{"version":1,"pages":[{"id":"D8Jnc0rPTlu3mYaldQG6","title":"Certified Red Team Professional","pathname":"/","siteSpaceId":"sitesp_0SfPQ","emoji":"1f468-1f692","description":"Welcome to RFS notes to CRTP - Certified Red Team Professional by Altered Security."},{"id":"dCOS47Zk0YVi2BogSY6S","title":"Assume Breach Execution Cycle","pathname":"/assume-breach-execution-cycle","siteSpaceId":"sitesp_0SfPQ","emoji":"1f525","description":"Discover comprehensive insights into the Assume Breach Execution Cycle in our in-depth article. Learn strategies, understand its implications and how it impacts cybersecurity."},{"id":"Ln8P9GX0aHcYX8i6SQ46","title":"PowerShell Detections","pathname":"/prepare-your-vm/powershell-detections","siteSpaceId":"sitesp_0SfPQ","emoji":"1f605","description":"Discover the intricacies of CRTP PowerShell Detections in our in-depth article. Learn about its importance, applications, and methodologies for effective cybersecurity management.","breadcrumbs":[{"label":"Prepare your VM","emoji":"1f606"}]},{"id":"9n16xiVPIhzQMnbjxaYc","title":"AMSI Bypass","pathname":"/prepare-your-vm/amsi-bypass","siteSpaceId":"sitesp_0SfPQ","emoji":"1f525","description":"Explore an insightful article about CRTP AMSI Bypass - a key technique in cybersecurity. This piece delves into its design, functionality, and crucial role in securing network infrastructures.","breadcrumbs":[{"label":"Prepare your VM","emoji":"1f606"}]},{"id":"AQzjhQ47qGoflpghBOPp","title":"Tools","pathname":"/prepare-your-vm/tools","siteSpaceId":"sitesp_0SfPQ","emoji":"1f643","description":"","breadcrumbs":[{"label":"Prepare your VM","emoji":"1f606"}]},{"id":"ixF24QC9msXVPZcxwHEc","title":"CMD Commands","pathname":"/prepare-your-vm/cmd-commands","siteSpaceId":"sitesp_0SfPQ","description":"Live of The Land!","breadcrumbs":[{"label":"Prepare your VM","emoji":"1f606"}]},{"id":"Tp10cm7iuCCF5DnomssY","title":"Escape the Machine","pathname":"/prepare-your-vm/escape-the-machine","siteSpaceId":"sitesp_0SfPQ","emoji":"1f923","description":"","breadcrumbs":[{"label":"Prepare your VM","emoji":"1f606"}]},{"id":"4uDuN08S7nROCrs0GnT3","title":"BloodHound","pathname":"/data-visualization/bloodhound","siteSpaceId":"sitesp_0SfPQ","description":"","breadcrumbs":[{"label":"Data Visualization"}]},{"id":"0zlnR4OsyHghBMa8lBGr","title":"AzureHound","pathname":"/data-visualization/azurehound","siteSpaceId":"sitesp_0SfPQ","description":"","breadcrumbs":[{"label":"Data Visualization"}]},{"id":"5yT7DGgXYkk6YJOBickU","title":"RustHound","pathname":"/data-visualization/rusthound","siteSpaceId":"sitesp_0SfPQ","description":"","breadcrumbs":[{"label":"Data Visualization"}]},{"id":"BJuIoZIlLQS8i2jpAI5t","title":"Tools","pathname":"/domain-enumeration/tools","siteSpaceId":"sitesp_0SfPQ","emoji":"0031-20e3","description":"Active Directory Enumeration Tools","breadcrumbs":[{"label":"Domain Enumeration"}]},{"id":"QcLwe46pBxQFHWH08Eff","title":"Domain Enumeration","pathname":"/domain-enumeration/domain-enumeration","siteSpaceId":"sitesp_0SfPQ","emoji":"0032-20e3","description":"Domain enumeration is the process of gathering information about a target domain, such as user accounts, group memberships, and computer systems, to identify potential security vulnerabilities.","breadcrumbs":[{"label":"Domain