# Infrastructure Pentesting

* [Windows & AD Exploitation Cheatsheet](https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference/) by chvancooten
* [Wadoms Interactive AD Pentest CheatSheet ](https://wadcoms.github.io/)!
* [Ciphey](https://github.com/Ciphey/Ciphey) - Encryption

{% tabs %}
{% tab title="Exploitation" %}
**General Tools**

| [GTFOBins](https://github.com/GTFOBins/GTFOBins.github.io) | [Windows Exploitatation from @FULLSHADE](https://github.com/FULLSHADE/WindowsExploitationResources) | [EvilWinRM](https://github.com/Hackplayers/evil-winrm) |
| ---------------------------------------------------------- | --------------------------------------------------------------------------------------------------- | ------------------------------------------------------ |
| [HoaxShell](https://github.com/t3l3machus/hoaxshell) !     | [Shennina](https://github.com/mazen160/shennina) - automated host exploitation framework            |                                                        |

**Antivirus and EDR Evasion**

| [AMSI Bypass Powershell](https://github.com/S3cur3Th1sSh1t/Amsi-Bypass-Powershell) | [ProtectMyTooling](https://github.com/mgeeky/ProtectMyTooling) - Packer | [Garble](https://github.com/burrowers/garble) - Golang packer |
| ---------------------------------------------------------------------------------- | ----------------------------------------------------------------------- | ------------------------------------------------------------- |
| [PatchThatAMSI](https://github.com/D1rkMtr/PatchThatAMSI)                          | [Unprotect ](https://unprotect.it/)- Evasion Techniques database        |                                                               |
| {% endtab %}                                                                       |                                                                         |                                                               |

{% tab title="Network" %}

| [Wireshark: Network protocol analysis tool](https://www.wireshark.org/#download)                                | [NMap: The pre-eminent network mapping tool](https://nmap.org/download)                         | [JFScan](https://github.com/nullt3r/jfscan) |
| --------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------- | ------------------------------------------- |
| [CrackMapExec A swiss army knife for pentesting networks](https://github.com/Porchetta-Industries/CrackMapExec) | [Legion](https://github.com/GoVanguard/legion)                                                  | [VLANPWN](https://github.com/in9uz/VLANPWN) |
| [Responder](https://github.com/lgandx/Responder) !                                                              | <p><a href="https://github.com/k4yt3x/orbitaldump">OrbitalDump</a></p><p>(SSH Brute-forcer)</p> |                                             |
| {% endtab %}                                                                                                    |                                                                                                 |                                             |

{% tab title="Shells" %}

|                                                                                                                                                                           |                                                                         |                                                                                                                      |
| ------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------- |
| [Reverse Shell Generator](https://www.revshells.com/)                                                                                                                     | [PHP Reverse Shell](https://github.com/pentestmonkey/php-reverse-shell) | [Reverse Shell Cheat Sheet](https://pentestmonkey.net/cheat-sheet/shells/reverse-shell-cheat-sheet) by pentestmonkey |
| [PayloadsAllTheThings RevShell cheatsheet](https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Reverse%20Shell%20Cheatsheet.md) |                                                                         |                                                                                                                      |
| {% endtab %}                                                                                                                                                              |                                                                         |                                                                                                                      |
| {% endtabs %}                                                                                                                                                             |                                                                         |                                                                                                                      |

{% tabs %}
{% tab title="Post-Exploitation" %}
Tools

|                                                                            |                                                                          |
| -------------------------------------------------------------------------- | ------------------------------------------------------------------------ |
| [Forensia](https://github.com/PaulNorman01/Forensia) - Anti Forensics Tool | [GTFONow](https://github.com/Frissi0n/GTFONow) - Privesc automation tool |
|                                                                            |                                                                          |
| {% endtab %}                                                               |                                                                          |

{% tab title="Malware" %}

| [Awesome Malware Development Repo](https://github.com/rootkit-io/awesome-malware-development) | [Maldev for Dummies](https://github.com/chvancooten/maldev-for-dummies) | [Sektor7 Institute](https://institute.sektor7.net/) - Malware Dev training |
| --------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------- | -------------------------------------------------------------------------- |
| {% endtab %}                                                                                  |                                                                         |                                                                            |

{% tab title="C2" %}

| C2s                                                                                  |                                                                                                                                  |                                                      |
| ------------------------------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------- |
| [CrackMapExec](https://github.com/byt3bl33d3r/CrackMapExec/)                         | [DBC2](https://github.com/Arno0x/DBC2/)                                                                                          | [Empire](https://github.com/EmpireProject/Empire/)   |
| [EvilOSX](https://github.com/Marten4n6/EvilOSX/)                                     | [PEASS from @carlospolop](https://github.com/carlospolop/PEASS-ng) !                                                             | [Portia](https://github.com/milo2012/portia)         |
| [ProcessHider](https://github.com/M00nRise/ProcessHider/)                            | [PwnCat](https://github.com/calebstewart/pwncat)                                                                                 | [pupy](https://github.com/n1nj4sec/pupy)             |
| [Villian - Backdoor generator by @t3l3machus](https://github.com/t3l3machus/Villain) | [DefenderCheck](https://github.com/matterpreter/DefenderCheck) - tool to check/modify signatures used by antivirus for detection | [LOLBAS](https://lolbas-project.github.io/)          |
| [Havoc](https://github.com/HavocFramework/Havoc)                                     | [Silver](https://github.com/BishopFox/sliver/wiki/HTTP\(S\)-C2)                                                                  | [Merlin](https://github.com/Ne0nd0g/merlin)          |
| [GithubC2](https://github.com/D1rkMtr/githubC2)                                      | [VirusTotalC2](https://github.com/D1rkMtr/VirusTotalC2)                                                                          | [Reddit C2](https://github.com/kleiton0x00/RedditC2) |
| [Low detection c2](https://github.com/polymaster3313/PolyMalware) by @polymaster3313 | [C2 Matrix](https://docs.google.com/spreadsheets/d/1b4mUxa6cDQuTV2BPC6aA-GR4zGZi0ooPYtBe4IgPsSc/edit#gid=0) !                    |                                                      |
| {% endtab %}                                                                         |                                                                                                                                  |                                                      |
| {% endtabs %}                                                                        |                                                                                                                                  |                                                      |


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://martian1337.gitbook.io/notes/resources/offensive-cybersecurity/infrastructure-pentesting.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.