credential-access

Windows Privesc

Practical Credential Theft with Mimikatz

A hands-on guide to dumping Windows credentials with Mimikatz and the LSA protections that stop it.
Linux Privesc

SSH Key Hunting and Lateral Movement on Linux

Find SSH private keys, abuse authorized_keys and known_hosts, and pivot via agent forwarding across Linux hosts.