{"version":1,"pages":[{"id":"-MfpOA5_slKzpn0_RpVZ","title":"The Red Team Vade Mecum","pathname":"/the-red-team-handbook","siteSpaceId":"sitesp_UQAGA","description":""},{"id":"-MgCAZ2EWiMJSd_TCm9C","title":"Defense Evasion","pathname":"/the-red-team-handbook/techniques/defense-evasion","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"}]},{"id":"-MhRf__pB88M2WO1OFqo","title":"Binary Properties and Code Signing","pathname":"/the-red-team-handbook/techniques/defense-evasion/binary-properties-and-code-signing","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"}]},{"id":"-MgWyFQ6UPRvLvc-oz42","title":"ATA/ATP","pathname":"/the-red-team-handbook/techniques/defense-evasion/ata-atp","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"}]},{"id":"-MgWyImsbZQJs9pvF-ys","title":"Important Note","pathname":"/the-red-team-handbook/techniques/defense-evasion/ata-atp/note","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"},{"label":"ATA/ATP"}]},{"id":"-MgY56isdG0qAP4oO40R","title":"Intro","pathname":"/the-red-team-handbook/techniques/defense-evasion/ata-atp/intro","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"},{"label":"ATA/ATP"}]},{"id":"-MgsY7CuzXMLIWRbhLoH","title":"Lateral Movement","pathname":"/the-red-team-handbook/techniques/defense-evasion/ata-atp/lateral-movement","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"},{"label":"ATA/ATP"}]},{"id":"-MgsgdXTtpG_V4EanT27","title":"Domain Dominance","pathname":"/the-red-team-handbook/techniques/defense-evasion/ata-atp/domain-dominance","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"},{"label":"ATA/ATP"}]},{"id":"-MgWza3hDGhXZIqvW2Ma","title":"Identification","pathname":"/the-red-team-handbook/techniques/defense-evasion/ata-atp/identifying","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"},{"label":"ATA/ATP"}]},{"id":"-MgcoHFX2jwCHOeSpTsO","title":"Recon","pathname":"/the-red-team-handbook/techniques/defense-evasion/ata-atp/recon","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"},{"label":"ATA/ATP"}]},{"id":"-MgsEAEyfYmuNCPo49NE","title":"Blocking/Disabling Telemetry","pathname":"/the-red-team-handbook/techniques/defense-evasion/ata-atp/blocking-disabling-telemetry","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"},{"label":"ATA/ATP"}]},{"id":"-MgsOFezKtmSeSsq50RF","title":"Trusted Installer","pathname":"/the-red-team-handbook/techniques/defense-evasion/ata-atp/blocking-disabling-telemetry/trusted-installer","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"},{"label":"ATA/ATP"},{"label":"Blocking/Disabling Telemetry"}]},{"id":"-MgHN20iZX6p-bYfU6m9","title":"Tips and Tricks","pathname":"/the-red-team-handbook/techniques/defense-evasion/tips-and-tricks","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"}]},{"id":"-MgDl0GbCSu4XlaMn1sM","title":"Basics","pathname":"/the-red-team-handbook/techniques/defense-evasion/basics","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"}]},{"id":"-MgDlns98rrEzPQ6ayvR","title":"IOCs","pathname":"/the-red-team-handbook/techniques/defense-evasion/basics/iocs","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"},{"label":"Basics"}]},{"id":"-MgDzXjZGTCIJt4xDDk7","title":"High Level Overview of EDR technologies","pathname":"/the-red-team-handbook/techniques/defense-evasion/basics/iocs/high-level-overview-of-edr-technologies","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"},{"label":"Basics"},{"label":"IOCs"}]},{"id":"-MgDyT_9ee8E23gTT42p","title":"Sandbox Evasion","pathname":"/the-red-team-handbook/techniques/defense-evasion/basics/sandbox-evasion","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"},{"label":"Basics"}]},{"id":"-MgDvzRhmJwpz1eFTToo","title":"Obfuscating Imports","pathname":"/the-red-team-handbook/techniques/defense-evasion/basics/obfuscating-imports","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"},{"label":"Basics"}]},{"id":"-MgSmido3y3iK5hrBlGa","title":"Bootstrapping","pathname":"/the-red-team-handbook/techniques/defense-evasion/basics/obfuscating-imports/bootstrapping","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"},{"label":"Basics"},{"label":"Obfuscating Imports"}]},{"id":"-MgDl4Sk3Ar6EOBv1LyW","title":"Encrypting Strings","pathname":"/the-red-team-handbook/techniques/defense-evasion/basics/encrypting-strings","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"},{"label":"Basics"}]},{"id":"-MgNrr3KX47m-TcWaSmh","title":"Disabling/Patching Telemetry","pathname":"/the-red-team-handbook/techniques/defense-evasion/disabling-patching-telemetry","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"}]},{"id":"-MgModJ8JtiCnj-Alfqa","title":"ETW Bypasses","pathname":"/the-red-team-handbook/techniques/defense-evasion/disabling-patching-telemetry/etw-bypasses","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"},{"label":"Disabling/Patching Telemetry"}]},{"id":"-MgJAm1vZwKwj7GsTjef","title":"AMSI Bypasses","pathname":"/the-red-team-handbook/techniques/defense-evasion/disabling-patching-telemetry/amsi-bypasses","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"},{"label":"Disabling/Patching Telemetry"}]},{"id":"-MgNsTVeuoXEFEDrHziQ","title":"Minimization","pathname":"/the-red-team-handbook/techniques/defense-evasion/minimization","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"}]},{"id":"-MgNsVJICioqw6muxUCD","title":"Commands to