René's URL Explorer Experiment

Title: GitHub - jeliurry/Pentest_Note: 渗透测试常规操作记录 · GitHub

Open Graph Title: GitHub - jeliurry/Pentest_Note: 渗透测试常规操作记录

X Title: GitHub - jeliurry/Pentest_Note: 渗透测试常规操作记录

Description: 渗透测试常规操作记录. Contribute to jeliurry/Pentest_Note development by creating an account on GitHub.

Open Graph Description: 渗透测试常规操作记录. Contribute to jeliurry/Pentest_Note development by creating an account on GitHub.

X Description: 渗透测试常规操作记录. Contribute to jeliurry/Pentest_Note development by creating an account on GitHub.

Opengraph URL: https://github.com/jeliurry/Pentest_Note

X: @github

direct link

Domain: github.com

route-pattern	/:user_id/:repository
route-controller	files
route-action	disambiguate
fetch-nonce	v2:44612175-1e47-3d91-825a-7c1003f3824d
current-catalog-service-hash	f3abb0cc802f3d7b95fc8762b94bdcb13bf39634c40c357301c4aa1d67a256fb
request-id	E042:3EE21F:55272DF:6FF7329:6A5D9EAD
html-safe-nonce	77f1f1514a8721ea5c548ab9bc4cce6571967867cdff594d1b337b1704492ce7
visitor-payload	eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJFMDQyOjNFRTIxRjo1NTI3MkRGOjZGRjczMjk6NkE1RDlFQUQiLCJ2aXNpdG9yX2lkIjoiMTAzNjE1MjI4MDU5OTg2Mjk1NyIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmac	f74b1e2ddc608980bee689cf56ac607fa33b4c00a986b68a2e57258e28884f06
hovercard-subject-tag	repository:536437524
github-keyboard-shortcuts	repository,copilot
google-site-verification	Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-url	https://collector.github.com/github/collect
analytics-location	//
fb:app_id	1401488693436528
apple-itunes-app	app-id=1477376905, app-argument=https://github.com/jeliurry/Pentest_Note
twitter:image	https://opengraph.githubassets.com/d18e59b5eb1db966977d15bd4f0fe5b12238ba49efcbd975a75fc25ed2fed67c/jeliurry/Pentest_Note
twitter:card	summary_large_image
og:image	https://opengraph.githubassets.com/d18e59b5eb1db966977d15bd4f0fe5b12238ba49efcbd975a75fc25ed2fed67c/jeliurry/Pentest_Note
og:image:alt	渗透测试常规操作记录. Contribute to jeliurry/Pentest_Note development by creating an account on GitHub.
og:image:width	1200
og:image:height	600
og:site_name	GitHub
og:type	object
hostname	github.com
expected-hostname	github.com
None	5290d7e14309ad1e76106a9c4237bd1041517e83ea182c8ab756752cb0c6940b
turbo-cache-control	no-cache
go-import	github.com/jeliurry/Pentest_Note git https://github.com/jeliurry/Pentest_Note.git
octolytics-dimension-user_id	5144524
octolytics-dimension-user_login	jeliurry
octolytics-dimension-repository_id	536437524
octolytics-dimension-repository_nwo	jeliurry/Pentest_Note
octolytics-dimension-repository_public	true
octolytics-dimension-repository_is_fork	true
octolytics-dimension-repository_parent_id	272328468
octolytics-dimension-repository_parent_nwo	xiaoy-sec/Pentest_Note
octolytics-dimension-repository_network_root_id	272328468
octolytics-dimension-repository_network_root_nwo	xiaoy-sec/Pentest_Note
turbo-body-classes	logged-out env-production page-responsive
disable-turbo	false
browser-stats-url	https://api.github.com/_private/browser/stats
browser-errors-url	https://api.github.com/_private/browser/errors
release	9c975978430e9ad293956f2bbdaf153b1bd84a99
ui-target	full
theme-color	#1e2327
color-scheme	light dark

Links:

Skip to content	https://github.com/jeliurry/Pentest_Note#start-of-content
	https://github.com/
Sign in	https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fjeliurry%2FPentest_Note
GitHub CopilotWrite better code with AI	https://github.com/features/copilot
GitHub Copilot appDirect agents from issue to merge	https://github.com/features/ai/github-app
MCP RegistryNewIntegrate external tools	https://github.com/mcp
ActionsAutomate any workflow	https://github.com/features/actions
CodespacesInstant dev environments	https://github.com/features/codespaces
IssuesPlan and track work	https://github.com/features/issues
Code ReviewManage code changes	https://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilities	https://github.com/security/advanced-security
Code securitySecure your code as you build	https://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they start	https://github.com/security/advanced-security/secret-protection
Why GitHub	https://github.com/why-github
Documentation	https://docs.github.com
Blog	https://github.blog
Changelog	https://github.blog/changelog
Marketplace	https://github.com/marketplace
View all features	https://github.com/features
Enterprises	https://github.com/enterprise
Small and medium teams	https://github.com/team
Startups	https://github.com/enterprise/startups
Nonprofits	https://github.com/solutions/industry/nonprofits
App Modernization	https://github.com/solutions/use-case/app-modernization
DevSecOps	https://github.com/solutions/use-case/devsecops
DevOps	https://github.com/solutions/use-case/devops
CI/CD	https://github.com/solutions/use-case/ci-cd
View all use cases	https://github.com/solutions/use-case
Healthcare	https://github.com/solutions/industry/healthcare
Financial services	https://github.com/solutions/industry/financial-services
Manufacturing	https://github.com/solutions/industry/manufacturing
Government	https://github.com/solutions/industry/government
View all industries	https://github.com/solutions/industry
View all solutions	https://github.com/solutions
AI	https://github.com/resources/articles?topic=ai
Software Development	https://github.com/resources/articles?topic=software-development
DevOps	https://github.com/resources/articles?topic=devops
Security	https://github.com/resources/articles?topic=security
View all topics	https://github.com/resources/articles
Customer stories	https://github.com/customer-stories
Events & webinars	https://github.com/resources/events
Ebooks & reports	https://github.com/resources/whitepapers
Business insights	https://github.com/solutions/executive-insights
GitHub Skills	https://skills.github.com
Documentation	https://docs.github.com
Customer support	https://support.github.com
Community forum	https://github.com/orgs/community/discussions
Trust center	https://github.com/trust-center
Partners	https://github.com/partners
View all resources	https://github.com/resources
GitHub SponsorsFund open source developers	https://github.com/open-source/sponsors
Security Lab	https://securitylab.github.com
Maintainer Community	https://maintainers.github.com
Accelerator	https://github.com/open-source/accelerator
GitHub Stars	https://stars.github.com
Archive Program	https://archiveprogram.github.com
Topics	https://github.com/topics
Trending	https://github.com/trending
Collections	https://github.com/collections
Enterprise platformAI-powered developer platform	https://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security features	https://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI features	https://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 support	https://github.com/enterprise/premium-support
Pricing	https://github.com/pricing
Search syntax tips	https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentation	https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in	https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fjeliurry%2FPentest_Note
Sign up	https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E&source=header-repo&source_repo=jeliurry%2FPentest_Note
Reload	https://github.com/jeliurry/Pentest_Note
Reload	https://github.com/jeliurry/Pentest_Note
Reload	https://github.com/jeliurry/Pentest_Note
jeliurry	https://github.com/jeliurry
Pentest_Note	https://github.com/jeliurry/Pentest_Note
xiaoy-sec/Pentest_Note	https://github.com/xiaoy-sec/Pentest_Note
Notifications	https://github.com/login?return_to=%2Fjeliurry%2FPentest_Note
Fork 0	https://github.com/login?return_to=%2Fjeliurry%2FPentest_Note
Star 0	https://github.com/login?return_to=%2Fjeliurry%2FPentest_Note
Code	https://github.com/jeliurry/Pentest_Note
Pull requests 0	https://github.com/jeliurry/Pentest_Note/pulls
Actions	https://github.com/jeliurry/Pentest_Note/actions
Projects	https://github.com/jeliurry/Pentest_Note/projects
Security and quality 0	https://github.com/jeliurry/Pentest_Note/security
Insights	https://github.com/jeliurry/Pentest_Note/pulse
Code	https://github.com/jeliurry/Pentest_Note
Pull requests	https://github.com/jeliurry/Pentest_Note/pulls
Actions	https://github.com/jeliurry/Pentest_Note/actions
Projects	https://github.com/jeliurry/Pentest_Note/projects
Security and quality	https://github.com/jeliurry/Pentest_Note/security
Insights	https://github.com/jeliurry/Pentest_Note/pulse
	https://github.com/jeliurry/Pentest_Note
Branches	https://github.com/jeliurry/Pentest_Note/branches
Tags	https://github.com/jeliurry/Pentest_Note/tags
	https://github.com/jeliurry/Pentest_Note/branches
	https://github.com/jeliurry/Pentest_Note/tags
184 Commits	https://github.com/jeliurry/Pentest_Note/commits/master/
	https://github.com/jeliurry/Pentest_Note/commits/master/
img	https://github.com/jeliurry/Pentest_Note/tree/master/img
img	https://github.com/jeliurry/Pentest_Note/tree/master/img
red	https://github.com/jeliurry/Pentest_Note/tree/master/red
red	https://github.com/jeliurry/Pentest_Note/tree/master/red
wiki	https://github.com/jeliurry/Pentest_Note/tree/master/wiki
wiki	https://github.com/jeliurry/Pentest_Note/tree/master/wiki
README.md	https://github.com/jeliurry/Pentest_Note/blob/master/README.md
README.md	https://github.com/jeliurry/Pentest_Note/blob/master/README.md
README	https://github.com/jeliurry/Pentest_Note
https://www.heresecurity.wiki/	https://www.heresecurity.wiki/
	https://github.com/xiaoy-sec/Pentest_Note/blob/master/img/wechat.png
	https://github.com/jeliurry/Pentest_Note#pentest_note
	https://github.com/jeliurry/Pentest_Note#主目录
收集信息	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/README.md
初始访问	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/README.md
防御规避	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/README.md
权限提升	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/README.md
文件操作	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/README.md
内网和域	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/README.md
HASH操作	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/README.md
横向移动	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/README.md
权限维持	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/README.md
赏金技巧	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/README.md
云安全	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/README.md
Redteam红队	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/README.md
	https://github.com/jeliurry/Pentest_Note#详细目录
收集信息	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/README.md
域名信息	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/%E5%9F%9F%E5%90%8D%E4%BF%A1%E6%81%AF/README.md
