Web shells are malicious scripts which are uploaded to a target host after an initial compromise. They can then be used to pivot to further hosts within a network. China Chopper, which is … 展开

Mimikatz, developed in 2007 by French programmer Benjamin Delpy (see this write-upby Wired for a compelling description of its genesis) collect the credentials of users logged in to a targeted Windows machine, using a Windows process called Local … 展开

Attackers often seek disguise their location when compromising a target. They may use TOR, or proxy tools like HUC Packet Transmitter (HTran) which is used to intercept and redirect TCP connections from the local host to a remote host. The tool has been freely … 展开

The PowerShell Empire framework (Empire) was designed as a legitimate penetration testing tool in 2015. It allows continued exploitation once an attacker has gained access to a system. The tool provides an attacker with the ability to escalate privileges, … 展开