Enumeration"}]},{"id":"ACZcpDoyeqhTnekrc27P","title":"Users, Groups, Computers  Enumeration","pathname":"/domain-enumeration/users-groups-computers-enumeration","siteSpaceId":"sitesp_0SfPQ","emoji":"0033-20e3","description":"","breadcrumbs":[{"label":"Domain Enumeration"}]},{"id":"SijGZEavFl2L7jSLIUkh","title":"Shares  Enumeration","pathname":"/domain-enumeration/shares-enumeration","siteSpaceId":"sitesp_0SfPQ","emoji":"0034-20e3","description":"","breadcrumbs":[{"label":"Domain Enumeration"}]},{"id":"2ebZwuLfM7M9goMOv6Tn","title":"GPO  Enumeration","pathname":"/domain-enumeration/gpo-enumeration","siteSpaceId":"sitesp_0SfPQ","emoji":"0035-20e3","description":"","breadcrumbs":[{"label":"Domain Enumeration"}]},{"id":"7Vpmzyzw8mtJmerNTGil","title":"ACLs  Enumeration","pathname":"/domain-enumeration/acls-enumeration","siteSpaceId":"sitesp_0SfPQ","emoji":"0036-20e3","description":"","breadcrumbs":[{"label":"Domain Enumeration"}]},{"id":"grrDgUzeXtxprJjeR6YW","title":"Domain Trusts","pathname":"/domain-enumeration/domain-trusts","siteSpaceId":"sitesp_0SfPQ","emoji":"0037-20e3","description":"Explore our comprehensive article on Domain Trusts, an essential aspect in network security.","breadcrumbs":[{"label":"Domain Enumeration"}]},{"id":"jSiYp0MpjYyS2XfaT3lX","title":"Domain Forests","pathname":"/domain-enumeration/domain-forests","siteSpaceId":"sitesp_0SfPQ","description":"","breadcrumbs":[{"label":"Domain Enumeration"}]},{"id":"YDjyosCX1HSPaU8r2Fd2","title":"Miscellaneous Enumeration","pathname":"/domain-enumeration/miscellaneous-enumeration","siteSpaceId":"sitesp_0SfPQ","emoji":"0039-20e3","description":"","breadcrumbs":[{"label":"Domain Enumeration"}]},{"id":"KVDx3hKg100cE84ipX0Q","title":"User Hunting","pathname":"/domain-enumeration/user-hunting","siteSpaceId":"sitesp_0SfPQ","description":"","breadcrumbs":[{"label":"Domain Enumeration"}]},{"id":"thXp3OYyD0lyC1CT7qPU","title":"Theory","pathname":"/local-privilege-escalation/theory","siteSpaceId":"sitesp_0SfPQ","description":"","breadcrumbs":[{"label":"Local Privilege Escalation"}]},{"id":"hkrSwjUC3xqug5UXFlai","title":"Automation Tools","pathname":"/local-privilege-escalation/automation-tools","siteSpaceId":"sitesp_0SfPQ","description":"","breadcrumbs":[{"label":"Local Privilege Escalation"}]},{"id":"ZHIxG90Lt6GswxhLefHZ","title":"Techniques","pathname":"/local-privilege-escalation/techniques","siteSpaceId":"sitesp_0SfPQ","description":"","breadcrumbs":[{"label":"Local Privilege Escalation"}]},{"id":"HAeYvRBmUL0NAhow9WLy","title":"Thinking","pathname":"/lateral-movement/thinking","siteSpaceId":"sitesp_0SfPQ","description":"","breadcrumbs":[{"label":"Lateral Movement"}]},{"id":"tey8X9Mfe8TAMbVbsiPw","title":"WinRS","pathname":"/lateral-movement/winrs","siteSpaceId":"sitesp_0SfPQ","description":"","breadcrumbs":[{"label":"Lateral Movement"}]},{"id":"x9xRG2jNXZt7HzXoHhae","title":"PowerShell Remoting","pathname":"/lateral-movement/powershell-remoting","siteSpaceId":"sitesp_0SfPQ","description":"You can run commands on one or hundreds of computers with a single PowerShell command. Windows PowerShell supports remote computing by using various technologies, including WMI, RPC, and WS-Management","breadcrumbs":[{"label":"Lateral