CDN是否存在	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/%E5%9F%9F%E5%90%8D%E4%BF%A1%E6%81%AF/CDN%E6%98%AF%E5%90%A6%E5%AD%98%E5%9C%A8.md
Bypass CDN	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/%E5%9F%9F%E5%90%8D%E4%BF%A1%E6%81%AF/%E7%BB%95%E8%BF%87CDN.md
DNS历史记录	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/%E5%9F%9F%E5%90%8D%E4%BF%A1%E6%81%AF/DNS%E5%8E%86%E5%8F%B2%E8%AE%B0%E5%BD%95.md
SSL证书信息	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/%E5%9F%9F%E5%90%8D%E4%BF%A1%E6%81%AF/SSL%E8%AF%81%E4%B9%A6%E4%BF%A1%E6%81%AF.md
Whois信息	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/%E5%9F%9F%E5%90%8D%E4%BF%A1%E6%81%AF/Whois%E4%BF%A1%E6%81%AF.md
子域名检查	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/%E5%AD%90%E5%9F%9F%E5%90%8D%E6%A3%80%E6%9F%A5.md
IP和端口信息	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/IP%E5%92%8C%E7%AB%AF%E5%8F%A3%E4%BF%A1%E6%81%AF/README.md
ASN	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/IP%E5%92%8C%E7%AB%AF%E5%8F%A3%E4%BF%A1%E6%81%AF/ASN.md
历史IP	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/IP%E5%92%8C%E7%AB%AF%E5%8F%A3%E4%BF%A1%E6%81%AF/%E5%8E%86%E5%8F%B2IP.md
NMAP使用	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/IP%E5%92%8C%E7%AB%AF%E5%8F%A3%E4%BF%A1%E6%81%AF/NMAP%E4%BD%BF%E7%94%A8.md
工具	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/IP%E5%92%8C%E7%AB%AF%E5%8F%A3%E4%BF%A1%E6%81%AF/%E5%B7%A5%E5%85%B7.md
网站架构和指纹识别	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/%E7%BD%91%E7%AB%99%E6%9E%B6%E6%9E%84%E5%92%8C%E6%8C%87%E7%BA%B9%E8%AF%86%E5%88%AB.md
其他信息	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/%E5%85%B6%E4%BB%96%E4%BF%A1%E6%81%AF.md
人员信息	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%94%B6%E9%9B%86%E4%BF%A1%E6%81%AF/%E4%BA%BA%E5%91%98%E4%BF%A1%E6%81%AF.md
初始访问	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/README.md
Web服务突破	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/README.md
前端	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/%E5%89%8D%E7%AB%AF.md
SQL注入	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/SQL%E6%B3%A8%E5%85%A5/README.md
判断注入	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/SQL%E6%B3%A8%E5%85%A5/%E5%88%A4%E6%96%AD%E6%B3%A8%E5%85%A5.md
数据库类型识别	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/SQL%E6%B3%A8%E5%85%A5/%E6%95%B0%E6%8D%AE%E5%BA%93%E7%B1%BB%E5%9E%8B%E8%AF%86%E5%88%AB.md
MSSQL	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/SQL%E6%B3%A8%E5%85%A5/MSSQL.md
MYSQL	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/SQL%E6%B3%A8%E5%85%A5/MYSQL.md
Oracle	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/SQL%E6%B3%A8%E5%85%A5/Oracle.md
PostgreSQL	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/SQL%E6%B3%A8%E5%85%A5/PostgreSQL.md
SQLite	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/SQL%E6%B3%A8%E5%85%A5/SQLite.md
DB2	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/SQL%E6%B3%A8%E5%85%A5/DB2.md
SQLMAP	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/SQL%E6%B3%A8%E5%85%A5/SQLMAP.md
XSS	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/XSS.md
CSRF	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/CSRF.md
PHP包含下载读取	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/PHP%E5%8C%85%E5%90%AB%E4%B8%8B%E8%BD%BD%E8%AF%BB%E5%8F%96.md
XML	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/XML.md
SSRF	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/SSRF.md
DNSLOG	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/DNSLOG.md
Xpath注入	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/Xpath%E6%B3%A8%E5%85%A5.md
SSTI	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/SSTI.md
命令注入	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/%E5%91%BD%E4%BB%A4%E6%B3%A8%E5%85%A5.md
PHPMyAdmin利用	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/PHPMyAdmin%E5%88%A9%E7%94%A8.md
PHP-FPM之RCE	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/PHP-FPM%E4%B9%8BRCE.md
PHPstudy后门	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/PHPstudy%E5%90%8E%E9%97%A8.md
IIS写权限	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/IIS%E5%86%99%E6%9D%83%E9%99%90.md
绕过WAF	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/%E7%BB%95%E8%BF%87WAF.md
数据库	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/%E6%95%B0%E6%8D%AE%E5%BA%93.md
命令执行	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C.md
CmdHijack	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/CmdHijack.md
Fuzz目录	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/Web%E6%9C%8D%E5%8A%A1%E7%AA%81%E7%A0%B4/Fuzz%E7%9B%AE%E5%BD%95.md
未授权访问	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/README.md
Redis	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/Redis.md
activemq	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/activemq.md
docker	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/docker.md
elastic	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/elastic.md
hadoop	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/hadoop.md
jboss	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/jboss.md
jenkins	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/jenkins.md
memcache	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/memcache.md
mongo	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/mongo.md
zookeeper	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/zookeeper.md
CouchDB	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/CouchDB.md
Jenkins	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/Jenkins.md
Solr	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/Solr.md
VNC	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/VNC.md
Weblogic	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/Weblogic.md
Zabbix	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE/Zabbix.md
一些Bypass	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E4%B8%80%E4%BA%9BBypass/README.md
Linux绕过disable_function	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E4%B8%80%E4%BA%9BBypass/Linux%E7%BB%95%E8%BF%87disable_function.md
Windows系统组件com绕过	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E4%B8%80%E4%BA%9BBypass/Windows%E7%B3%BB%E7%BB%9F%E7%BB%84%E4%BB%B6com%E7%BB%95%E8%BF%87.md
cgi启动方式	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E4%B8%80%E4%BA%9BBypass/cgi%E5%90%AF%E5%8A%A8%E6%96%B9%E5%BC%8F.md
蚁剑绕过	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E4%B8%80%E4%BA%9BBypass/%E8%9A%81%E5%89%91%E7%BB%95%E8%BF%87.md
ImageMagick组件绕过	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E4%B8%80%E4%BA%9BBypass/ImageMagick%E7%BB%84%E4%BB%B6%E7%BB%95%E8%BF%87.md
常规函数绕过	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E4%B8%80%E4%BA%9BBypass/%E5%B8%B8%E8%A7%84%E5%87%BD%E6%95%B0%E7%BB%95%E8%BF%87.md
Open_basedir绕过	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E4%B8%80%E4%BA%9BBypass/Open_basedir%E7%BB%95%E8%BF%87.md
TomcatAjp之LFI&RCE	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/TomcatAjp%E4%B9%8BLFI&RCE.md
MSSQL&Agent之Job上线	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/MSSQL&Agent%E4%B9%8BJob%E4%B8%8A%E7%BA%BF.md
MySQL开启外联	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/MySQL%E5%BC%80%E5%90%AF%E5%A4%96%E8%81%94.md
MySQL连接读取文件	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/MySQL%E8%BF%9E%E6%8E%A5%E8%AF%BB%E5%8F%96%E6%96%87%E4%BB%B6.md
MySQL不登陆执行命令	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/MySQL%E4%B8%8D%E7%99%BB%E9%99%86%E6%89%A7%E8%A1%8C%E5%91%BD%E4%BB%A4.md
近源攻击	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E8%BF%91%E6%BA%90%E6%94%BB%E5%87%BB/README.md
WI-FI破解	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E8%BF%91%E6%BA%90%E6%94%BB%E5%87%BB/WI-FI%E7%A0%B4%E8%A7%A3.md
钓鱼网络	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E8%BF%91%E6%BA%90%E6%94%BB%E5%87%BB/%E9%92%93%E9%B1%BC%E7%BD%91%E7%BB%9C.md
无线干扰	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E8%BF%91%E6%BA%90%E6%94%BB%E5%87%BB/%E6%97%A0%E7%BA%BF%E5%B9%B2%E6%89%B0.md
BadUSB	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E8%BF%91%E6%BA%90%E6%94%BB%E5%87%BB/BadUSB.md
蓝牙	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E8%BF%91%E6%BA%90%E6%94%BB%E5%87%BB/%E8%93%9D%E7%89%99.md
克隆卡	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E8%BF%91%E6%BA%90%E6%94%BB%E5%87%BB/%E5%85%8B%E9%9A%86%E5%8D%A1.md
鱼叉式攻击	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E9%B1%BC%E5%8F%89%E5%BC%8F%E6%94%BB%E5%87%BB/README.md
钓鱼邮件	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E9%B1%BC%E5%8F%89%E5%BC%8F%E6%94%BB%E5%87%BB/%E9%92%93%E9%B1%BC%E9%82%AE%E4%BB%B6.md
钓鱼连接	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E9%B1%BC%E5%8F%89%E5%BC%8F%E6%94%BB%E5%87%BB/%E9%92%93%E9%B1%BC%E8%BF%9E%E6%8E%A5.md
第三方鱼叉	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE/%E9%B1%BC%E5%8F%89%E5%BC%8F%E6%94%BB%E5%87%BB/%E7%AC%AC%E4%B8%89%E6%96%B9%E9%B1%BC%E5%8F%89.md
防御规避	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/README.md
C#源码免杀	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/C#%E6%BA%90%E7%A0%81%E5%85%8D%E6%9D%80/README.md
直接编译	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/C#%E6%BA%90%E7%A0%81%E5%85%8D%E6%9D%80/%E7%9B%B4%E6%8E%A5%E7%BC%96%E8%AF%91.md
CSC+InstallUtil	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/C#%E6%BA%90%E7%A0%81%E5%85%8D%E6%9D%80/CSC+InstallUtil.md
加密处理	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/C#%E6%BA%90%E7%A0%81%E5%85%8D%E6%9D%80/%E5%8A%A0%E5%AF%86%E5%A4%84%E7%90%86.md
XOR和AES编码	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/C#%E6%BA%90%E7%A0%81%E5%85%8D%E6%9D%80/XOR%E5%92%8CAES%E7%BC%96%E7%A0%81.md
Python源码免杀	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Python%E6%BA%90%E7%A0%81%E5%85%8D%E6%9D%80/README.md
pyinstaller加载C代码编译	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Python%E6%BA%90%E7%A0%81%E5%85%8D%E6%9D%80/pyinstaller%E5%8A%A0%E8%BD%BDC%E4%BB%A3%E7%A0%81%E7%BC%96%E8%AF%91.md
加载器分离	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Python%E6%BA%90%E7%A0%81%E5%85%8D%E6%9D%80/%E5%8A%A0%E8%BD%BD%E5%99%A8%E5%88%86%E7%A6%BB.md
Base64编码+Pyinstaller打包	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Python%E6%BA%90%E7%A0%81%E5%85%8D%E6%9D%80/Base64%E7%BC%96%E7%A0%81+Pyinstaller%E6%89%93%E5%8C%85.md
pyinstaller加载py代码编译	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Python%E6%BA%90%E7%A0%81%E5%85%8D%E6%9D%80/pyinstaller%E5%8A%A0%E8%BD%BDpy%E4%BB%A3%E7%A0%81%E7%BC%96%E8%AF%91.md
Powershell免杀	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Powershell%E5%85%8D%E6%9D%80/README.md
行为检测	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Powershell%E5%85%8D%E6%9D%80/%E8%A1%8C%E4%B8%BA%E6%A3%80%E6%B5%8B.md
