bash1 min read
Bind shells and reverse shells
When to use what and commands for both directions on Windows and Linux.
- #shells
- #netcat
- #reverse-shell
- +2
Cybersecurity · Exploitation
Post-Exploitation and Persistence
Post exploitation steps like session persistence, credential dumps and pivoting.
9 snippets
bash1 min read
Linux password hash dumping & cracking
Dump /etc/shadow hashes from a root session and crack them with John or Hashcat.
- #linux
- #credential-dumping
- #password-cracking
- +4
msfconsole1 min read
Linux post-exploitation and persistence
Metasploit post modules for Linux enumeration, plus persistence via new user, cron, service, and SSH key.
- #linux
- #post-exploitation
- #persistence
- +2
msfconsole1 min read
Pivoting: reach isolated subnets through a compromised host
Use Metasploit autoroute and proxychains to scan and exploit targets only reachable through a pivot machine.
- #pivoting
- #metasploit
- #proxychains
- +1
msfconsole1 min read
Upgrading a shell session to Meterpreter
Three ways to promote a plain command shell to a full Meterpreter session — one-liner, MSF module, and manual msfvenom payload.
- #meterpreter
- #metasploit
- #shells
- +1
bash1 min read
Alternate Data Streams: hiding payloads in NTFS
Store and execute malicious code inside hidden NTFS file streams to evade signature-based AV scanners.
- #windows
- #ads
- #evasion
- +2
msfconsole1 min read
Windows hash dumping and pass-the-hash
Extract NTLM hashes from LSASS/SAM with Kiwi or Mimikatz and use them to authenticate without cracking.
- #mimikatz
- #kiwi
- #pass-the-hash
- +6
msfconsole1 min read
Windows persistence
Keep access across reboots and credential changes through service installers, registry startup, RDP backdoors, SSH key generation, and sticky keys.
- #windows
- #persistence
- #post-exploitation
- +4
msfconsole1 min read
Windows post-exploitation: meterpreter commands and post modules
System info, process migration, privilege check, installed apps, AV detection, etc. The standard post-exploitation workflow after landing a Windows meterpreter session.
- #metasploit
- #meterpreter
- #post-exploitation
- +1
Nothing matches these filters.