Red Team Notes
search
Ctrlk
  • What is ired.team notes?
  • Pinned
    • Pentesting Cheatsheetschevron-right
    • Active Directory & Kerberos Abusechevron-right
  • offensive security
    • Red Team Infrastructurechevron-right
    • Initial Accesschevron-right
      • Password Spraying Outlook Web Access: Remote Shell
      • Phishing with MS Officechevron-right
        • Phishing: XLM / Macro 4.0
        • T1173: Phishing - DDE
        • T1137: Phishing - Office Macros
        • Phishing: OLE + LNK
        • Phishing: Embedded Internet Explorer
        • Phishing: .SLK Excel
        • Phishing: Replacing Embedded Video with Bogus Payload
        • Inject Macros from a Remote Dotm Template
        • Bypassing Parent Child / Ancestry Detections
        • Phishing: Embedded HTML Forms
      • Phishing with GoPhish and DigitalOcean
      • Forced Authentication
      • NetNTLMv2 hash stealing using Outlook
    • Code Executionchevron-right
    • Code & Process Injectionchevron-right
    • Defense Evasionchevron-right
    • Enumeration and Discoverychevron-right
    • Privilege Escalationchevron-right
    • Credential Access & Dumpingchevron-right
    • Lateral Movementchevron-right
    • Persistencechevron-right
    • Exfiltrationchevron-right
  • reversing, forensics & misc
    • Internalschevron-right
    • Cloudchevron-right
    • Neo4j
    • Dump Virtual Box Memory
    • AES Encryption Using Crypto++ .lib in Visual Studio C++
    • Reversing Password Checking Routine
gitbookPowered by GitBook
block-quoteOn this pagechevron-down
  1. offensive securitychevron-right
  2. Initial Access

Phishing with MS Office

Phishing: XLM / Macro 4.0chevron-rightT1173: Phishing - DDEchevron-rightT1137: Phishing - Office Macroschevron-rightPhishing: OLE + LNKchevron-rightPhishing: Embedded Internet Explorerchevron-rightPhishing: .SLK Excelchevron-rightPhishing: Replacing Embedded Video with Bogus Payloadchevron-rightInject Macros from a Remote Dotm Templatechevron-rightBypassing Parent Child / Ancestry Detectionschevron-rightPhishing: Embedded HTML Formschevron-right
PreviousPassword Spraying Outlook Web Access: Remote Shellchevron-leftNextPhishing: XLM / Macro 4.0chevron-right

Last updated 6 years ago