分块免杀	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Powershell%E5%85%8D%E6%9D%80/%E5%88%86%E5%9D%97%E5%85%8D%E6%9D%80.md
拆分+C编译	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Powershell%E5%85%8D%E6%9D%80/%E6%8B%86%E5%88%86+C%E7%BC%96%E8%AF%91.md
CobaltStrike+Powershell免杀	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Powershell%E5%85%8D%E6%9D%80/CobaltStrike+Powershell%E5%85%8D%E6%9D%80.md
Out-EncryptedScript	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Powershell%E5%85%8D%E6%9D%80/Out-EncryptedScript.md
Invoke-Shellcode	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Powershell%E5%85%8D%E6%9D%80/Invoke-Shellcode.md
Invoke-Obfuscation	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Powershell%E5%85%8D%E6%9D%80/obfuscation.md
直接生成	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Powershell%E5%85%8D%E6%9D%80/%E7%9B%B4%E6%8E%A5%E7%94%9F%E6%88%90.md
PyFuscation	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Powershell%E5%85%8D%E6%9D%80/PyFuscation.md
Xencrypt	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Powershell%E5%85%8D%E6%9D%80/Xencrypt.md
the-backdoor-factory	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/the-backdoor-factory.md
捆绑器	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/%E6%8D%86%E7%BB%91%E5%99%A8.md
DLL劫持	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/DLL%E5%8A%AB%E6%8C%81.md
Evasion模块	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Evasion%E6%A8%A1%E5%9D%97.md
Golang	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Golang.md
GreatSCT	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/GreatSCT.md
hanzoInjection	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/hanzoInjection.md
InstallUtil	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/InstallUtil.md
加载器免杀	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/%E5%8A%A0%E8%BD%BD%E5%99%A8%E5%85%8D%E6%9D%80/README.md
shellcode_launcher	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/%E5%8A%A0%E8%BD%BD%E5%99%A8%E5%85%8D%E6%9D%80/shellcode_launcher.md
SSI加载	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/%E5%8A%A0%E8%BD%BD%E5%99%A8%E5%85%8D%E6%9D%80/SSI%E5%8A%A0%E8%BD%BD.md
MSBuilt	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/MSBuilt.md
MSF捆绑	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/MSF%E6%8D%86%E7%BB%91.md
MSF+shellcode免杀	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/MSF+shellcode%E5%85%8D%E6%9D%80/README.md
c和c++源码免杀	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/MSF+shellcode%E5%85%8D%E6%9D%80/c%E5%92%8Cc++%E6%BA%90%E7%A0%81%E5%85%8D%E6%9D%80.md
编码器	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/MSF+shellcode%E5%85%8D%E6%9D%80/%E7%BC%96%E7%A0%81%E5%99%A8.md
nps_payload	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/MSF+shellcode%E5%85%8D%E6%9D%80/nps_payload.md
Mshta	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Mshta.md
Phantom-Evasion	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Phantom-Evasion.md
RC4	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/RC4.md
Ruby	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Ruby.md
Shellter	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Shellter.md
Veil	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/Veil.md
zirikatu	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/zirikatu.md
carboncopy	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/carboncopy.md
avet	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/avet.md
c代码加载图片马	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E9%98%B2%E5%BE%A1%E8%A7%84%E9%81%BF/c%E4%BB%A3%E7%A0%81%E5%8A%A0%E8%BD%BD%E5%9B%BE%E7%89%87%E9%A9%AC.md
权限提升	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/README.md
Windows提权	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/README.md
RDP&Firewall	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/RDP&Firewall/README.md
爆破RDP	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/RDP&Firewall/%E7%88%86%E7%A0%B4RDP.md
注册表开启	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/RDP&Firewall/%E6%B3%A8%E5%86%8C%E8%A1%A8%E5%BC%80%E5%90%AF.md
防火墙	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/RDP&Firewall/%E9%98%B2%E7%81%AB%E5%A2%99.md
注入点开启	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/RDP&Firewall/%E6%B3%A8%E5%85%A5%E7%82%B9%E5%BC%80%E5%90%AF.md
MSF开启	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/RDP&Firewall/MSF%E5%BC%80%E5%90%AF.md
wmic开启	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/RDP&Firewall/wmic%E5%BC%80%E5%90%AF.md
多用户登陆	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/RDP&Firewall/%E5%A4%9A%E7%94%A8%E6%88%B7%E7%99%BB%E9%99%86.md
RDP连接记录	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/RDP&Firewall/RDP%E8%BF%9E%E6%8E%A5%E8%AE%B0%E5%BD%95.md
删除痕迹	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/RDP&Firewall/%E5%88%A0%E9%99%A4%E7%97%95%E8%BF%B9.md
impactet工具包	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/impactet%E5%B7%A5%E5%85%B7%E5%8C%85.md
Windows-exploit-suggester	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/Windows-exploit-suggester.md
Wesng	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/Wesng.md
Searchsploit	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/Searchsploit.md
激活guest	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E6%BF%80%E6%B4%BBguest.md
MYSQLudf	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/MYSQLudf.md
MSSQL	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/MSSQL.md
MSF	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/MSF.md
BypassUAC	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/BypassUAC.md
Whitelist白名单	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/Whitelist%E7%99%BD%E5%90%8D%E5%8D%95.md
Powerup-AlwaysInstallElevated	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/Powerup-AlwaysInstallElevated.md
AlwaysInstallElevated提权	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/AlwaysInstallElevated%E6%8F%90%E6%9D%83.md
密码窃取	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E5%AF%86%E7%A0%81%E7%AA%83%E5%8F%96.md
RottenPotato	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/RottenPotato.md
PowerUp	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/PowerUp.md
Runas	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/Runas.md
令牌窃取	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E4%BB%A4%E7%89%8C%E7%AA%83%E5%8F%96.md
未引用的服务路径	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E6%9C%AA%E5%BC%95%E7%94%A8%E7%9A%84%E6%9C%8D%E5%8A%A1%E8%B7%AF%E5%BE%84.md
Vulnerable-Services	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/Vulnerable-Services.md
DNS组到DomainAdmin	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/DNS%E7%BB%84%E5%88%B0DomainAdmin.md
HiveNightmare	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/HiveNightmare.md
PrintNightmare	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/PrintNightmare.md
SamAccountSpoofing	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/SamAccountSpoofing.md
SeBackupPrivilege	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/SeBackupPrivilege.md
SeImpersonatePrivilege	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/SeImpersonatePrivilege.md
SpoolFool	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/SpoolFool.md
弱注册表权限	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E5%BC%B1%E6%B3%A8%E5%86%8C%E8%A1%A8%E6%9D%83%E9%99%90.md
CVE-2020-1472	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/CVE-2020-1472.md
AppLocker	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/AppLocker.md
DLL劫持	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/DLL%E5%8A%AB%E6%8C%81.md
EFSPotato	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/EFSPotato.md
JuicyPotato	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/JuicyPotato.md
RoguePotato	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/RoguePotato.md
watson	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/watson.md
WSL子系统	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/WSL%E5%AD%90%E7%B3%BB%E7%BB%9F.md
本机文件和脚本	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E6%9C%AC%E6%9C%BA%E6%96%87%E4%BB%B6%E5%92%8C%E8%84%9A%E6%9C%AC.md
不安全的GUI应用程序	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E4%B8%8D%E5%AE%89%E5%85%A8%E7%9A%84GUI%E5%BA%94%E7%94%A8%E7%A8%8B%E5%BA%8F.md
从administrator到system	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E4%BB%8Eadministrator%E5%88%B0system.md
打印机漏洞	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E6%89%93%E5%8D%B0%E6%9C%BA%E6%BC%8F%E6%B4%9E.md
服务中的不正确权限	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E6%9C%8D%E5%8A%A1%E4%B8%AD%E7%9A%84%E4%B8%8D%E6%AD%A3%E7%A1%AE%E6%9D%83%E9%99%90.md
环境变量优先	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E7%8E%AF%E5%A2%83%E5%8F%98%E9%87%8F%E4%BC%98%E5%85%88.md
恢复服务帐户的权限	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E6%81%A2%E5%A4%8D%E6%9C%8D%E5%8A%A1%E5%B8%90%E6%88%B7%E7%9A%84%E6%9D%83%E9%99%90.md
弱权限的PATH目录	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E5%BC%B1%E6%9D%83%E9%99%90%E7%9A%84PATH%E7%9B%AE%E5%BD%95.md
特权文件写入	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E7%89%B9%E6%9D%83%E6%96%87%E4%BB%B6%E5%86%99%E5%85%A5.md
未引用的服务路径	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Windows%E6%8F%90%E6%9D%83/%E6%9C%AA%E5%BC%95%E7%94%A8%E7%9A%84%E6%9C%8D%E5%8A%A1%E8%B7%AF%E5%BE%84.md
Linux提权	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/README.md
查找辅助信息	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/%E6%9F%A5%E6%89%BE%E8%BE%85%E5%8A%A9%E4%BF%A1%E6%81%AF.md
查找可能泄露的密码	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/%E6%9F%A5%E6%89%BE%E5%8F%AF%E8%83%BD%E6%B3%84%E9%9C%B2%E7%9A%84%E5%AF%86%E7%A0%81.md
Linux-Exploit-Suggester	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/Linux-Exploit-Suggester.md
一些检测工具	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/%E4%B8%80%E4%BA%9B%E6%A3%80%E6%B5%8B%E5%B7%A5%E5%85%B7.md
Linux计划任务	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/Linux%E8%AE%A1%E5%88%92%E4%BB%BB%E5%8A%A1.md
可写文件提权	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/%E5%8F%AF%E5%86%99%E6%96%87%E4%BB%B6%E6%8F%90%E6%9D%83.md
Sudo提权	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/Sudo%E6%8F%90%E6%9D%83.md
Linux SUID提权	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/LinuxSUID%E6%8F%90%E6%9D%83.md
漏洞提权	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/%E6%BC%8F%E6%B4%9E%E6%8F%90%E6%9D%83.md
MYSQL-Linux-Root	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/MYSQL-Linux-Root.md
LD_Preload提权	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/LD_Preload.md
Lxd提权	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/Lxd%E6%8F%90%E6%9D%83.md
MYSQL漏洞	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/MYSQL%E6%BC%8F%E6%B4%9E.md
