Profile My skills Saved Collections Edit profile Submit a skill

System

System exploitation testing - Active Directory attacks, privilege escalation (Linux/Windows), and exploit development.

transilienceai 26db67f 116 files · 533.9 KB Updated
Security

File contents

System

Test system-level security including Active Directory, privilege escalation, and exploit development.

Techniques

Type Key Vectors
Active Directory Kerberoasting, AS-REP roasting, DCSync, PtH, Golden/RODC Ticket, RBCD, ACL abuse, KeyList, Shadow Credentials, ADCS (ESC1-9/16)
Privilege Escalation SUID/sudo abuse, kernel exploits, service misconfig, token manipulation
Exploit Development Buffer overflow, format string, ROP chains, shellcode, heap exploitation

Workflow

  1. Enumerate system and domain information
  2. Identify escalation paths and misconfigurations
  3. Exploit with appropriate techniques
  4. Demonstrate impact (domain admin, root access)
  5. Document attack chain with evidence

Reference

  • reference/INDEX.md - Router for AD attacks, privilege escalation, and exploit-dev scenarios (see reference/scenarios/)
  • reference/format-string-exploitation.md - Format string read/write primitives, architecture differences, mitigation bypass
  • reference/heap-exploitation.md - Modern glibc heap techniques (tcache poison, unsorted bin leak, environ stack leak, ROP)

transilienceai/communitytools/tree/main/skills/system commit 26db67f761

Browse category

Frequently asked questions

npx skillmds add transilienceai/system