A lab demonstration uses SessionHub with admin access to launch a Sliver beacon in another Windows user session, then examines the tool’s code, which the presenter says uses a Windows Help COM interface.
The presenter demonstrates a custom C#/.NET utility that uses the current user's token to find domain systems where they have local-admin access, then shows executing it through Sliver and using PsExec for lateral movement.
In a Windows Server 2019 lab, the presenter tested Sliver C2 payload formats against Windows Defender. The generated variants were detected, and the presenter concluded that Sliver alone was insufficient to bypass the defenses.
A red-team lab demonstrates how to identify SMTP servers, test for unauthenticated open relays and sender impersonation, then connect a relay to GoPhish. The speaker recommends checking internal and exposed mail servers.
A red-team tutorial explains how SCShell temporarily changes a Windows service configuration to run commands remotely, then restores it. A Sliver C2 lab demonstrates PowerShell payload staging, in-memory execution, and SYSTEM-context beacons.
A lab-based red-team tutorial demonstrates lateral movement through C2 tunnels and built-in modules, using Sliver and Mythic with SMB, WMI, SSH and RDP. It explains beacon/session tradeoffs and credential- or token-based remote access.
A hands-on Ligolo-NG tutorial configures a virtual lab, connects an agent to a proxy, and routes traffic to internal hosts for network scanning. The presenter also discusses detection and evasion considerations.
The video describes phishing a package maintainer and publishing compromised Node.js packages. It says their JavaScript malware injected into browsers and replaced cryptocurrency destination addresses before transactions were signed.
The video explains handshake capture and password cracking, then demonstrates an evil-twin access point and captive portal that solicits Wi-Fi credentials. It notes hardware requirements, a firewall limitation and the need for authorization.
A hands-on tutorial demonstrates BloodHound CE and SharpHound in an intentionally vulnerable Active Directory lab, examining privileges and attack paths while noting collector errors that may have limited results.
A red-team lab demonstrates how firewall sessions, network-flow alerts and proxy logs can reveal beacon traffic and staged payloads, while discussing visibility gaps and evasion tradeoffs.
The presenter builds an internal email lab with hMailServer, configures SMTP and email clients, verifies authenticated message delivery, and demonstrates administrator sender impersonation for future phishing exercises.
A presenter demonstrates Adaptix C2 in a virtual lab, tests a Windows agent against endpoint and sandbox checks, and examines potentially predictable network traffic.
A live ethical hacking demonstration tests Windows shortcut payloads, troubleshoots a generator, and manually creates an LNK file that stages a PowerShell callback in a test environment.