环境变量提权	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/%E7%8E%AF%E5%A2%83%E5%8F%98%E9%87%8F%E6%8F%90%E6%9D%83.md
通配符提权	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Linux%E6%8F%90%E6%9D%83/%E9%80%9A%E9%85%8D%E7%AC%A6%E6%8F%90%E6%9D%83.md
文件操作	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/README.md
创建	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E5%88%9B%E5%BB%BA.md
Windows查找文件	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/Windows%E6%9F%A5%E6%89%BE%E6%96%87%E4%BB%B6.md
Linux查找文件	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/Linux%E6%9F%A5%E6%89%BE%E6%96%87%E4%BB%B6.md
解压	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E8%A7%A3%E5%8E%8B.md
压缩	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E5%8E%8B%E7%BC%A9.md
查找可写目录	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E6%9F%A5%E6%89%BE%E5%8F%AF%E5%86%99%E7%9B%AE%E5%BD%95.md
传输	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E4%BC%A0%E8%BE%93/README.md
Bitsadmin	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E4%BC%A0%E8%BE%93/bitsadmin.md
Certutil	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E4%BC%A0%E8%BE%93/certutil.md
Curl	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E4%BC%A0%E8%BE%93/curl.md
Ftp	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E4%BC%A0%E8%BE%93/ftp.md
JS	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E4%BC%A0%E8%BE%93/js.md
nc	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E4%BC%A0%E8%BE%93/nc.md
perl	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E4%BC%A0%E8%BE%93/perl.md
php	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E4%BC%A0%E8%BE%93/php.md
powershell	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E4%BC%A0%E8%BE%93/powershell.md
py	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E4%BC%A0%E8%BE%93/py.md
SCP	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E4%BC%A0%E8%BE%93/scp.md
vbs	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E4%BC%A0%E8%BE%93/vbs.md
wget	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C/%E4%BC%A0%E8%BE%93/wget.md
内网和域	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/README.md
信息搜集	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E4%BF%A1%E6%81%AF%E6%90%9C%E9%9B%86/README.md
Windows安全标识符SID	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E4%BF%A1%E6%81%AF%E6%90%9C%E9%9B%86/Windows%E5%AE%89%E5%85%A8%E6%A0%87%E8%AF%86%E7%AC%A6SID.md
Powershell基础操作	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E4%BF%A1%E6%81%AF%E6%90%9C%E9%9B%86/Powershell%E5%9F%BA%E7%A1%80%E6%93%8D%E4%BD%9C.md
Cmd	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E4%BF%A1%E6%81%AF%E6%90%9C%E9%9B%86/Cmd.md
Linux	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E4%BF%A1%E6%81%AF%E6%90%9C%E9%9B%86/Linux.md
Powerview	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E4%BF%A1%E6%81%AF%E6%90%9C%E9%9B%86/Powerview.md
BloodHoundAD	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E4%BF%A1%E6%81%AF%E6%90%9C%E9%9B%86/BloodHoundAD.md
ADDomain	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E4%BF%A1%E6%81%AF%E6%90%9C%E9%9B%86/ADDomain.md
临时HTTP服务架设	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E4%BF%A1%E6%81%AF%E6%90%9C%E9%9B%86/%E4%B8%B4%E6%97%B6HTTP%E6%9C%8D%E5%8A%A1%E6%9E%B6%E8%AE%BE.md
Wmi	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E4%BF%A1%E6%81%AF%E6%90%9C%E9%9B%86/Wmi.md
端口映射和转发	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E7%AB%AF%E5%8F%A3%E6%98%A0%E5%B0%84%E5%92%8C%E8%BD%AC%E5%8F%91/README.md
chisel	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E7%AB%AF%E5%8F%A3%E6%98%A0%E5%B0%84%E5%92%8C%E8%BD%AC%E5%8F%91/chisel.md
iptables	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E7%AB%AF%E5%8F%A3%E6%98%A0%E5%B0%84%E5%92%8C%E8%BD%AC%E5%8F%91/iptables.md
lcx	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E7%AB%AF%E5%8F%A3%E6%98%A0%E5%B0%84%E5%92%8C%E8%BD%AC%E5%8F%91/lcx.md
msf	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E7%AB%AF%E5%8F%A3%E6%98%A0%E5%B0%84%E5%92%8C%E8%BD%AC%E5%8F%91/msf.md
netsh	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E7%AB%AF%E5%8F%A3%E6%98%A0%E5%B0%84%E5%92%8C%E8%BD%AC%E5%8F%91/netsh.md
ssf	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E7%AB%AF%E5%8F%A3%E6%98%A0%E5%B0%84%E5%92%8C%E8%BD%AC%E5%8F%91/ssf.md
ssh	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E7%AB%AF%E5%8F%A3%E6%98%A0%E5%B0%84%E5%92%8C%E8%BD%AC%E5%8F%91/ssh.md
SharpChisel	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E7%AB%AF%E5%8F%A3%E6%98%A0%E5%B0%84%E5%92%8C%E8%BD%AC%E5%8F%91/SharpChisel.md
Ligolo	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E7%AB%AF%E5%8F%A3%E6%98%A0%E5%B0%84%E5%92%8C%E8%BD%AC%E5%8F%91/Ligolo.md
命令与控制	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/README.md
Metasploit	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Metasploit/README.md
常规使用	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Metasploit/%E5%B8%B8%E8%A7%84%E4%BD%BF%E7%94%A8.md
细节使用	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Metasploit/%E7%BB%86%E8%8A%82%E4%BD%BF%E7%94%A8.md
模块	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Metasploit/%E6%A8%A1%E5%9D%97.md
meterpreter	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Metasploit/meterpreter.md
与cs和empire交互	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Metasploit/%E4%B8%8Ecs%E5%92%8Cempire%E4%BA%A4%E4%BA%92.md
CobaltStrike	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/README.md
安装	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E5%AE%89%E8%A3%85.md
部署	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E9%83%A8%E7%BD%B2.md
模块	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E6%A8%A1%E5%9D%97.md
连接	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E8%BF%9E%E6%8E%A5.md
监听	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E7%9B%91%E5%90%AC.md
攻击模块	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E6%94%BB%E5%87%BB%E6%A8%A1%E5%9D%97.md
视图模块	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E8%A7%86%E5%9B%BE%E6%A8%A1%E5%9D%97.md
交互	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E4%BA%A4%E4%BA%92.md
Beacon	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/Beacon.md
克隆	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E5%85%8B%E9%9A%86.md
office宏	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/office%E5%AE%8F.md
钓鱼邮件	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E9%92%93%E9%B1%BC%E9%82%AE%E4%BB%B6.md
加载脚本	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E5%8A%A0%E8%BD%BD%E8%84%9A%E6%9C%AC.md
浏览器劫持	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E6%B5%8F%E8%A7%88%E5%99%A8%E5%8A%AB%E6%8C%81.md
权限维持	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81.md
横向移动	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8.md
隔离网络	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E9%9A%94%E7%A6%BB%E7%BD%91%E7%BB%9C.md
代理	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E4%BB%A3%E7%90%86.md
Malleable C2	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4&%E6%8E%A7%E5%88%B6/CobaltStrike/Malleable-C2.md
部署VPN	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E9%83%A8%E7%BD%B2VPN.md
与msf和empire交互	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E4%B8%8Emsf%E5%92%8Cempire%E4%BA%A4%E4%BA%92.md
上线提醒	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike/%E4%B8%8A%E7%BA%BF%E6%8F%90%E9%86%92.md
Empire	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Empire/README.md
安装	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Empire/%E5%AE%89%E8%A3%85.md
监听	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Empire/%E7%9B%91%E5%90%AC.md
生成	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Empire/%E7%94%9F%E6%88%90.md
后门	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Empire/%E5%90%8E%E9%97%A8.md
连接靶机及其他操作	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Empire/%E8%BF%9E%E6%8E%A5%E9%9D%B6%E6%9C%BA%E5%8F%8A%E5%85%B6%E4%BB%96%E6%93%8D%E4%BD%9C.md
权限提升	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Empire/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87.md
横向移动	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Empire/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8.md
模块	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Empire/%E6%A8%A1%E5%9D%97.md
与cs和msf交互	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Empire/%E4%B8%8Ecs%E5%92%8Cmsf%E4%BA%A4%E4%BA%92.md
Empire_Word	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Empire/Empire_Word.md
交互式shell	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/%E4%BA%A4%E4%BA%92%E5%BC%8Fshell.md
crackmap	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/crackmap.md
CobaltStrike	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/CobaltStrike.md
dnscat	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/dnscat.md
DNS-TXT-Command	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/DNS-TXT-Command.md
Empire	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Empire.md
Jsrat	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Jsrat.md
koadic	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/koadic.md
MSF	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/MSF.md
Openssl	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Openssl.md
Powershell	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Powershell.md
反弹shell	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/%E5%8F%8D%E5%BC%B9shell.md
SILENTTRINITY	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/SILENTTRINITY.md
telegram	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/telegram.md
browser	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/browser.md
Gmail	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Gmail.md
Dropbox	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/Dropbox.md
工具	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/%E5%B7%A5%E5%85%B7.md
下载并执行	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E5%86%85%E7%BD%91%E5%92%8C%E5%9F%9F/%E5%91%BD%E4%BB%A4%E4%B8%8E%E6%8E%A7%E5%88%B6/%E4%B8%8B%E8%BD%BD%E5%B9%B6%E6%89%A7%E8%A1%8C.md
HASH操作	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/README.md
密码破解网站	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E5%AF%86%E7%A0%81%E7%A0%B4%E8%A7%A3%E7%BD%91%E7%AB%99.md
GoogleColab破解HASH操作	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/GoogleColab%E7%A0%B4%E8%A7%A3HASH%E6%93%8D%E4%BD%9C.md
密码策略	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E5%AF%86%E7%A0%81%E7%AD%96%E7%95%A5.md
开启Wdigest	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E5%BC%80%E5%90%AFWdigest.md
Getpass	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/Getpass.md
QuarksPwDump	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/QuarksPwDump.md
