BorderGate

Active Directory Certificate Services

Using AD CS certificates to achieve persistence in an Active Directory environment.

Extracting NTLM hashes without the need for Mimikatz.

A review of the Evasion Techniques and Breaching Defences course by Offensive Security.

Using relative JMP instructions to escape small buffers.

Blocking outbound docker traffic using an IPTables firewall.

Performing NTLM relay attacks using SMB and LDAP.

Bypassing NX on 64-bit Linux.

Bypassing NX & ASLR using pointer leakage and ROP.

A quick tutorial on exploiting format string vulnerabilities to read and write memory.

A guide to enabling PowerShell constrained mode.

Ensuring all network traffic is routed over an OpenVPN connection.

A list of one line commands for Windows to download and execute payloads.