%A8%E5%85%A5.md
DSRM+注册表ACL后门https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/DSRM+%E6%B3%A8%E5%86%8C%E8%A1%A8ACL%E5%90%8E%E9%97%A8.md
Empirehttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/Empire.md
Windows FAX DLL Injectionhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/Windows-FAX-DLL-Injection.md
Guest激活https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/Guest%E6%BF%80%E6%B4%BB.md
映像劫持https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E6%98%A0%E5%83%8F%E5%8A%AB%E6%8C%81.md
HookPasswordChangeNotifyhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/HookPasswordChangeNotify.md
Kerberoasting后门https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/Kerberoasting%E5%90%8E%E9%97%A8.md
登录初始化https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E7%99%BB%E5%BD%95%E5%88%9D%E5%A7%8B%E5%8C%96.md
Metsvchttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/Metsvc.md
MOFhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/MOF.md
MSSQL后门https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/MSSQL%E5%90%8E%E9%97%A8.md
Netsh Helper DLLhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/Netsh-Helper-DLL.md
NPPSpy记录密码https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/NPPSpy%E8%AE%B0%E5%BD%95%E5%AF%86%E7%A0%81.md
NSSMhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/NSSM.md
唯一IP访问https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E5%94%AF%E4%B8%80IP%E8%AE%BF%E9%97%AE.md
Password Filter DLLhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/Password-Filter-DLL.md
Persistencehttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/Persistence.md
基于域策略文件权限后门https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E5%9F%BA%E4%BA%8E%E5%9F%9F%E7%AD%96%E7%95%A5%E6%96%87%E4%BB%B6%E6%9D%83%E9%99%90%E5%90%8E%E9%97%A8.md
进程注入https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E8%BF%9B%E7%A8%8B%E6%B3%A8%E5%85%A5.md
Invoke-Tasks权限维持https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/Invoke-Tasks%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81.md
WMI-Persistencehttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/WMI-Persistence.md
RID劫持https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/RID%E5%8A%AB%E6%8C%81.md
rootkithttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/rootkit.md
S4U2Self后门https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/S4U2Self%E5%90%8E%E9%97%A8.md
计划任务https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E8%AE%A1%E5%88%92%E4%BB%BB%E5%8A%A1.md
影子用户https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E5%BD%B1%E5%AD%90%E7%94%A8%E6%88%B7.md
添加签名https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E6%B7%BB%E5%8A%A0%E7%AD%BE%E5%90%8D.md
Skeleton Key万能钥匙https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/Skeleton-Key%E4%B8%87%E8%83%BD%E9%92%A5%E5%8C%99.md
Squibledoohttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/Squibledoo.md
注入SSP被动收集密码https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E6%B3%A8%E5%85%A5SSP%E8%A2%AB%E5%8A%A8%E6%94%B6%E9%9B%86%E5%AF%86%E7%A0%81.md
WinRM端口复用https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/WinRM%E7%AB%AF%E5%8F%A3%E5%A4%8D%E7%94%A8.md
WMIC事件订阅https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/WMIC%E4%BA%8B%E4%BB%B6%E8%AE%A2%E9%98%85.md
RPC后门https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/RPC%E5%90%8E%E9%97%A8.md
Shadow-Credentialshttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/Shadow-Credentials.md
Linuxhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/README.md
Linux cron后门https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/Linux-cron%E5%90%8E%E9%97%A8.md
文件处理https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/%E6%96%87%E4%BB%B6%E5%A4%84%E7%90%86.md
IPTables端口复用https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/IPTables%E7%AB%AF%E5%8F%A3%E5%A4%8D%E7%94%A8.md
Kbeast_rootkithttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/Kbeast_rootkit.md
OpenSSH后门https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/OpenSSH%E5%90%8E%E9%97%A8.md
进程注入https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/%E8%BF%9B%E7%A8%8B%E6%B3%A8%E5%85%A5.md
Reptilehttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/Reptile.md
SSHD后门https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/SSHD%E5%90%8E%E9%97%A8.md
SSH公私钥登录https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/SSH%E5%85%AC%E7%A7%81%E9%92%A5%E7%99%BB%E5%BD%95.md
SSH wrapper后门https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/SSH-wrapper%E5%90%8E%E9%97%A8.md
Strace记录ssh密码https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/Strace%E8%AE%B0%E5%BD%95ssh%E5%AF%86%E7%A0%81.md
SUID Shellhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/SUID-Shell.md
apt后门https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/apt%E5%90%8E%E9%97%A8.md
bash_rchttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/bash_rc.md
后门驱动程序https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/%E5%90%8E%E9%97%A8%E9%A9%B1%E5%8A%A8%E7%A8%8B%E5%BA%8F.md
启动项服务后门https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/%E5%90%AF%E5%8A%A8%E9%A1%B9%E6%9C%8D%E5%8A%A1%E5%90%8E%E9%97%A8.md
用户启动文件https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/%E7%94%A8%E6%88%B7%E5%90%AF%E5%8A%A8%E6%96%87%E4%BB%B6.md
web服务&中间件https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/web%E6%9C%8D%E5%8A%A1&%E4%B8%AD%E9%97%B4%E4%BB%B6/README.md
Apachehttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/web%E6%9C%8D%E5%8A%A1&%E4%B8%AD%E9%97%B4%E4%BB%B6/Apache.md
IIShttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/web%E6%9C%8D%E5%8A%A1&%E4%B8%AD%E9%97%B4%E4%BB%B6/IIS.md
Javahttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/web%E6%9C%8D%E5%8A%A1&%E4%B8%AD%E9%97%B4%E4%BB%B6/Java.md
Nginxhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/web%E6%9C%8D%E5%8A%A1&%E4%B8%AD%E9%97%B4%E4%BB%B6/Nginx.md
赏金技巧https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/README.md
2FA双因子认证绕过https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/2FA%E5%8F%8C%E5%9B%A0%E5%AD%90%E8%AE%A4%E8%AF%81%E7%BB%95%E8%BF%87.md
403 bypasshttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/403-bypass.md
命令注入Bypasshttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E5%91%BD%E4%BB%A4%E6%B3%A8%E5%85%A5Bypass.md
配置错误的云存储桶https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E9%85%8D%E7%BD%AE%E9%94%99%E8%AF%AF%E7%9A%84%E4%BA%91%E5%AD%98%E5%82%A8%E6%A1%B6.md
CMShttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/CMS.md
字典https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E5%AD%97%E5%85%B8/README.md
从站点生成字典https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E5%AD%97%E5%85%B8/%E4%BB%8E%E7%AB%99%E7%82%B9%E7%94%9F%E6%88%90%E5%AD%97%E5%85%B8.md
查找git和svn的字典https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E5%AD%97%E5%85%B8/%E6%9F%A5%E6%89%BEgit%E5%92%8Csvn%E7%9A%84%E5%AD%97%E5%85%B8.md
已泄露的密码整理出的字典https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E5%AD%97%E5%85%B8/%E5%B7%B2%E6%B3%84%E9%9C%B2%E7%9A%84%E5%AF%86%E7%A0%81%E6%95%B4%E7%90%86%E5%87%BA%E7%9A%84%E5%AD%97%E5%85%B8.md
loT高频率账户密码https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E5%AD%97%E5%85%B8/loT%E9%AB%98%E9%A2%91%E7%8E%87%E8%B4%A6%E6%88%B7%E5%AF%86%E7%A0%81.md
来自github的字典https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E5%AD%97%E5%85%B8/%E6%9D%A5%E8%87%AAgithub%E7%9A%84%E5%AD%97%E5%85%B8.md
未认证的ElasticsearchDBhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E6%9C%AA%E8%AE%A4%E8%AF%81%E7%9A%84ElasticsearchDB.md
favico信息https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/favico%E4%BF%A1%E6%81%AF.md
Githubhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/Github.md
git和svnhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/git%E5%92%8Csvn.md
参数污染https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E5%8F%82%E6%95%B0%E6%B1%A1%E6%9F%93.md
通过.json的信息泄露https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E9%80%9A%E8%BF%87.json%E7%9A%84%E4%BF%A1%E6%81%AF%E6%B3%84%E9%9C%B2.md
一行命令https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E4%B8%80%E8%A1%8C%E5%91%BD%E4%BB%A4/README.md
使用grep快速去除垃圾数据https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E4%B8%80%E8%A1%8C%E5%91%BD%E4%BB%A4/%E4%BD%BF%E7%94%A8grep%E5%BF%AB%E9%80%9F%E5%8E%BB%E9%99%A4%E5%9E%83%E5%9C%BE%E6%95%B0%E6%8D%AE.md