MSF	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/MSF.md
mimikatz	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/README.md
绕过卡巴斯基	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/%E7%BB%95%E8%BF%87%E5%8D%A1%E5%B7%B4%E6%96%AF%E5%9F%BA.md
Cisco_Jabber转储lsass	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/Cisco_Jabber%E8%BD%AC%E5%82%A8lsass.md
dotnet2.0	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/dotnet2.0.md
dotnet4.0Msbuild	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/dotnet4.0Msbuild.md
Dumpert	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/Dumpert.md
JScript	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/JScript.md
mimikatz	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/mimikatz.md
mimipenguin	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/mimipenguin.md
横向批量抓HASH操作	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/%E6%A8%AA%E5%90%91%E6%89%B9%E9%87%8F%E6%8A%93HASH%E6%93%8D%E4%BD%9C.md
远程LSASS进程转储-Physmem2profit	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/%E8%BF%9C%E7%A8%8BLSASS%E8%BF%9B%E7%A8%8B%E8%BD%AC%E5%82%A8-Physmem2profit.md
Powershell_Bypass	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/Powershell_Bypass.md
Procdump64+mimikatz	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/Procdump64+mimikatz.md
调用mimikatz远程抓取	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/%E8%B0%83%E7%94%A8mimikatz%E8%BF%9C%E7%A8%8B%E6%8A%93%E5%8F%96.md
SqlDumper+mimikatz	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/mimikatz/sqldumpermimikatz.md
域HASH提取	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E5%9F%9FHASH%E6%8F%90%E5%8F%96/README.md
impacket工具包	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E5%9F%9FHASH%E6%8F%90%E5%8F%96/impacket%E5%B7%A5%E5%85%B7%E5%8C%85.md
mimikatz	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E5%9F%9FHASH%E6%8F%90%E5%8F%96/mimikatz.md
MSF	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E5%9F%9FHASH%E6%8F%90%E5%8F%96/MSF.md
Nishang脚本	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E5%9F%9FHASH%E6%8F%90%E5%8F%96/Nishang%E8%84%9A%E6%9C%AC.md
NTDSDumpex	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E5%9F%9FHASH%E6%8F%90%E5%8F%96/NTDSDumpex.md
Ntdsutil	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E5%9F%9FHASH%E6%8F%90%E5%8F%96/Ntdsutil.md
Powersploit	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E5%9F%9FHASH%E6%8F%90%E5%8F%96/Powersploit.md
Vssadmin	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E5%9F%9FHASH%E6%8F%90%E5%8F%96/Vssadmin.md
Wmivssadmin	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E5%9F%9FHASH%E6%8F%90%E5%8F%96/Wmivssadmin.md
esentutl	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E5%9F%9FHASH%E6%8F%90%E5%8F%96/esentutl.md
缓存HASH获取	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E7%BC%93%E5%AD%98HASH%E8%8E%B7%E5%8F%96/README.md
Ninjacopy	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E7%BC%93%E5%AD%98HASH%E8%8E%B7%E5%8F%96/Ninjacopy.md
Quarks-pwdump	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E7%BC%93%E5%AD%98HASH%E8%8E%B7%E5%8F%96/Quarks-pwdump.md
注册表	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E7%BC%93%E5%AD%98HASH%E8%8E%B7%E5%8F%96/%E6%B3%A8%E5%86%8C%E8%A1%A8.md
Empire	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/Empire.md
Invoke-Dcsync	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/Invoke-Dcsync.md
laZagne	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/laZagne.md
获取其他密码	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E8%8E%B7%E5%8F%96%E5%85%B6%E4%BB%96%E5%AF%86%E7%A0%81/README.md
chrome	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E8%8E%B7%E5%8F%96%E5%85%B6%E4%BB%96%E5%AF%86%E7%A0%81/chrome.md
firefox	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E8%8E%B7%E5%8F%96%E5%85%B6%E4%BB%96%E5%AF%86%E7%A0%81/firefox.md
foxmail	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E8%8E%B7%E5%8F%96%E5%85%B6%E4%BB%96%E5%AF%86%E7%A0%81/foxmail.md
navicat	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E8%8E%B7%E5%8F%96%E5%85%B6%E4%BB%96%E5%AF%86%E7%A0%81/navicat.md
seatbelt	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E8%8E%B7%E5%8F%96%E5%85%B6%E4%BB%96%E5%AF%86%E7%A0%81/seatbelt.md
securecrt	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E8%8E%B7%E5%8F%96%E5%85%B6%E4%BB%96%E5%AF%86%E7%A0%81/securecrt.md
vncpass	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E8%8E%B7%E5%8F%96%E5%85%B6%E4%BB%96%E5%AF%86%E7%A0%81/vncpass.md
破解工具	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E7%A0%B4%E8%A7%A3%E5%B7%A5%E5%85%B7/README.md
hydra	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E7%A0%B4%E8%A7%A3%E5%B7%A5%E5%85%B7/hydra.md
medusa	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/HASH%E6%93%8D%E4%BD%9C/%E7%A0%B4%E8%A7%A3%E5%B7%A5%E5%85%B7/medusa.md
横向移动	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/README.md
添加域管命令	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%B7%BB%E5%8A%A0%E5%9F%9F%E7%AE%A1%E5%91%BD%E4%BB%A4.md
探测存活主机	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E5%AD%98%E6%B4%BB%E4%B8%BB%E6%9C%BA/README.md
For+Ping命令查询存活主机	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E5%AD%98%E6%B4%BB%E4%B8%BB%E6%9C%BA/For+Ping%E5%91%BD%E4%BB%A4%E6%9F%A5%E8%AF%A2%E5%AD%98%E6%B4%BB%E4%B8%BB%E6%9C%BA.md
MSF	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E5%AD%98%E6%B4%BB%E4%B8%BB%E6%9C%BA/MSF.md
NbtScan	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E5%AD%98%E6%B4%BB%E4%B8%BB%E6%9C%BA/NbtScan.md
NetDiscover	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E5%AD%98%E6%B4%BB%E4%B8%BB%E6%9C%BA/NetDiscover.md
NMAP	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E5%AD%98%E6%B4%BB%E4%B8%BB%E6%9C%BA/NMAP.md
rp-scan	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E5%AD%98%E6%B4%BB%E4%B8%BB%E6%9C%BA/rp-scan.md
代理nmap扫描	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E5%AD%98%E6%B4%BB%E4%B8%BB%E6%9C%BA/%E4%BB%A3%E7%90%86nmap%E6%89%AB%E6%8F%8F.md
内外网资产对应	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E5%AD%98%E6%B4%BB%E4%B8%BB%E6%9C%BA/%E5%86%85%E5%A4%96%E7%BD%91%E8%B5%84%E4%BA%A7%E5%AF%B9%E5%BA%94.md
探测服务&端口	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E6%9C%8D%E5%8A%A1&%E7%AB%AF%E5%8F%A3/README.md
CobaltStrike+K8Aggressor	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E6%9C%8D%E5%8A%A1&%E7%AB%AF%E5%8F%A3/CobaltStrike+K8Aggressor.md
Linux_Samba服务	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E6%9C%8D%E5%8A%A1&%E7%AB%AF%E5%8F%A3/Linux_Samba%E6%9C%8D%E5%8A%A1.md
Masscan	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E6%9C%8D%E5%8A%A1&%E7%AB%AF%E5%8F%A3/Masscan.md
MSF	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E6%9C%8D%E5%8A%A1&%E7%AB%AF%E5%8F%A3/MSF.md
Nc	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E6%9C%8D%E5%8A%A1&%E7%AB%AF%E5%8F%A3/Nc.md
常见端口	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E6%9C%8D%E5%8A%A1&%E7%AB%AF%E5%8F%A3/%E5%B8%B8%E8%A7%81%E7%AB%AF%E5%8F%A3.md
Powershell	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E6%9C%8D%E5%8A%A1&%E7%AB%AF%E5%8F%A3/Powershell.md
PTScan	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E6%9C%8D%E5%8A%A1&%E7%AB%AF%E5%8F%A3/PTScan.md
SMB	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%8E%A2%E6%B5%8B%E6%9C%8D%E5%8A%A1&%E7%AB%AF%E5%8F%A3/SMB.md
执行命令&IPC&计划任务	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%89%A7%E8%A1%8C%E5%91%BD%E4%BB%A4&IPC&%E8%AE%A1%E5%88%92%E4%BB%BB%E5%8A%A1/README.md
AT	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%89%A7%E8%A1%8C%E5%91%BD%E4%BB%A4&IPC&%E8%AE%A1%E5%88%92%E4%BB%BB%E5%8A%A1/AT.md
IPC	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%89%A7%E8%A1%8C%E5%91%BD%E4%BB%A4&IPC&%E8%AE%A1%E5%88%92%E4%BB%BB%E5%8A%A1/IPC.md
Schtasks	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%89%A7%E8%A1%8C%E5%91%BD%E4%BB%A4&IPC&%E8%AE%A1%E5%88%92%E4%BB%BB%E5%8A%A1/Schtasks.md
Wmic	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%89%A7%E8%A1%8C%E5%91%BD%E4%BB%A4&IPC&%E8%AE%A1%E5%88%92%E4%BB%BB%E5%8A%A1/Wmic.md
共享	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E5%85%B1%E4%BA%AB.md
快速定位域管理登过的机器	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E5%BF%AB%E9%80%9F%E5%AE%9A%E4%BD%8D%E5%9F%9F%E7%AE%A1%E7%90%86%E7%99%BB%E8%BF%87%E7%9A%84%E6%9C%BA%E5%99%A8.md
MSF管道监听	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/MSF%E7%AE%A1%E9%81%93%E7%9B%91%E5%90%AC.md
MSF添加路由	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/MSF%E6%B7%BB%E5%8A%A0%E8%B7%AF%E7%94%B1.md
代理	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E4%BB%A3%E7%90%86/README.md
chisel	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E4%BB%A3%E7%90%86/chisel.md
earthworm	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E4%BB%A3%E7%90%86/earthworm.md
frp	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E4%BB%A3%E7%90%86/frp.md
goproxy	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E4%BB%A3%E7%90%86/goproxy.md
shadowsocks	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E4%BB%A3%E7%90%86/shadowsocks.md
sock4a	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E4%BB%A3%E7%90%86/sock4a.md
socks5	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E4%BB%A3%E7%90%86/socks5.md
socks5web	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E4%BB%A3%E7%90%86/socks5web.md
SSF	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E4%BB%A3%E7%90%86/ssf.md
SSH	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E4%BB%A3%E7%90%86/ssh.md
Gost	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E4%BB%A3%E7%90%86/Gost.md
revsocks	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E4%BB%A3%E7%90%86/revsocks.md
代理软件	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E4%BB%A3%E7%90%86/%E4%BB%A3%E7%90%86%E8%BD%AF%E4%BB%B6.md
Ngrok内网穿透	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/Ngrok%E5%86%85%E7%BD%91%E7%A9%BF%E9%80%8F.md
MS08_067	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/MS08_067.md
MS17_010	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/MS17_010.md
方程式内网不产生session	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%96%B9%E7%A8%8B%E5%BC%8F%E5%86%85%E7%BD%91%E4%B8%8D%E4%BA%A7%E7%94%9Fsession.md
域内爆破	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E5%9F%9F%E5%86%85%E7%88%86%E7%A0%B4.md
隔离主机payload	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E9%9A%94%E7%A6%BB%E4%B8%BB%E6%9C%BApayload.md
PASS-THE-HASH	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/PASS-THE-HASH.md
PASS-THE-TICKET	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/PASS-THE-TICKET.md
PASS-THE-KEY	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/PASS-THE-KEY.md
