A video demonstrates a C++ loader fetching an encrypted shellcode payload from Discord’s CDN, decrypting and executing it in memory, and opening a reverse shell. The presenter says the demo highlights a risk and urges access controls.
The tutorial configures Mythic’s Discord profile and Athena agent to relay commands and callbacks through Discord when a lab host cannot directly reach the external C2 server.
A red-team tutorial demonstrates password spraying against an intentionally misconfigured Active Directory lab using Sliver C2 and NetExec, including password-policy checks, LDAP user enumeration and a SOCKS5 pivot. The presenter reports obtaining domain-admin access.
A lab walkthrough demonstrates using Mythic C2 and unconstrained delegation to capture a domain controller ticket, perform DCSync, and revoke the risky delegation setting.
A video demonstrates a C loader downloaded over HTTP that retrieves reverse-shell shellcode over SMB and runs it in memory on Windows. The presenter reports Defender alerted but did not stop the shell; testing was limited to Defender.
A sponsored hands-on review tests SafeLine WAF against SQL injection, XSS, directory traversal, command injection and HTML injection, then demonstrates proxying Mythic C2 traffic and protecting file access with authentication. The tester reports several protection gaps.
The video demonstrates an authorized Active Directory lab engagement completed with one prompt in about 40 minutes. The AI used Mythic C2 access and exploited weak credentials and ADCS misconfigurations to reach domain-admin privileges.
A red-team tutorial demonstrates escalation from a low-privilege user to domain administrator in an intentionally vulnerable Active Directory lab, using AD CS ESC1 certificate abuse before extracting credentials with DCSync.
A red-team tutorial demonstrates using a workstation as an internal redirector so a Sliver HTTPS beacon can communicate through a server that cannot connect directly outside the network.
The video recommends building pentesting skills through daily hands-on practice, supported by foundations in networking, system administration and programming. It also advises documenting work and using AI to understand tasks rather than blindly relying on it.
A lab demonstration shows an AI-generated Windows credential prompt using host or domain details to appear legitimate and capture valid and failed credentials through a Mythic C2 agent.
A lab demonstration shows SharpDCSync retrieving Active Directory user hashes through DCSync, including execution via Mythic. The presenter reports no Defender alert in the test and notes that the attack requires replication-capable permissions.
The presenter demonstrates AD Recon for Active Directory penetration tests, covering LDAP/ADWS enumeration, report parsing, password-spraying reconnaissance, and execution through a C2 framework, PowerShell, and WinPwn.
A penetration tester demonstrates an i3-like Windows workspace using Glaze VM, YASB and WinHacks, and describes separating operational work into VMs that can be reverted or deleted if compromised.
A presenter tests a local Outflank model for generating Windows shellcode runners. After troubleshooting and refining prompts, the presenter reports a working staged payload and a beacon with Defender enabled on Windows 11.
The video demonstrates turning a rooted Android phone into a discreet Linux device for physical pentests, then using Tailscale and a proxy-agent tunnel to maintain remote access and route scans into the phone’s local network.
The video demonstrates building a lab ADCS server with four certificate-service misconfigurations, inspecting the setup script, and checking vulnerable templates with Certify.
A video explains a RedSun PoC that reportedly exploits Microsoft Defender scan and file-handling behavior to gain SYSTEM access. The presenter says an alert is required and speculates that Microsoft may have issued a signature update.
The video demonstrates Active Directory password spraying in a lab using NetExec, PowerShell and Python, covering account discovery, password-policy risks and lockout coordination. The presenter also describes an Iran-related operation but provides no verification.
A red team lab tutorial builds an intentionally vulnerable MSSQL server, discusses credential reuse and service-account privileges, and troubleshoots a PowerShell setup script and database connectivity.
A red-team lab tutorial uses an AI-generated PowerShell script to introduce Active Directory weaknesses, troubleshoots user-creation errors, and joins a Windows client to the domain.
A hands-on tutorial builds the foundation of an intentionally vulnerable Active Directory lab, installing a virtual firewall and using an AI-generated PowerShell script to configure a Windows Server domain controller.
A presenter plans a vulnerable Active Directory lab with isolated networks, linked SQL servers, simulated phishing targets and centralized security monitoring. Firewall and VM deployment are planned for a later session.
The video explains Process Ghosting and contrasts it with Process Doppelgänging, showing how file sections and process creation are used to execute an in-memory payload. The presenter speculates that the technique may now be detectable.
