Post-Exploitation

Windows Privesc

Looting Windows Secrets: Attacking DPAPI and Credential Manager

How attackers decrypt DPAPI-protected Credential Manager vaults and browser secrets, plus how blue teams detect and stop it.
Linux Privesc

Exploiting SUID/SGID Binaries for Linux Privilege Escalation

How attackers abuse SUID/SGID binaries to escalate to root on Linux, plus blue-team detection and hardening.
Linux Privesc

SSH Key Hunting and Lateral Movement on Linux

Find SSH private keys, abuse authorized_keys and known_hosts, and pivot via agent forwarding across Linux hosts.
Linux Privesc

Linux Persistence Techniques: Maintaining Access After Initial Compromise

A practical tour of Linux persistence: authorized_keys, cron, systemd, rc.local, and ld.so.preload, plus detection.
Security

Reverse Shell Cheat Sheet: From One-Liners to a Stable TTY

A practical reverse shell cheat sheet covering bash, nc, python and PowerShell payloads plus TTY upgrade and detection.