ASEPRoasting	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ASEPRoasting.md
攻击MSSQL数据库	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%94%BB%E5%87%BBMSSQL%E6%95%B0%E6%8D%AE%E5%BA%93.md
攻击MySQL数据库	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E6%94%BB%E5%87%BBMySQL%E6%95%B0%E6%8D%AE%E5%BA%93.md
账户委派	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E8%B4%A6%E6%88%B7%E5%A7%94%E6%B4%BE.md
kerberos约束委派	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/kerberos%E7%BA%A6%E6%9D%9F%E5%A7%94%E6%B4%BE.md
kerberos无约束委派	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/kerberos%E6%97%A0%E7%BA%A6%E6%9D%9F%E5%A7%94%E6%B4%BE.md
kerberos青铜比特攻击CVE-2020-17049	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/kerberos%E9%9D%92%E9%93%9C%E6%AF%94%E7%89%B9%E6%94%BB%E5%87%BBCVE-2020-17049.md
基于kerberos资源的约束委派	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E5%9F%BA%E4%BA%8Ekerberos%E8%B5%84%E6%BA%90%E7%9A%84%E7%BA%A6%E6%9D%9F%E5%A7%94%E6%B4%BE.md
CVE-2019-0708	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/CVE-2019-0708.md
获取保存的RDP密码	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E8%8E%B7%E5%8F%96%E4%BF%9D%E5%AD%98%E7%9A%84RDP%E5%AF%86%E7%A0%81.md
GPP-Password	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/GPP-Password.md
Kerberoasting	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/Kerberoasting/README.md
申请票据	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/Kerberoasting/%E7%94%B3%E8%AF%B7%E7%A5%A8%E6%8D%AE.md
破解密码	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/Kerberoasting/%E7%A0%B4%E8%A7%A3%E5%AF%86%E7%A0%81.md
导出票据	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/Kerberoasting/%E5%AF%BC%E5%87%BA%E7%A5%A8%E6%8D%AE.md
SPN发现	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/Kerberoasting/SPN%E5%8F%91%E7%8E%B0.md
GetUserSPNs	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/Kerberoasting/GetUserSPNs.md
重写票据	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/Kerberoasting/%E9%87%8D%E5%86%99%E7%A5%A8%E6%8D%AE.md
NTLM中继和中间人攻击	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/NTLM%E4%B8%AD%E7%BB%A7%E5%92%8C%E4%B8%AD%E9%97%B4%E4%BA%BA%E6%94%BB%E5%87%BB/README.md
Ntlmrelayx+资源受限委派	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/NTLM%E4%B8%AD%E7%BB%A7%E5%92%8C%E4%B8%AD%E9%97%B4%E4%BA%BA%E6%94%BB%E5%87%BB/Ntlmrelayx+%E8%B5%84%E6%BA%90%E5%8F%97%E9%99%90%E5%A7%94%E6%B4%BE.md
Responder+LLMNR毒害	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/NTLM%E4%B8%AD%E7%BB%A7%E5%92%8C%E4%B8%AD%E9%97%B4%E4%BA%BA%E6%94%BB%E5%87%BB/Responder+LLMNR%E6%AF%92%E5%AE%B3.md
捕获和破解Net-NTLMv1和NTLMv1哈希	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/NTLM%E4%B8%AD%E7%BB%A7%E5%92%8C%E4%B8%AD%E9%97%B4%E4%BA%BA%E6%94%BB%E5%87%BB/%E6%8D%95%E8%8E%B7%E5%92%8C%E7%A0%B4%E8%A7%A3Net-NTLMv1%E5%92%8CNTLMv1%E5%93%88%E5%B8%8C.md
CVE-2019-1040	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/NTLM%E4%B8%AD%E7%BB%A7%E5%92%8C%E4%B8%AD%E9%97%B4%E4%BA%BA%E6%94%BB%E5%87%BB/CVE-2019-1040.md
CVE-2019-1384	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/NTLM%E4%B8%AD%E7%BB%A7%E5%92%8C%E4%B8%AD%E9%97%B4%E4%BA%BA%E6%94%BB%E5%87%BB/CVE-2019-1384.md
DNS-Poisonning	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/NTLM%E4%B8%AD%E7%BB%A7%E5%92%8C%E4%B8%AD%E9%97%B4%E4%BA%BA%E6%94%BB%E5%87%BB/DNS-Poisonning.md
MS08-068-NTLM反射	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/NTLM%E4%B8%AD%E7%BB%A7%E5%92%8C%E4%B8%AD%E9%97%B4%E4%BA%BA%E6%94%BB%E5%87%BB/MS08-068-NTLM%E5%8F%8D%E5%B0%84.md
RemotePotato0	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/NTLM%E4%B8%AD%E7%BB%A7%E5%92%8C%E4%B8%AD%E9%97%B4%E4%BA%BA%E6%94%BB%E5%87%BB/RemotePotato0.md
SMB签名禁用和IPv4	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/NTLM%E4%B8%AD%E7%BB%A7%E5%92%8C%E4%B8%AD%E9%97%B4%E4%BA%BA%E6%94%BB%E5%87%BB/SMB%E7%AD%BE%E5%90%8D%E7%A6%81%E7%94%A8%E5%92%8CIPv4.md
SMB签名禁用和IPv6	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/NTLM%E4%B8%AD%E7%BB%A7%E5%92%8C%E4%B8%AD%E9%97%B4%E4%BA%BA%E6%94%BB%E5%87%BB/SMB%E7%AD%BE%E5%90%8D%E7%A6%81%E7%94%A8%E5%92%8CIPv6.md
WebDav中继	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/NTLM%E4%B8%AD%E7%BB%A7%E5%92%8C%E4%B8%AD%E9%97%B4%E4%BA%BA%E6%94%BB%E5%87%BB/WebDav%E4%B8%AD%E7%BB%A7.md
资源受限委派	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E8%B5%84%E6%BA%90%E5%8F%97%E9%99%90%E5%A7%94%E6%B4%BE.md
WinRM无文件执行	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/WinRM%E6%97%A0%E6%96%87%E4%BB%B6%E6%89%A7%E8%A1%8C.md
组策略对象GPO	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E7%BB%84%E7%AD%96%E7%95%A5%E5%AF%B9%E8%B1%A1GPO.md
危险的内置组使用	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E5%8D%B1%E9%99%A9%E7%9A%84%E5%86%85%E7%BD%AE%E7%BB%84%E4%BD%BF%E7%94%A8.md
ActiveDirectory证书服务	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E8%AF%81%E4%B9%A6%E6%9C%8D%E5%8A%A1/README.md
查找证书服务器	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E8%AF%81%E4%B9%A6%E6%9C%8D%E5%8A%A1/%E6%9F%A5%E6%89%BE%E8%AF%81%E4%B9%A6%E6%9C%8D%E5%8A%A1%E5%99%A8.md
ESC1-配置错误的证书模板	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E8%AF%81%E4%B9%A6%E6%9C%8D%E5%8A%A1/ESC1-%E9%85%8D%E7%BD%AE%E9%94%99%E8%AF%AF%E7%9A%84%E8%AF%81%E4%B9%A6%E6%A8%A1%E6%9D%BF.md
ESC2-配置错误的证书模板	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E8%AF%81%E4%B9%A6%E6%9C%8D%E5%8A%A1/ESC2-%E9%85%8D%E7%BD%AE%E9%94%99%E8%AF%AF%E7%9A%84%E8%AF%81%E4%B9%A6%E6%A8%A1%E6%9D%BF.md
ESC3-配置错误的注册代理模板	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E8%AF%81%E4%B9%A6%E6%9C%8D%E5%8A%A1/ESC3-%E9%85%8D%E7%BD%AE%E9%94%99%E8%AF%AF%E7%9A%84%E6%B3%A8%E5%86%8C%E4%BB%A3%E7%90%86%E6%A8%A1%E6%9D%BF.md
ESC4-访问控制漏洞	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E8%AF%81%E4%B9%A6%E6%9C%8D%E5%8A%A1/ESC4-%E8%AE%BF%E9%97%AE%E6%8E%A7%E5%88%B6%E6%BC%8F%E6%B4%9E.md
ESC6-EDITF_ATTRIBUTESUBJECTALTNAME2	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E8%AF%81%E4%B9%A6%E6%9C%8D%E5%8A%A1/ESC6-EDITF_ATTRIBUTESUBJECTALTNAME2.md
ESC7-易受攻击的证书颁发机构访问控制	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E8%AF%81%E4%B9%A6%E6%9C%8D%E5%8A%A1/ESC7-%E6%98%93%E5%8F%97%E6%94%BB%E5%87%BB%E7%9A%84%E8%AF%81%E4%B9%A6%E9%A2%81%E5%8F%91%E6%9C%BA%E6%9E%84%E8%AE%BF%E9%97%AE%E6%8E%A7%E5%88%B6.md
ESC8-ADCS中继攻击	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E8%AF%81%E4%B9%A6%E6%9C%8D%E5%8A%A1/ESC8-ADCS%E4%B8%AD%E7%BB%A7%E6%94%BB%E5%87%BB.md
经过认证的CVE-2022-26923	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E8%AF%81%E4%B9%A6%E6%9C%8D%E5%8A%A1/%E7%BB%8F%E8%BF%87%E8%AE%A4%E8%AF%81%E7%9A%84CVE-2022-26923.md
Pass-The-Certificate	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E8%AF%81%E4%B9%A6%E6%9C%8D%E5%8A%A1/Pass-The-Certificate.md
ActiveDirectory的ACL和ACE	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E7%9A%84ACL%E5%92%8CACE/README.md
GenericAll	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E7%9A%84ACL%E5%92%8CACE/GenericAll.md
GenericWrite	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E7%9A%84ACL%E5%92%8CACE/GenericWrite.md
WriteDACL	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E7%9A%84ACL%E5%92%8CACE/WriteDACL.md
WriteOwner	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E7%9A%84ACL%E5%92%8CACE/WriteOwner.md
读取GMSA密码	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E7%9A%84ACL%E5%92%8CACE/%E8%AF%BB%E5%8F%96GMSA%E5%AF%86%E7%A0%81.md
读取LAPS密码	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E7%9A%84ACL%E5%92%8CACE/%E8%AF%BB%E5%8F%96LAPS%E5%AF%86%E7%A0%81.md
强制更改密码	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/ActiveDirectory%E7%9A%84ACL%E5%92%8CACE/%E5%BC%BA%E5%88%B6%E6%9B%B4%E6%94%B9%E5%AF%86%E7%A0%81.md
DCOM-Exploitation	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/DCOM-Exploitation/README.md
DCOM	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/DCOM-Exploitation/DCOM.md
通过MMC应用程序类进行DCOM	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/DCOM-Exploitation/%E9%80%9A%E8%BF%87MMC%E5%BA%94%E7%94%A8%E7%A8%8B%E5%BA%8F%E7%B1%BB%E8%BF%9B%E8%A1%8CDCOM.md
通过Office进行DCOM	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/DCOM-Exploitation/%E9%80%9A%E8%BF%87Office%E8%BF%9B%E8%A1%8CDCOM.md
通过ShellExecute进行DCOM	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/DCOM-Exploitation/%E9%80%9A%E8%BF%87ShellExecute%E8%BF%9B%E8%A1%8CDCOM.md
通过ShellBrowserWindow进行DCOM	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/DCOM-Exploitation/%E9%80%9A%E8%BF%87ShellBrowserWindow%E8%BF%9B%E8%A1%8CDCOM.md
域与域	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/%E5%9F%9F%E4%B8%8E%E5%9F%9F.md
SCCM部署	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/SCCM%E9%83%A8%E7%BD%B2.md
WSUS部署	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/WSUS%E9%83%A8%E7%BD%B2.md
PrivExchange攻击	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/PrivExchange%E6%94%BB%E5%87%BB.md
RODC-只读域控制器入侵	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/RODC-%E5%8F%AA%E8%AF%BB%E5%9F%9F%E6%8E%A7%E5%88%B6%E5%99%A8%E5%85%A5%E4%BE%B5.md
PXE启动映像攻击	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8/PXE%E5%90%AF%E5%8A%A8%E6%98%A0%E5%83%8F%E6%94%BB%E5%87%BB.md
权限维持	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/README.md
Windows	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/README.md
关闭防病毒软件	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E5%85%B3%E9%97%AD%E9%98%B2%E7%97%85%E6%AF%92%E8%BD%AF%E4%BB%B6.md
启动文件夹	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E5%90%AF%E5%8A%A8%E6%96%87%E4%BB%B6%E5%A4%B9.md
Invoke-ADSBackdoor	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/Invoke-ADSBackdoor.md
ADS隐藏webshell	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/ADS%E9%9A%90%E8%97%8Fwebshell.md
ADS&JavaScript	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/ADS&JavaScript.md
使用AMSI扫描接口维持权限	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E4%BD%BF%E7%94%A8AMSI%E6%89%AB%E6%8F%8F%E6%8E%A5%E5%8F%A3%E7%BB%B4%E6%8C%81%E6%9D%83%E9%99%90.md
Bitadmin	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/Bitadmin.md
CLR Injection	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/CLR-Injection.md
COM OBJECT hijacking	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/COM-OBJECT-hijacking.md
受限委派后门	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E5%8F%97%E9%99%90%E5%A7%94%E6%B4%BE%E5%90%8E%E9%97%A8.md
通过控制面板加载项维持权限	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E9%80%9A%E8%BF%87%E6%8E%A7%E5%88%B6%E9%9D%A2%E6%9D%BF%E5%8A%A0%E8%BD%BD%E9%A1%B9%E7%BB%B4%E6%8C%81%E6%9D%83%E9%99%90.md
创建服务	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E5%88%9B%E5%BB%BA%E6%9C%8D%E5%8A%A1.md
DCShadow&SIDHistory	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/DCShadow&SIDHistory.md
DCSync后门	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/DCSync%E5%90%8E%E9%97%A8.md