子域名接管https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E5%AD%90%E5%9F%9F%E5%90%8D%E6%8E%A5%E7%AE%A1.md
测试是否存在heartbleed漏洞https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E6%B5%8B%E8%AF%95%E6%98%AF%E5%90%A6%E5%AD%98%E5%9C%A8heartbleed%E6%BC%8F%E6%B4%9E.md
sql注入检测https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/sql%E6%B3%A8%E5%85%A5%E6%A3%80%E6%B5%8B.md
TOP系列https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/TOP%E7%B3%BB%E5%88%97/README.md
Top25LFI参数https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/TOP%E7%B3%BB%E5%88%97/Top25LFI%E5%8F%82%E6%95%B0.md
Top25RCE参数https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/TOP%E7%B3%BB%E5%88%97/Top25RCE%E5%8F%82%E6%95%B0.md
Top25重定向dorkshttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/TOP%E7%B3%BB%E5%88%97/Top25%E9%87%8D%E5%AE%9A%E5%90%91dorks.md
Top25ssrfhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/TOP%E7%B3%BB%E5%88%97/Top25ssrf.md
绕过登录限制https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E7%BB%95%E8%BF%87%E7%99%BB%E5%BD%95%E9%99%90%E5%88%B6.md
云安全https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/README.md
AWShttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/README.md
初始访问https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE.md
权限提升https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87.md
权限维持https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81.md
枚举https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/%E6%9E%9A%E4%B8%BE.md
AWS的服务https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/AWS%E7%9A%84%E6%9C%8D%E5%8A%A1.md
工具https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/%E5%B7%A5%E5%85%B7.md
将EBS卷挂载到EC2Linuxhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/%E5%B0%86EBS%E5%8D%B7%E6%8C%82%E8%BD%BD%E5%88%B0EC2Linux.md
使用AMI映像复制EC2https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/%E4%BD%BF%E7%94%A8AMI%E6%98%A0%E5%83%8F%E5%A4%8D%E5%88%B6EC2.md
通过API密钥获得AWS控制台访问权限https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/%E9%80%9A%E8%BF%87API%E5%AF%86%E9%92%A5%E8%8E%B7%E5%BE%97AWS%E6%8E%A7%E5%88%B6%E5%8F%B0%E8%AE%BF%E9%97%AE%E6%9D%83%E9%99%90.md
Golden-SAML-Attackhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/Golden-SAML-Attack.md
Shadow-Copy-attackhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/Shadow-Copy-attack.md
Lambda-提取函数的代码https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/Lambda-%E6%8F%90%E5%8F%96%E5%87%BD%E6%95%B0%E7%9A%84%E4%BB%A3%E7%A0%81.md
InstanceConnect-将SSH密钥推送到EC2实例https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/InstanceConnect-%E5%B0%86SSH%E5%AF%86%E9%92%A5%E6%8E%A8%E9%80%81%E5%88%B0EC2%E5%AE%9E%E4%BE%8B.md
SSM-命令执行https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/SSM-%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C.md
动态数据库https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/%E5%8A%A8%E6%80%81%E6%95%B0%E6%8D%AE%E5%BA%93.md
禁用CloudTrailhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/%E7%A6%81%E7%94%A8CloudTrail.md
通过混淆Cloudtrail日志和GuardDuty来掩盖踪迹https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/%E9%80%9A%E8%BF%87%E6%B7%B7%E6%B7%86Cloudtrail%E6%97%A5%E5%BF%97%E5%92%8CGuardDuty%E6%9D%A5%E6%8E%A9%E7%9B%96%E8%B8%AA%E8%BF%B9.md
Dockerhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Docker/README.md
未授权APIhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Docker/%E6%9C%AA%E6%8E%88%E6%9D%83API.md
逃逸https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Docker/%E9%80%83%E9%80%B8.md
权限维持https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Docker/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81.md
GCPhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/GCP/README.md
初始访问https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/GCP/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE.md
权限维持https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/GCP/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81.md
枚举https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/GCP/%E6%9E%9A%E4%B8%BE.md
