The Big Data Blog

Aryan Ahirwar

Mar 17, 20228 min read

RED TEAMING

Indirect Command Execution: Defense Evasion (T1202)

Aryan Ahirwar

Mar 12, 20226 min read

RED TEAMING

Domain Escalation: Resource Based Constrained Delegation

Aryan Ahirwar

Feb 28, 20225 min read

RED TEAMING

Windows Persistence: Shortcut Modification (T1547)

Aryan Ahirwar

Feb 25, 20226 min read

RED TEAMING

Domain Escalation: PetitPotam NTLM Relay to ADCS Endpoints

Aryan Ahirwar

Feb 5, 20225 min read

RED TEAMING

Domain Persistence: Computer Accounts

Aryan Ahirwar

Jan 27, 20228 min read

RED TEAMING

Domain Persistence: Golden Certificate Attack

Aryan Ahirwar

Jan 23, 20226 min read

RED TEAMING

Process Ghosting Attack

Aryan Ahirwar

Jan 11, 20222 min read

RED TEAMING

Windows Privilege Escalation: sAMAccountName Spoofing

Aryan Ahirwar

Jul 30, 20218 min read

RED TEAMING

Socat for Pentester

Aryan Ahirwar

Jun 29, 20218 min read

RED TEAMING

Covenant for Pentester: Basics

Aryan Ahirwar

May 15, 20214 min read

RED TEAMING

NTLM Downgrade Attack: Internal Monologue

Aryan Ahirwar

May 9, 202111 min read

RED TEAMING

Active Directory Enumeration: RPCClient

Aryan Ahirwar

May 1, 202110 min read

RED TEAMING

Active Directory Enumeration: BloodHound

Aryan Ahirwar

Apr 29, 202110 min read

RED TEAMING

Empire for Pentester: Active Directory Enumeration

Aryan Ahirwar

Apr 27, 202114 min read

RED TEAMING

Active Directory Enumeration: PowerView

Aryan Ahirwar

Apr 23, 20212 min read

RED TEAMING

Defense Evasion: Windows Event Logging (T1562.002)

Aryan Ahirwar

Apr 19, 20213 min read

RED TEAMING

Domain Persistence: DSRM

Aryan Ahirwar

Apr 7, 20218 min read

RED TEAMING

PowerShell Empire for Pentester: Mimikatz

Aryan Ahirwar

Mar 10, 20215 min read

RED TEAMING

Active Directory Pentesting: Lab Setup

Aryan Ahirwar

Feb 2, 202114 min read

RED TEAMING

The Big Data Blog

Indirect Command Execution: Defense Evasion (T1202)

Domain Escalation: Resource Based Constrained Delegation

Windows Persistence: Shortcut Modification (T1547)

Domain Escalation: PetitPotam NTLM Relay to ADCS Endpoints

Domain Persistence: Computer Accounts

Domain Persistence: Golden Certificate Attack

Process Ghosting Attack

Windows Privilege Escalation: sAMAccountName Spoofing

Socat for Pentester

Covenant for Pentester: Basics

NTLM Downgrade Attack: Internal Monologue

Active Directory Enumeration: RPCClient

Active Directory Enumeration: BloodHound

Empire for Pentester: Active Directory Enumeration

Active Directory Enumeration: PowerView

Defense Evasion: Windows Event Logging (T1562.002)

Domain Persistence: DSRM

PowerShell Empire for Pentester: Mimikatz

Active Directory Pentesting: Lab Setup

Port Forwarding & Tunnelling Cheatsheet

Stay Updated