DLL劫持	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/DLL%E5%8A%AB%E6%8C%81.md
DLL注入	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/DLL%E6%B3%A8%E5%85%A5.md
DLL代理劫持右键	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/DLL%E4%BB%A3%E7%90%86%E5%8A%AB%E6%8C%81%E5%8F%B3%E9%94%AE.md
DLL劫持计划任务	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/DLL%E5%8A%AB%E6%8C%81%E8%AE%A1%E5%88%92%E4%BB%BB%E5%8A%A1.md
通过自定义.net垃圾回收机制进行DLL注入	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E9%80%9A%E8%BF%87%E8%87%AA%E5%AE%9A%E4%B9%89.net%E5%9E%83%E5%9C%BE%E5%9B%9E%E6%94%B6%E6%9C%BA%E5%88%B6%E8%BF%9B%E8%A1%8CDLL%E6%B3%A8%E5%85%A5.md
DSRM+注册表ACL后门	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/DSRM+%E6%B3%A8%E5%86%8C%E8%A1%A8ACL%E5%90%8E%E9%97%A8.md
Empire	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/Empire.md
Windows FAX DLL Injection	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/Windows-FAX-DLL-Injection.md
Guest激活	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/Guest%E6%BF%80%E6%B4%BB.md
映像劫持	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E6%98%A0%E5%83%8F%E5%8A%AB%E6%8C%81.md
HookPasswordChangeNotify	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/HookPasswordChangeNotify.md
Kerberoasting后门	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/Kerberoasting%E5%90%8E%E9%97%A8.md
登录初始化	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E7%99%BB%E5%BD%95%E5%88%9D%E5%A7%8B%E5%8C%96.md
Metsvc	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/Metsvc.md
MOF	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/MOF.md
MSSQL后门	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/MSSQL%E5%90%8E%E9%97%A8.md
Netsh Helper DLL	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/Netsh-Helper-DLL.md
NPPSpy记录密码	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/NPPSpy%E8%AE%B0%E5%BD%95%E5%AF%86%E7%A0%81.md
NSSM	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/NSSM.md
唯一IP访问	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E5%94%AF%E4%B8%80IP%E8%AE%BF%E9%97%AE.md
Password Filter DLL	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/Password-Filter-DLL.md
Persistence	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/Persistence.md
基于域策略文件权限后门	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E5%9F%BA%E4%BA%8E%E5%9F%9F%E7%AD%96%E7%95%A5%E6%96%87%E4%BB%B6%E6%9D%83%E9%99%90%E5%90%8E%E9%97%A8.md
进程注入	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E8%BF%9B%E7%A8%8B%E6%B3%A8%E5%85%A5.md
Invoke-Tasks权限维持	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/Invoke-Tasks%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81.md
WMI-Persistence	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/WMI-Persistence.md
RID劫持	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/RID%E5%8A%AB%E6%8C%81.md
rootkit	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/rootkit.md
S4U2Self后门	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/S4U2Self%E5%90%8E%E9%97%A8.md
计划任务	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E8%AE%A1%E5%88%92%E4%BB%BB%E5%8A%A1.md
影子用户	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E5%BD%B1%E5%AD%90%E7%94%A8%E6%88%B7.md
添加签名	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E6%B7%BB%E5%8A%A0%E7%AD%BE%E5%90%8D.md
Skeleton Key万能钥匙	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/Skeleton-Key%E4%B8%87%E8%83%BD%E9%92%A5%E5%8C%99.md
Squibledoo	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/Squibledoo.md
注入SSP被动收集密码	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/%E6%B3%A8%E5%85%A5SSP%E8%A2%AB%E5%8A%A8%E6%94%B6%E9%9B%86%E5%AF%86%E7%A0%81.md
WinRM端口复用	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/WinRM%E7%AB%AF%E5%8F%A3%E5%A4%8D%E7%94%A8.md
WMIC事件订阅	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/WMIC%E4%BA%8B%E4%BB%B6%E8%AE%A2%E9%98%85.md
RPC后门	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/RPC%E5%90%8E%E9%97%A8.md
Shadow-Credentials	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Windows/Shadow-Credentials.md
Linux	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/README.md
Linux cron后门	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/Linux-cron%E5%90%8E%E9%97%A8.md
文件处理	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/%E6%96%87%E4%BB%B6%E5%A4%84%E7%90%86.md
IPTables端口复用	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/IPTables%E7%AB%AF%E5%8F%A3%E5%A4%8D%E7%94%A8.md
Kbeast_rootkit	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/Kbeast_rootkit.md
OpenSSH后门	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/OpenSSH%E5%90%8E%E9%97%A8.md
进程注入	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/%E8%BF%9B%E7%A8%8B%E6%B3%A8%E5%85%A5.md
Reptile	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/Reptile.md
SSHD后门	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/SSHD%E5%90%8E%E9%97%A8.md
SSH公私钥登录	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/SSH%E5%85%AC%E7%A7%81%E9%92%A5%E7%99%BB%E5%BD%95.md
SSH wrapper后门	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/SSH-wrapper%E5%90%8E%E9%97%A8.md
Strace记录ssh密码	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/Strace%E8%AE%B0%E5%BD%95ssh%E5%AF%86%E7%A0%81.md
SUID Shell	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/SUID-Shell.md
apt后门	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/apt%E5%90%8E%E9%97%A8.md
bash_rc	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/bash_rc.md
后门驱动程序	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/%E5%90%8E%E9%97%A8%E9%A9%B1%E5%8A%A8%E7%A8%8B%E5%BA%8F.md
启动项服务后门	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/%E5%90%AF%E5%8A%A8%E9%A1%B9%E6%9C%8D%E5%8A%A1%E5%90%8E%E9%97%A8.md
用户启动文件	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/Linux/%E7%94%A8%E6%88%B7%E5%90%AF%E5%8A%A8%E6%96%87%E4%BB%B6.md
web服务&中间件	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/web%E6%9C%8D%E5%8A%A1&%E4%B8%AD%E9%97%B4%E4%BB%B6/README.md
Apache	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/web%E6%9C%8D%E5%8A%A1&%E4%B8%AD%E9%97%B4%E4%BB%B6/Apache.md
IIS	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/web%E6%9C%8D%E5%8A%A1&%E4%B8%AD%E9%97%B4%E4%BB%B6/IIS.md
Java	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/web%E6%9C%8D%E5%8A%A1&%E4%B8%AD%E9%97%B4%E4%BB%B6/Java.md
Nginx	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81/web%E6%9C%8D%E5%8A%A1&%E4%B8%AD%E9%97%B4%E4%BB%B6/Nginx.md
赏金技巧	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/README.md
2FA双因子认证绕过	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/2FA%E5%8F%8C%E5%9B%A0%E5%AD%90%E8%AE%A4%E8%AF%81%E7%BB%95%E8%BF%87.md
403 bypass	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/403-bypass.md
命令注入Bypass	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E5%91%BD%E4%BB%A4%E6%B3%A8%E5%85%A5Bypass.md
配置错误的云存储桶	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E9%85%8D%E7%BD%AE%E9%94%99%E8%AF%AF%E7%9A%84%E4%BA%91%E5%AD%98%E5%82%A8%E6%A1%B6.md
CMS	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/CMS.md
字典	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E5%AD%97%E5%85%B8/README.md
从站点生成字典	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E5%AD%97%E5%85%B8/%E4%BB%8E%E7%AB%99%E7%82%B9%E7%94%9F%E6%88%90%E5%AD%97%E5%85%B8.md
查找git和svn的字典	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E5%AD%97%E5%85%B8/%E6%9F%A5%E6%89%BEgit%E5%92%8Csvn%E7%9A%84%E5%AD%97%E5%85%B8.md
已泄露的密码整理出的字典	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E5%AD%97%E5%85%B8/%E5%B7%B2%E6%B3%84%E9%9C%B2%E7%9A%84%E5%AF%86%E7%A0%81%E6%95%B4%E7%90%86%E5%87%BA%E7%9A%84%E5%AD%97%E5%85%B8.md
loT高频率账户密码	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E5%AD%97%E5%85%B8/loT%E9%AB%98%E9%A2%91%E7%8E%87%E8%B4%A6%E6%88%B7%E5%AF%86%E7%A0%81.md
来自github的字典	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E5%AD%97%E5%85%B8/%E6%9D%A5%E8%87%AAgithub%E7%9A%84%E5%AD%97%E5%85%B8.md
未认证的ElasticsearchDB	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E6%9C%AA%E8%AE%A4%E8%AF%81%E7%9A%84ElasticsearchDB.md
favico信息	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/favico%E4%BF%A1%E6%81%AF.md
Github	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/Github.md
git和svn	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/git%E5%92%8Csvn.md
参数污染	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E5%8F%82%E6%95%B0%E6%B1%A1%E6%9F%93.md
通过.json的信息泄露	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E9%80%9A%E8%BF%87.json%E7%9A%84%E4%BF%A1%E6%81%AF%E6%B3%84%E9%9C%B2.md
一行命令	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E4%B8%80%E8%A1%8C%E5%91%BD%E4%BB%A4/README.md
使用grep快速去除垃圾数据	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E4%B8%80%E8%A1%8C%E5%91%BD%E4%BB%A4/%E4%BD%BF%E7%94%A8grep%E5%BF%AB%E9%80%9F%E5%8E%BB%E9%99%A4%E5%9E%83%E5%9C%BE%E6%95%B0%E6%8D%AE.md
子域名接管	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E5%AD%90%E5%9F%9F%E5%90%8D%E6%8E%A5%E7%AE%A1.md
测试是否存在heartbleed漏洞	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E6%B5%8B%E8%AF%95%E6%98%AF%E5%90%A6%E5%AD%98%E5%9C%A8heartbleed%E6%BC%8F%E6%B4%9E.md
sql注入检测	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/sql%E6%B3%A8%E5%85%A5%E6%A3%80%E6%B5%8B.md
TOP系列	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/TOP%E7%B3%BB%E5%88%97/README.md
Top25LFI参数	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/TOP%E7%B3%BB%E5%88%97/Top25LFI%E5%8F%82%E6%95%B0.md
Top25RCE参数	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/TOP%E7%B3%BB%E5%88%97/Top25RCE%E5%8F%82%E6%95%B0.md
Top25重定向dorks	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/TOP%E7%B3%BB%E5%88%97/Top25%E9%87%8D%E5%AE%9A%E5%90%91dorks.md
Top25ssrf	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/TOP%E7%B3%BB%E5%88%97/Top25ssrf.md
绕过登录限制	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E8%B5%8F%E9%87%91%E6%8A%80%E5%B7%A7/%E7%BB%95%E8%BF%87%E7%99%BB%E5%BD%95%E9%99%90%E5%88%B6.md
云安全	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/README.md
云安全培训	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/%E4%BA%91%E5%AE%89%E5%85%A8%E5%9F%B9%E8%AE%AD.md
AWS	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/README.md
初始访问	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE.md
权限提升	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87.md
权限维持	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81.md
枚举	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/%E6%9E%9A%E4%B8%BE.md
AWS的服务	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/AWS%E7%9A%84%E6%9C%8D%E5%8A%A1.md
工具	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/%E5%B7%A5%E5%85%B7.md
将EBS卷挂载到EC2Linux	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/%E5%B0%86EBS%E5%8D%B7%E6%8C%82%E8%BD%BD%E5%88%B0EC2Linux.md
