Persistence - Revision history

Booda at 16:03, 4 August 2023

2023-08-04T16:03:00Z

← Older revision		Revision as of 16:03, 4 August 2023
Line 9:		Line 9:
	* PAM: [https://book.hacktricks.xyz/linux-hardening/linux-post-exploitation Pluggable Authentication Module]		* PAM: [https://book.hacktricks.xyz/linux-hardening/linux-post-exploitation Pluggable Authentication Module]
	* DNS: https://github.com/iagox86/dnscat2		* DNS: https://github.com/iagox86/dnscat2
	* Blog: Windows Persistence Techniques: https://www.ired.team/offensive-security/persistence		* Blog - Windows Persistence Techniques: https://www.ired.team/offensive-security/persistence

	==== C2 Frameworks ====		==== C2 Frameworks ====

Booda at 16:02, 4 August 2023

2023-08-04T16:02:47Z

← Older revision		Revision as of 16:02, 4 August 2023
Line 9:		Line 9:
	* PAM: [https://book.hacktricks.xyz/linux-hardening/linux-post-exploitation Pluggable Authentication Module]		* PAM: [https://book.hacktricks.xyz/linux-hardening/linux-post-exploitation Pluggable Authentication Module]
	* DNS: https://github.com/iagox86/dnscat2		* DNS: https://github.com/iagox86/dnscat2
	* Windows Persistence Techniques: https://www.ired.team/offensive-security/persistence		* Blog: Windows Persistence Techniques: https://www.ired.team/offensive-security/persistence

	==== C2 Frameworks ====		==== C2 Frameworks ====

Booda: Persistence techniques

2023-07-30T19:10:12Z

Persistence techniques

New page

See below tools, resources and frameworks to achieve [https://attack.mitre.org/tactics/TA0003 persistence], make sure to customize and obfuscate your implants to avoid AV detection.

* Gsocket: https://github.com/hackerschoice/gsocket
* PHP: https://github.com/epinna/weevely3
* [https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Reverse%20Shell%20Cheatsheet.md#reverse-shell-cheat-sheet Reverse Shell] Generator: https://www.revshells.com
* Meterpreter: https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Reverse%20Shell%20Cheatsheet.md#meterpreter-shell
* Blog: https://dhilipsanjay.gitbook.io/ctfs/tryhackme/tryhackme/linuxbackdoors
* Database: https://www.adminer.org
* PAM: [https://book.hacktricks.xyz/linux-hardening/linux-post-exploitation Pluggable Authentication Module]
* DNS: https://github.com/iagox86/dnscat2
* Windows Persistence Techniques: https://www.ired.team/offensive-security/persistence

==== C2 Frameworks ====
[https://www.thec2matrix.com/matrix C2 Matrix]. Open source and closed source command and control (C2) frameworks. Go to [https://enlacehacktivista.org/index.php?title=Initial_Access_Tactics,_techniques_and_procedures#Buying_access popular forums] to find cracked frameworks such as cobalt strike.
* https://docs.google.com/spreadsheets/d/1b4mUxa6cDQuTV2BPC6aA-GR4zGZi0ooPYtBe4IgPsSc
* Living Off Trusted Sites. Use popular legitimate domains when conducting phishing, C&C, exfiltration and downloading tools to evade detection: https://lots-project.com