Red Team Notes 2.0

Introduction
Red Team
Red Team Techniques
Active Directory
- Active Directory
- Active Directory Attacks
Red Team Infrastructure
Situational Awareness
- Covenant and C#
- Empire and PowerShell
Credential Dumping
Persistence
- Userland Persistence
- Elevated Persistence
Defense Evasion
- Disable or Modify Tools
- Obfuscating Files
Privilege Escalation
- PowerUp
- PrivescCheck
Lateral Movement
- RDP
- PowerShell Remoting
Files
- Red Team Guide

Powered by GitBook

On this page

Was this helpful?

Red Team Techniques

Execution

T1203: Exploitation for Client Execution

Office Applications

PreviousCommon Third-Party Applications NextT1059: Command and Scripting Interpreter

Last updated 3 years ago

Office Applications

Macros in this example I will show the simple use of Macros to Execute a Shell in this technique it will work as a downloader to call our payload and then Execute, while it cleans up on its own leaving no files on the System

Example:

Shell:

Please Ignore my multiple tries