使用AMI映像复制EC2	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/%E4%BD%BF%E7%94%A8AMI%E6%98%A0%E5%83%8F%E5%A4%8D%E5%88%B6EC2.md
通过API密钥获得AWS控制台访问权限	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/%E9%80%9A%E8%BF%87API%E5%AF%86%E9%92%A5%E8%8E%B7%E5%BE%97AWS%E6%8E%A7%E5%88%B6%E5%8F%B0%E8%AE%BF%E9%97%AE%E6%9D%83%E9%99%90.md
Golden-SAML-Attack	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/Golden-SAML-Attack.md
Shadow-Copy-attack	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/Shadow-Copy-attack.md
Lambda-提取函数的代码	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/Lambda-%E6%8F%90%E5%8F%96%E5%87%BD%E6%95%B0%E7%9A%84%E4%BB%A3%E7%A0%81.md
InstanceConnect-将SSH密钥推送到EC2实例	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/InstanceConnect-%E5%B0%86SSH%E5%AF%86%E9%92%A5%E6%8E%A8%E9%80%81%E5%88%B0EC2%E5%AE%9E%E4%BE%8B.md
SSM-命令执行	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/SSM-%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C.md
动态数据库	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/%E5%8A%A8%E6%80%81%E6%95%B0%E6%8D%AE%E5%BA%93.md
禁用CloudTrail	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/%E7%A6%81%E7%94%A8CloudTrail.md
通过混淆Cloudtrail日志和GuardDuty来掩盖踪迹	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/AWS/%E9%80%9A%E8%BF%87%E6%B7%B7%E6%B7%86Cloudtrail%E6%97%A5%E5%BF%97%E5%92%8CGuardDuty%E6%9D%A5%E6%8E%A9%E7%9B%96%E8%B8%AA%E8%BF%B9.md
Docker	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Docker/README.md
未授权API	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Docker/%E6%9C%AA%E6%8E%88%E6%9D%83API.md
逃逸	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Docker/%E9%80%83%E9%80%B8.md
权限维持	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Docker/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81.md
GCP	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/GCP/README.md
初始访问	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/GCP/%E5%88%9D%E5%A7%8B%E8%AE%BF%E9%97%AE.md
权限维持	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/GCP/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81.md
枚举	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/GCP/%E6%9E%9A%E4%B8%BE.md
特权升级和横向移动	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/GCP/%E7%89%B9%E6%9D%83%E5%8D%87%E7%BA%A7%E5%92%8C%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8.md
kubernetes	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/kubernetes/README.md
未授权API	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/kubernetes/%E6%9C%AA%E6%8E%88%E6%9D%83API.md
权限提升	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/kubernetes/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87.md
权限维持	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/kubernetes/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81.md
枚举	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/kubernetes/%E6%9E%9A%E4%B8%BE.md
Azure	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/README.md
侦察工具	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/%E4%BE%A6%E5%AF%9F%E5%B7%A5%E5%85%B7.md
枚举	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/%E6%9E%9A%E4%B8%BE.md
非法同意	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/%E9%9D%9E%E6%B3%95%E5%90%8C%E6%84%8F.md
钓鱼	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/%E9%92%93%E9%B1%BC.md
令牌	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/%E4%BB%A4%E7%89%8C.md
向所有EnterpriseApplications添加凭据	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/%E5%90%91%E6%89%80%E6%9C%89EnterpriseApplications%E6%B7%BB%E5%8A%A0%E5%87%AD%E6%8D%AE.md
为AzureWeb应用程序生成SSH	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/%E4%B8%BAAzureWeb%E5%BA%94%E7%94%A8%E7%A8%8B%E5%BA%8F%E7%94%9F%E6%88%90SSH.md
Azure存储Blob	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/Azure%E5%AD%98%E5%82%A8Blob.md
自动化runbook	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/%E8%87%AA%E5%8A%A8%E5%8C%96runbook.md
虚拟机runCommand	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/%E8%99%9A%E6%8B%9F%E6%9C%BArunCommand.md
KeyVault	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/KeyVault.md
Pass-The-PRT	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/Pass-The-PRT.md
Pass-The-Certificate	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/Pass-The-Certificate.md
Intunes管理	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/Intunes%E7%AE%A1%E7%90%86.md
动态组成员资格	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/%E5%8A%A8%E6%80%81%E7%BB%84%E6%88%90%E5%91%98%E8%B5%84%E6%A0%BC.md
Administrative-Unit	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/Administrative-Unit.md
部署模板	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/%E9%83%A8%E7%BD%B2%E6%A8%A1%E6%9D%BF.md
应用程序代理	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/%E5%BA%94%E7%94%A8%E7%A8%8B%E5%BA%8F%E4%BB%A3%E7%90%86.md
条件访问	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/%E6%9D%A1%E4%BB%B6%E8%AE%BF%E9%97%AE.md
AzureAD	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/AzureAD.md
AzureAD连接	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/AzureAD%E8%BF%9E%E6%8E%A5.md
Aliyun	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Aliyun/README.md
osskey	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/Aliyun/osskey.md
工具	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/%E4%BA%91%E5%AE%89%E5%85%A8/%E5%B7%A5%E5%85%B7.md
Redteam红队	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/README.md
免杀技巧	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E5%85%8D%E6%9D%80%E6%8A%80%E5%B7%A7/README.md
Bypass AMSI	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E5%85%8D%E6%9D%80%E6%8A%80%E5%B7%A7/Bypass-AMSI.md
一些可尝试绕过白名单的执行	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E5%85%8D%E6%9D%80%E6%8A%80%E5%B7%A7/%E4%B8%80%E4%BA%9B%E5%8F%AF%E5%B0%9D%E8%AF%95%E7%BB%95%E8%BF%87%E7%99%BD%E5%90%8D%E5%8D%95%E7%9A%84%E6%89%A7%E8%A1%8C.md
在Windows Server 2016和2019中绕过WindowsDefender	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E5%85%8D%E6%9D%80%E6%8A%80%E5%B7%A7/%E5%9C%A8Windows-Server-2016%E5%92%8C2019%E4%B8%AD%E7%BB%95%E8%BF%87WindowsDefender.md
cshot远程shellcode	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E5%85%8D%E6%9D%80%E6%8A%80%E5%B7%A7/cshot%E8%BF%9C%E7%A8%8Bshellcode.md
内存中解码shellcode绕过av	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E5%85%8D%E6%9D%80%E6%8A%80%E5%B7%A7/%E5%86%85%E5%AD%98%E4%B8%AD%E8%A7%A3%E7%A0%81shellcode%E7%BB%95%E8%BF%87av.md
Pezor免杀	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E5%85%8D%E6%9D%80%E6%8A%80%E5%B7%A7/Pezor%E5%85%8D%E6%9D%80.md
Bypass技巧	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/Bypass%E6%8A%80%E5%B7%A7/README.md
绕过lsa protection	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/Bypass%E6%8A%80%E5%B7%A7/%E7%BB%95%E8%BF%87lsa-protection.md
Bypass mod_security	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/Bypass%E6%8A%80%E5%B7%A7/Bypass-mod_security.md
系统类	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/Bypass%E6%8A%80%E5%B7%A7/%E7%B3%BB%E7%BB%9F%E7%B1%BB/README.md
动态调用进程注入逻辑	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E7%B3%BB%E7%BB%9F%E7%B1%BB/%E5%8A%A8%E6%80%81%E8%B0%83%E7%94%A8%E8%BF%9B%E7%A8%8B%E6%B3%A8%E5%85%A5%E9%80%BB%E8%BE%91.md
通过挂起EventLog服务线程禁用Windows事件日志	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E7%B3%BB%E7%BB%9F%E7%B1%BB/%E9%80%9A%E8%BF%87%E6%8C%82%E8%B5%B7EventLog%E6%9C%8D%E5%8A%A1%E7%BA%BF%E7%A8%8B%E7%A6%81%E7%94%A8Windows%E4%BA%8B%E4%BB%B6%E6%97%A5%E5%BF%97.md
隐藏windows服务	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E7%B3%BB%E7%BB%9F%E7%B1%BB/%E9%9A%90%E8%97%8Fwindows%E6%9C%8D%E5%8A%A1.md
ImportDLLInjection-通过修改内存中的PE头来注入DLL的另一种方法	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E7%B3%BB%E7%BB%9F%E7%B1%BB/ImportDLLInjection-%E9%80%9A%E8%BF%87%E4%BF%AE%E6%94%B9%E5%86%85%E5%AD%98%E4%B8%AD%E7%9A%84PE%E5%A4%B4%E6%9D%A5%E6%B3%A8%E5%85%A5DLL%E7%9A%84%E5%8F%A6%E4%B8%80%E7%A7%8D%E6%96%B9%E6%B3%95.md
父进程破坏	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E7%B3%BB%E7%BB%9F%E7%B1%BB/%E7%88%B6%E8%BF%9B%E7%A8%8B%E7%A0%B4%E5%9D%8F.md
进程挖空(MitreT1055.012)	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E7%B3%BB%E7%BB%9F%E7%B1%BB/%E8%BF%9B%E7%A8%8B%E6%8C%96%E7%A9%BA(MitreT1055.012).md
远程解压文件	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E7%B3%BB%E7%BB%9F%E7%B1%BB/%E8%BF%9C%E7%A8%8B%E8%A7%A3%E5%8E%8B%E6%96%87%E4%BB%B6.md
使用WindowsDefender下载文件	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/%E7%B3%BB%E7%BB%9F%E7%B1%BB/%E4%BD%BF%E7%94%A8WindowsDefender%E4%B8%8B%E8%BD%BD%E6%96%87%E4%BB%B6.md
Web类	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/Bypass%E6%8A%80%E5%B7%A7/Web%E7%B1%BB/README.md
web程序漏洞	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/Web%E7%B1%BB/web%E7%A8%8B%E5%BA%8F%E6%BC%8F%E6%B4%9E.md
编辑器漏洞	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/Web%E7%B1%BB/%E7%BC%96%E8%BE%91%E5%99%A8%E6%BC%8F%E6%B4%9E.md
邮件地址payload	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/Web%E7%B1%BB/%E9%82%AE%E4%BB%B6%E5%9C%B0%E5%9D%80payload.md
从LFI到RCE	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/Web%E7%B1%BB/%E4%BB%8ELFI%E5%88%B0RCE.md
深x服	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/Web%E7%B1%BB/%E6%B7%B1x%E6%9C%8D.md
天r信	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/Web%E7%B1%BB/tianr.md
Web server日志分析命令	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/Web%E7%B1%BB/Web-server%E6%97%A5%E5%BF%97%E5%88%86%E6%9E%90%E5%91%BD%E4%BB%A4.md
默认密码	https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/Redteam%E7%BA%A2%E9%98%9F/Web%E7%B1%BB/%E9%BB%98%E8%AE%A4%E5%AF%86%E7%A0%81.md
www.heresecurity.wiki	https://www.heresecurity.wiki
Readme	https://github.com/jeliurry/Pentest_Note#readme-ov-file
Please reload this page	https://github.com/jeliurry/Pentest_Note
Activity	https://github.com/jeliurry/Pentest_Note/activity
0 forks	https://github.com/jeliurry/Pentest_Note/forks
Report repository	https://github.com/contact/report-content?content_url=https%3A%2F%2Fgithub.com%2Fjeliurry%2FPentest_Note&report=jeliurry+%28user%29
Releases	https://github.com/jeliurry/Pentest_Note/releases
Packages 0	https://github.com/users/jeliurry/packages?repo_name=Pentest_Note
Please reload this page	https://github.com/jeliurry/Pentest_Note
Contributors	https://github.com/jeliurry/Pentest_Note/graphs/contributors
Please reload this page	https://github.com/jeliurry/Pentest_Note
	https://github.com
Terms	https://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacy	https://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Security	https://github.com/security
Status	https://www.githubstatus.com/
Community	https://github.community/
Docs	https://docs.github.com/
Contact	https://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.