Useful Links

Linux

The Discovery and Exploitation of CVE-2022-25636 · Nick Gregorynickgregory.me

Hatching - Automated malware analysis solutionshatching_io

Deep Dive Into Stageless Meterpreter Payloads | Rapid7 BlogRapid7

Meterpreter Payload Deep Dive

PayloadsAllTheThings/Methodology and Resources/Windows - Privilege Escalation.md at master · swisskyrepo/PayloadsAllTheThingsGitHub

Linux Authentication Mechanism

GitHub - GhostPack/Rubeus: Trying to tame the three-headed dog.GitHub

How to check whether the Linux server is integrated with Active Directory (AD)?2DayGeek

https://ytnuobgub.gitbook.io/htb/htb-academy-web-modules-for-cbbh/file-inclusionytnuobgub.gitbook.io

LFI2RCE via phpinfo() - HackTricksbook.hacktricks.xyz

https://linuxconfig.org/how-to-use-special-permissions-the-setuid-setgid-and-sticky-bitslinuxconfig.org

HackTheBox – BookIvan's IT learning blog

Windows

Security Update Guide - Microsoft Security Response Centermsrc.microsoft.com

How User Account Control worksMicrosoftLearn

https://unit42.paloaltonetworks.com/exploitation-of-windows-cve-2019-0708-bluekeep-three-ways-to-write-data-into-the-kernel-with-rdp-pdu/unit42.paloaltonetworks.com

Security Subsystem ArchitectureMicrosoftLearn

Pass-the-Hash Is Dead: Long Live LocalAccountTokenFilterPolicy - SpecterOpsSpecterOps

Windows - Privilege Escalation - Internal All The Thingsswisskyrepo.github.io

End Of Life Dates for Microsoft Windows and Office | Michael SpiceMichael Spice | Michael Spice IT Services