Enumerate modules with CreateToolhelp32Snapshot.
Category: windows
Enumerating Processes with CreateToolhelp32Snapshot
Quick and dirty example of process enumeration using CreateToolhelp32Snapshot
Enumerating Processes with WTSEnumerateProcesses
Quick example of using WTSEnumerateProcesses to enumerate processes running on a Windows machine.
Installing evil-winrm on Ubuntu 20.04
Install evil-winrm on Ubuntu 20.04
CTF Triage Data Acquisition
A quick overview of triage data acquisition in the context of attack/defend CTFs.
Accessing Alternate Data Streams on VMDK Images on Linux
Accessing Alternate Data Streams on VMDK Images on Linux.
REVIEW: RED TEAM Operator: Windows Persistence Course by SEKTOR7 Institute
My review of SEKTOR7 Institute's Red Team Operator, Windows Persistence course.
Using finger.exe to Transfer Files
Abusing finger.exe to send data over the network
Windows Startup Folders
Windows Startup Folder locations.
REVIEW: RED TEAM Operator: Malware Development Essentials Course by SEKTOR7 Institute
Review of RED TEAM Operator: Malware Development Essentials Course by SEKTOR7 Institute.
Windows Sysinternals Notes
Notes about Windows Sysinternals tools from a security point of view.
Exit Values on Windows
Exit values on Windows are much more robust than on *nix systems. Here are some notes about exit values on Windows