Movement"}]},{"id":"NB2YS98zXK2xHFyol8RS","title":"Invoke-MimiKatz","pathname":"/lateral-movement/invoke-mimikatz","siteSpaceId":"sitesp_0SfPQ","description":"","breadcrumbs":[{"label":"Lateral Movement"}]},{"id":"2yaqQniOTZJyS2qOZfKd","title":"CrackMapExec","pathname":"/lateral-movement/crackmapexec","siteSpaceId":"sitesp_0SfPQ","description":"","breadcrumbs":[{"label":"Lateral Movement"}]},{"id":"23EM50xpxJsJUizcj3dg","title":"Golden tickets","pathname":"/domain-persistence/golden-tickets","siteSpaceId":"sitesp_0SfPQ","emoji":"1f525","description":"Explore our thorough article about Golden tickets, unlocking the mysteries behind this sought-after treasure in events and games. Dive into the golden opportunity now!","breadcrumbs":[{"label":"Domain Persistence"}]},{"id":"8hSUQufqlEsLpXhJrneS","title":"Silver Tickets","pathname":"/domain-persistence/silver-tickets","siteSpaceId":"sitesp_0SfPQ","emoji":"1f948","description":"Discover everything you need to know about Silver Tickets in our comprehensive guide. Learn origins, uses, and important facts related to Silver Tickets.","breadcrumbs":[{"label":"Domain Persistence"}]},{"id":"UTHBSAlp2uvC9eSngRST","title":"Diamond Tickets","pathname":"/domain-persistence/diamond-tickets","siteSpaceId":"sitesp_0SfPQ","emoji":"1f48e","description":"Dive into our comprehensive article about Diamond Tickets, exploring their value, significance, and usage. Discover what sets these tickets apart in the world of luxury and exclusivity.","breadcrumbs":[{"label":"Domain Persistence"}]},{"id":"lzG1SnsY8pW1ISVWF1i3","title":"Skeleton Keys","pathname":"/domain-persistence/skeleton-keys","siteSpaceId":"sitesp_0SfPQ","emoji":"1f692","description":"","breadcrumbs":[{"label":"Domain Persistence"}]},{"id":"UJ9elCl3M1oMkorOGvfg","title":"DSRM","pathname":"/domain-persistence/dsrm","siteSpaceId":"sitesp_0SfPQ","description":"Directory Services Restore Mode","breadcrumbs":[{"label":"Domain Persistence"}]},{"id":"gsS29HMJxucHjIu81YFq","title":"Custom SSP - Track logons","pathname":"/domain-persistence/custom-ssp-track-logons","siteSpaceId":"sitesp_0SfPQ","description":"","breadcrumbs":[{"label":"Domain Persistence"}]},{"id":"7pos0fMENxWVAy3VN4kc","title":"ACLs","pathname":"/domain-persistence/acls","siteSpaceId":"sitesp_0SfPQ","description":"","breadcrumbs":[{"label":"Domain Persistence"}]},{"id":"D2PhwSI8YcglS8GV6Gj7","title":"AdminSDHolder","pathname":"/domain-persistence/acls/adminsdholder","siteSpaceId":"sitesp_0SfPQ","emoji":"0031-20e3","description":"Domain persistence using AdminC","breadcrumbs":[{"label":"Domain Persistence"},{"label":"ACLs"}]},{"id":"c8Wulu7prWDonl4jV9Ru","title":"DCsync","pathname":"/domain-persistence/acls/dcsync","siteSpaceId":"sitesp_0SfPQ","emoji":"0032-20e3","description":"","breadcrumbs":[{"label":"Domain Persistence"},{"label":"ACLs"}]},{"id":"xnwL5GPx8DPLRIoDr9rB","title":"WMI","pathname":"/domain-persistence/acls/wmi","siteSpaceId":"sitesp_0SfPQ","emoji":"0033-20e3","description":"","breadcrumbs":[{"label":"Domain Persistence"},{"label":"ACLs"}]},{"id":"MgP157VksvpK8V6cnTtq","title":"Remote Powershell","pathname":"/domain-persistence/acls/remote-powershell","siteSpaceId":"sitesp_0SfPQ","emoji":"0034-20e3","description":"","breadcrumbs":[{"label":"Domain Persistence"},{"label":"ACLs"}]},{"id":"LE4uJFzixiuPxWoqnGPQ","title":"Remote