> For the complete documentation index, see [llms.txt](https://martian1337.gitbook.io/notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://martian1337.gitbook.io/notes/resources/offensive-cybersecurity/infrastructure-pentesting.md). # Infrastructure Pentesting * [Windows & AD Exploitation Cheatsheet](https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference/) by chvancooten * [Wadoms Interactive AD Pentest CheatSheet ](https://wadcoms.github.io/)! * [Ciphey](https://github.com/Ciphey/Ciphey) - Encryption {% tabs %} {% tab title="Exploitation" %} **General Tools**
Lolol.farm - every LOLBin, LOLDriver, and adjacent projectWindows Exploitatation from @FULLSHADEEvilWinRM
HoaxShell !Shennina - automated host exploitation frameworkGTFOBins
**Antivirus and EDR Evasion** | [AMSI Bypass Powershell](https://github.com/S3cur3Th1sSh1t/Amsi-Bypass-Powershell) | [ProtectMyTooling](https://github.com/mgeeky/ProtectMyTooling) - Packer | [Garble](https://github.com/burrowers/garble) - Golang packer | | ---------------------------------------------------------------------------------- | ----------------------------------------------------------------------- | ------------------------------------------------------------- | | [PatchThatAMSI](https://github.com/D1rkMtr/PatchThatAMSI) | [Unprotect ](https://unprotect.it/)- Evasion Techniques database | | | {% endtab %} | | | {% tab title="Network" %} | [Wireshark: Network protocol analysis tool](https://www.wireshark.org/#download) | [NMap: The pre-eminent network mapping tool](https://nmap.org/download) | [JFScan](https://github.com/nullt3r/jfscan) | | --------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------- | ------------------------------------------- | | [CrackMapExec A swiss army knife for pentesting networks](https://github.com/Porchetta-Industries/CrackMapExec) | [Legion](https://github.com/GoVanguard/legion) | [VLANPWN](https://github.com/in9uz/VLANPWN) | | [Responder](https://github.com/lgandx/Responder) ! |

OrbitalDump

(SSH Brute-forcer)

| | | {% endtab %} | | | {% tab title="Shells" %} | | | | | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------- | | [Reverse Shell Generator](https://www.revshells.com/) | [PHP Reverse Shell](https://github.com/pentestmonkey/php-reverse-shell) | [Reverse Shell Cheat Sheet](https://pentestmonkey.net/cheat-sheet/shells/reverse-shell-cheat-sheet) by pentestmonkey | | [PayloadsAllTheThings RevShell cheatsheet](https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Reverse%20Shell%20Cheatsheet.md) | | | | {% endtab %} | | | | {% endtabs %} | | | {% tabs %} {% tab title="Post-Exploitation" %} Tools | | | | -------------------------------------------------------------------------- | ------------------------------------------------------------------------ | | [Forensia](https://github.com/PaulNorman01/Forensia) - Anti Forensics Tool | [GTFONow](https://github.com/Frissi0n/GTFONow) - Privesc automation tool | | | | | {% endtab %} | | {% tab title="Malware" %} | [Awesome Malware Development Repo](https://github.com/rootkit-io/awesome-malware-development) | [Maldev for Dummies](https://github.com/chvancooten/maldev-for-dummies) | [Sektor7 Institute](https://institute.sektor7.net/) - Malware Dev training | | --------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------- | -------------------------------------------------------------------------- | | {% endtab %} | | | {% tab title="C2" %} | C2s | | | | ------------------------------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------- | | [CrackMapExec](https://github.com/byt3bl33d3r/CrackMapExec/) | [DBC2](https://github.com/Arno0x/DBC2/) | [Empire](https://github.com/EmpireProject/Empire/) | | [EvilOSX](https://github.com/Marten4n6/EvilOSX/) | [PEASS from @carlospolop](https://github.com/carlospolop/PEASS-ng) ! | [Portia](https://github.com/milo2012/portia) | | [ProcessHider](https://github.com/M00nRise/ProcessHider/) | [PwnCat](https://github.com/calebstewart/pwncat) | [pupy](https://github.com/n1nj4sec/pupy) | | [Villian - Backdoor generator by @t3l3machus](https://github.com/t3l3machus/Villain) | [DefenderCheck](https://github.com/matterpreter/DefenderCheck) - tool to check/modify signatures used by antivirus for detection | [LOLBAS](https://lolbas-project.github.io/) | | [Havoc](https://github.com/HavocFramework/Havoc) | [Silver](https://github.com/BishopFox/sliver/wiki/HTTP\(S\)-C2) | [Merlin](https://github.com/Ne0nd0g/merlin) | | [GithubC2](https://github.com/D1rkMtr/githubC2) | [VirusTotalC2](https://github.com/D1rkMtr/VirusTotalC2) | [Reddit C2](https://github.com/kleiton0x00/RedditC2) | | [Low detection c2](https://github.com/polymaster3313/PolyMalware) by @polymaster3313 | [C2 Matrix](https://docs.google.com/spreadsheets/d/1b4mUxa6cDQuTV2BPC6aA-GR4zGZi0ooPYtBe4IgPsSc/edit#gid=0) ! | | | {% endtab %} | | | | {% endtabs %} | | |