特权升级和横向移动https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/GCP/%E7%89%B9%E6%9D%83%E5%8D%87%E7%BA%A7%E5%92%8C%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8.md
kuberneteshttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/kubernetes/README.md
未授权APIhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/kubernetes/%E6%9C%AA%E6%8E%88%E6%9D%83API.md
权限提升https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/kubernetes/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87.md
权限维持https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/kubernetes/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81.md
枚举https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/kubernetes/%E6%9E%9A%E4%B8%BE.md
Azurehttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/README.md
侦察工具https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/%E4%BE%A6%E5%AF%9F%E5%B7%A5%E5%85%B7.md
枚举https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/%E6%9E%9A%E4%B8%BE.md
非法同意https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/%E9%9D%9E%E6%B3%95%E5%90%8C%E6%84%8F.md
钓鱼https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/%E9%92%93%E9%B1%BC.md
令牌https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/%E4%BB%A4%E7%89%8C.md
向所有EnterpriseApplications添加凭据https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/%E5%90%91%E6%89%80%E6%9C%89EnterpriseApplications%E6%B7%BB%E5%8A%A0%E5%87%AD%E6%8D%AE.md
为AzureWeb应用程序生成SSHhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/%E4%B8%BAAzureWeb%E5%BA%94%E7%94%A8%E7%A8%8B%E5%BA%8F%E7%94%9F%E6%88%90SSH.md
Azure存储Blobhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/Azure%E5%AD%98%E5%82%A8Blob.md
自动化runbookhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/%E8%87%AA%E5%8A%A8%E5%8C%96runbook.md
虚拟机runCommandhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/%E8%99%9A%E6%8B%9F%E6%9C%BArunCommand.md
KeyVaulthttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/KeyVault.md
Pass-The-PRThttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/Pass-The-PRT.md
Pass-The-Certificatehttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/Pass-The-Certificate.md
Intunes管理https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/Intunes%E7%AE%A1%E7%90%86.md
动态组成员资格https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/%E5%8A%A8%E6%80%81%E7%BB%84%E6%88%90%E5%91%98%E8%B5%84%E6%A0%BC.md
Administrative-Unithttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/Administrative-Unit.md
部署模板https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/%E9%83%A8%E7%BD%B2%E6%A8%A1%E6%9D%BF.md
应用程序代理https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/%E5%BA%94%E7%94%A8%E7%A8%8B%E5%BA%8F%E4%BB%A3%E7%90%86.md
条件访问https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/%E6%9D%A1%E4%BB%B6%E8%AE%BF%E9%97%AE.md
AzureADhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/AzureAD.md
AzureAD连接https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/AzureAD%E8%BF%9E%E6%8E%A5.md
Aliyunhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Aliyun/README.md
osskeyhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Aliyun/osskey.md
工具https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/%E5%B7%A5%E5%85%B7.md
Redteam红队https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/README.md
免杀技巧https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E5%85%8D%E6%9D%80%E6%8A%80%E5%B7%A7/README.md
Bypass AMSIhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E5%85%8D%E6%9D%80%E6%8A%80%E5%B7%A7/Bypass-AMSI.md
一些可尝试绕过白名单的执行https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E5%85%8D%E6%9D%80%E6%8A%80%E5%B7%A7/%E4%B8%80%E4%BA%9B%E5%8F%AF%E5%B0%9D%E8%AF%95%E7%BB%95%E8%BF%87%E7%99%BD%E5%90%8D%E5%8D%95%E7%9A%84%E6%89%A7%E8%A1%8C.md
在Windows Server 2016和2019中绕过WindowsDefenderhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E5%85%8D%E6%9D%80%E6%8A%80%E5%B7%A7/%E5%9C%A8Windows-Server-2016%E5%92%8C2019%E4%B8%AD%E7%BB%95%E8%BF%87WindowsDefender.md
cshot远程shellcodehttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E5%85%8D%E6%9D%80%E6%8A%80%E5%B7%A7/cshot%E8%BF%9C%E7%A8%8Bshellcode.md
