Post-Exploitation — Hub
Everything after the first shell — escalate privileges, move laterally, pivot into internal networks.
📌 Sub-Sections
Privilege Escalation
Lateral Movement
Tunneling & Pivoting
Payloads
| Note | Purpose |
|---|
| Shell | Webshells (/usr/share/webshells/php/), reverse shells, shell upgrade |
| powercat | PowerShell Netcat — Windows reverse/bind shell, file transfer |
| Reverse Shell - Base64 bash-c echo and One-Liners | base64 | bash, bash -c, echo, sh, mkfifo, encode payloads |
| Restricted Shell Escape | rbash / lshell — vi :shell, PATH, GTFOBins breakouts |
📌 Post-Exploit Flow
Got shell
├─ Restricted shell? → [[Restricted Shell Escape]] → [[Shell]] upgrade
├─ Loot creds? → [[Credential Discovery]] → [[Credential Graph]]
├─ Linux? → [[Linux]] privesc checklist
├─ Windows? → [[Windows PrivEsc]]
├─ Domain? → [[LatMovement]] + [[Impacket]] + [[Credential Graph]]
└─ Dual-homed? → [[Tunneling]] + [[Chisel]]
Attack / credential trees: Attack Path Graph · Credential Graph
8 items under this folder.