Registry","pathname":"/domain-persistence/acls/remote-registry","siteSpaceId":"sitesp_0SfPQ","emoji":"0035-20e3","description":"","breadcrumbs":[{"label":"Domain Persistence"},{"label":"ACLs"}]},{"id":"nroPHCtaCACJnkSkPWtp","title":"Kerberoast","pathname":"/domain-privilege-escalation/kerberoast","siteSpaceId":"sitesp_0SfPQ","emoji":"1f7e2","description":"","breadcrumbs":[{"label":"Domain Privilege Escalation"}]},{"id":"C2Ny25PETjifLqWF0xtR","title":"AS-REPS Roasting","pathname":"/domain-privilege-escalation/as-reps-roasting","siteSpaceId":"sitesp_0SfPQ","emoji":"1f7e2","description":"","breadcrumbs":[{"label":"Domain Privilege Escalation"}]},{"id":"3G3xj86iuSR16p6TV5GE","title":"Set SPN","pathname":"/domain-privilege-escalation/set-spn","siteSpaceId":"sitesp_0SfPQ","emoji":"1f7e2","description":"","breadcrumbs":[{"label":"Domain Privilege Escalation"}]},{"id":"19rA1K8qmQw1c2gGFvGq","title":"Unconstrained Delegation","pathname":"/domain-privilege-escalation/unconstrained-delegation","siteSpaceId":"sitesp_0SfPQ","emoji":"1f7e2","description":"","breadcrumbs":[{"label":"Domain Privilege Escalation"}]},{"id":"ejOxpfRZShDXZzK5SZ9x","title":"Constrained Delegation","pathname":"/domain-privilege-escalation/constrained-delegation","siteSpaceId":"sitesp_0SfPQ","emoji":"1f7e2","description":"Dive into our comprehensive article exploring the intricacies of Constrained Delegation. Uncover its functions, role, and understanding its impact for an effective system management strategy.","breadcrumbs":[{"label":"Domain Privilege Escalation"}]},{"id":"SxU0C63YjPRP8DwjGDNC","title":"DNS Admins","pathname":"/domain-privilege-escalation/dns-admins","siteSpaceId":"sitesp_0SfPQ","emoji":"1f7e2","description":"","breadcrumbs":[{"label":"Domain Privilege Escalation"}]},{"id":"G0wGWUPCRayx7GmUjznW","title":"Enterprise Admins","pathname":"/domain-privilege-escalation/enterprise-admins","siteSpaceId":"sitesp_0SfPQ","description":"","breadcrumbs":[{"label":"Domain Privilege Escalation"}]},{"id":"51w84u8LF7UjCppqDmMB","title":"Child to parent - Trust tickets","pathname":"/domain-privilege-escalation/enterprise-admins/child-to-parent-trust-tickets","siteSpaceId":"sitesp_0SfPQ","description":"","breadcrumbs":[{"label":"Domain Privilege Escalation"},{"label":"Enterprise Admins"}]},{"id":"1m8DHtU43w22W0hWOnOp","title":"Child to parent - krbtgt hash","pathname":"/domain-privilege-escalation/enterprise-admins/child-to-parent-krbtgt-hash","siteSpaceId":"sitesp_0SfPQ","description":"","breadcrumbs":[{"label":"Domain Privilege Escalation"},{"label":"Enterprise Admins"}]},{"id":"TwCxMRqpGI0rfm4D4hHy","title":"Crossforest attacks","pathname":"/domain-privilege-escalation/crossforest-attacks","siteSpaceId":"sitesp_0SfPQ","emoji":"1f7e2","description":"","breadcrumbs":[{"label":"Domain Privilege Escalation"}]},{"id":"ltCsCiDdq2o5cCk61ZbX","title":"AD CS","pathname":"/domain-privilege-escalation/ad-cs","siteSpaceId":"sitesp_0SfPQ","description":"","breadcrumbs":[{"label":"Domain Privilege Escalation"}]},{"id":"BTUOP8k3EDesIyb9mJmw","title":"Abuse MSSQL Servers","pathname":"/domain-privilege-escalation/abuse-mssql-servers","siteSpaceId":"sitesp_0SfPQ","emoji":"1f7e2","description":"","breadcrumbs":[{"label":"Domain Privilege Escalation"}]}]}