内存中解码shellcode绕过avhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E5%85%8D%E6%9D%80%E6%8A%80%E5%B7%A7/%E5%86%85%E5%AD%98%E4%B8%AD%E8%A7%A3%E7%A0%81shellcode%E7%BB%95%E8%BF%87av.md
Pezor免杀https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E5%85%8D%E6%9D%80%E6%8A%80%E5%B7%A7/Pezor%E5%85%8D%E6%9D%80.md
Bypass技巧https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/Bypass%E6%8A%80%E5%B7%A7/README.md
绕过lsa protectionhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/Bypass%E6%8A%80%E5%B7%A7/%E7%BB%95%E8%BF%87lsa-protection.md
Bypass mod_securityhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/Bypass%E6%8A%80%E5%B7%A7/Bypass-mod_security.md
系统类https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/Bypass%E6%8A%80%E5%B7%A7/%E7%B3%BB%E7%BB%9F%E7%B1%BB/README.md
动态调用进程注入逻辑https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E7%B3%BB%E7%BB%9F%E7%B1%BB/%E5%8A%A8%E6%80%81%E8%B0%83%E7%94%A8%E8%BF%9B%E7%A8%8B%E6%B3%A8%E5%85%A5%E9%80%BB%E8%BE%91.md
通过挂起EventLog服务线程禁用Windows事件日志https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E7%B3%BB%E7%BB%9F%E7%B1%BB/%E9%80%9A%E8%BF%87%E6%8C%82%E8%B5%B7EventLog%E6%9C%8D%E5%8A%A1%E7%BA%BF%E7%A8%8B%E7%A6%81%E7%94%A8Windows%E4%BA%8B%E4%BB%B6%E6%97%A5%E5%BF%97.md
隐藏windows服务https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E7%B3%BB%E7%BB%9F%E7%B1%BB/%E9%9A%90%E8%97%8Fwindows%E6%9C%8D%E5%8A%A1.md
ImportDLLInjection-通过修改内存中的PE头来注入DLL的另一种方法https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E7%B3%BB%E7%BB%9F%E7%B1%BB/ImportDLLInjection-%E9%80%9A%E8%BF%87%E4%BF%AE%E6%94%B9%E5%86%85%E5%AD%98%E4%B8%AD%E7%9A%84PE%E5%A4%B4%E6%9D%A5%E6%B3%A8%E5%85%A5DLL%E7%9A%84%E5%8F%A6%E4%B8%80%E7%A7%8D%E6%96%B9%E6%B3%95.md
父进程破坏https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E7%B3%BB%E7%BB%9F%E7%B1%BB/%E7%88%B6%E8%BF%9B%E7%A8%8B%E7%A0%B4%E5%9D%8F.md
进程挖空(MitreT1055.012)https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E7%B3%BB%E7%BB%9F%E7%B1%BB/%E8%BF%9B%E7%A8%8B%E6%8C%96%E7%A9%BA(MitreT1055.012).md
远程解压文件https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E7%B3%BB%E7%BB%9F%E7%B1%BB/%E8%BF%9C%E7%A8%8B%E8%A7%A3%E5%8E%8B%E6%96%87%E4%BB%B6.md
使用WindowsDefender下载文件https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E7%B3%BB%E7%BB%9F%E7%B1%BB/%E4%BD%BF%E7%94%A8WindowsDefender%E4%B8%8B%E8%BD%BD%E6%96%87%E4%BB%B6.md
Web类https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/Bypass%E6%8A%80%E5%B7%A7/Web%E7%B1%BB/README.md
web程序漏洞https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/Web%E7%B1%BB/web%E7%A8%8B%E5%BA%8F%E6%BC%8F%E6%B4%9E.md
编辑器漏洞https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/Web%E7%B1%BB/%E7%BC%96%E8%BE%91%E5%99%A8%E6%BC%8F%E6%B4%9E.md
邮件地址payloadhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/Web%E7%B1%BB/%E9%82%AE%E4%BB%B6%E5%9C%B0%E5%9D%80payload.md
从LFI到RCEhttps://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/Web%E7%B1%BB/%E4%BB%8ELFI%E5%88%B0RCE.md
深x服https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/Web%E7%B1%BB/%E6%B7%B1x%E6%9C%8D.md
天r信https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/Web%E7%B1%BB/tianr.md
Web server日志分析命令https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/Web%E7%B1%BB/Web-server%E6%97%A5%E5%BF%97%E5%88%86%E6%9E%90%E5%91%BD%E4%BB%A4.md
默认密码https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/Web%E7%B1%BB/%E9%BB%98%E8%AE%A4%E5%AF%86%E7%A0%81.md
www.heresecurity.wikihttps://www.heresecurity.wiki
Readme https://github.com/birui/Pentest_Note#readme-ov-file
Please reload this pagehttps://github.com/birui/Pentest_Note
Activityhttps://github.com/birui/Pentest_Note/activity
0 forkshttps://github.com/birui/Pentest_Note/forks
Report repository https://github.com/contact/report-content?content_url=https%3A%2F%2Fgithub.com%2Fbirui%2FPentest_Note&report=birui+%28user%29
Releaseshttps://github.com/birui/Pentest_Note/releases
Packages 0https://github.com/users/birui/packages?repo_name=Pentest_Note
Please reload this pagehttps://github.com/birui/Pentest_Note
Contributorshttps://github.com/birui/Pentest_Note/graphs/contributors
Please reload this pagehttps://github.com/birui/Pentest_Note
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.