Avoid","pathname":"/the-red-team-handbook/techniques/defense-evasion/minimization/commands-to-avoid","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"},{"label":"Minimization"}]},{"id":"-MgOG0loeOqTjaOQ5f6d","title":"Pivoting","pathname":"/the-red-team-handbook/techniques/defense-evasion/minimization/pivoting","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"},{"label":"Minimization"}]},{"id":"-MfpXb2M_A1kMw3HS-ET","title":"Benefits of Using APIs","pathname":"/the-red-team-handbook/techniques/defense-evasion/minimization/benefits-of-using-apis","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"},{"label":"Minimization"}]},{"id":"-Mhg2IJIyIXQvH1zS-D_","title":"Thread-less Payload Execution","pathname":"/the-red-team-handbook/techniques/defense-evasion/minimization/thread-less-payload-execution","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"},{"label":"Minimization"}]},{"id":"-Mhasn4pcTNoNOQToC3V","title":"DLL Hollowing","pathname":"/the-red-team-handbook/techniques/defense-evasion/minimization/module-stomping","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"},{"label":"Minimization"}]},{"id":"-MgNrmLF5oeXVvth0UHX","title":"Misdirection","pathname":"/the-red-team-handbook/techniques/defense-evasion/misdirection","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"}]},{"id":"-MgHMIF1HaFTtStfil4M","title":"Command Line Argument Spoofing","pathname":"/the-red-team-handbook/techniques/defense-evasion/misdirection/command-line-argument-spoofing","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"},{"label":"Misdirection"}]},{"id":"-MgHLm3f9W3Q0eqPBTN7","title":"PPID Spoofing via CreateProcess","pathname":"/the-red-team-handbook/techniques/defense-evasion/misdirection/ppid-spoofing-via-createprocess","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"},{"label":"Misdirection"}]},{"id":"-MhUwYgQjWpQfLBYCGkK","title":"Switching Parents","pathname":"/the-red-team-handbook/techniques/defense-evasion/misdirection/switching-parents","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"},{"label":"Misdirection"}]},{"id":"-Mh6CiJ2ukzyOh_r-At9","title":"Dechaining via WMI","pathname":"/the-red-team-handbook/techniques/defense-evasion/misdirection/switching-parents/ppid-spoofing-via-wmi","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"},{"label":"Misdirection"},{"label":"Switching Parents"}]},{"id":"-MgIJFhoaKpE-3PhS01-","title":"Hiding our Payloads","pathname":"/the-red-team-handbook/techniques/defense-evasion/hiding-our-payloads","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"}]},{"id":"-MgIJQzIGNKkdJKLsox7","title":"Event Logs","pathname":"/the-red-team-handbook/techniques/defense-evasion/hiding-our-payloads/event-logs","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"},{"label":"Hiding our Payloads"}]},{"id":"-MgIJP33xrYUhWb82xpu","title":"File metadata","pathname":"/the-red-team-handbook/techniques/defense-evasion/hiding-our-payloads/file-metadata","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"},{"label":"Hiding our Payloads"}]},{"id":"-MgIJL-xoLYnM5B0vLTN","title":"Registry Keys","pathname":"/the-red-team-handbook/techniques/defense-evasion/hiding-our-payloads/registry-keys","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"},{"label":"Hiding our Payloads"}]},{"id":"-MgIJJqnVI9_SPq4Zk6y","title":"ADS","pathname":"/the-red-team-handbook/techniques/defense-evasion/hiding-our-payloads/ads","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"},{"label":"Hiding our Payloads"}]},{"id":"-MgCAbQagae-N4ZHz7rX","title":"IPC For Evasion and Control","pathname":"/the-red-team-handbook/techniques/defense-evasion/ipc-for-sandbox-evasion-and-organization","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Defense Evasion"}]},{"id":"-Mg41vfZrAJJEhBLZVt1","title":"Privilege Escalation","pathname":"/the-red-team-handbook/techniques/privilege-escalation","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"}]},{"id":"-Mg41yNYJbuhYnDO-8NF","title":"Hunting For Passwords","pathname":"/the-red-team-handbook/techniques/privilege-escalation/hunting-for-passwords","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Privilege Escalation"}]},{"id":"-Mg7F-ZJ_pEZm39WThBK","title":"To System","pathname":"/the-red-team-handbook/techniques/privilege-escalation/to-system","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Privilege Escalation"}]},{"id":"-Mg8ftOGse46WRwInMRG","title":"New Service","pathname":"/the-red-team-handbook/techniques/privilege-escalation/to-system/new-service","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Privilege Escalation"},{"label":"To System"}]},{"id":"-MhH6_OkKsYqvySH6nDy","title":"Named Pipe Impersonation","pathname":"/the-red-team-handbook/techniques/privilege-escalation/to-system/named-pipe-impersonation","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Privilege Escalation"},{"label":"To System"}]},{"id":"-Mg7HBqx41UkPkoSnvRd","title":"Local Exploits","pathname":"/the-red-team-handbook/techniques/privilege-escalation/to-system/local-exploits","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Privilege Escalation"},{"label":"To System"}]},{"id":"-Mg7F35QkCx9waFhxZs8","title":"AlwaysInstallElevated","pathname":"/the-red-team-handbook/techniques/privilege-escalation/to-system/alwaysinstallelevated","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Privilege Escalation"},{"label":"To System"}]},{"id":"-Mg7W52n0ldWud0aH0I6","title":"Hijacking Execution","pathname":"/the-red-team-handbook/techniques/privilege-escalation/hijacking-execution","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Privilege Escalation"}]},{"id":"-Mg7WHiv8FS2EwvPiSjj","title":"Environment Variable interception","pathname":"/the-red-team-handbook/techniques/privilege-escalation/hijacking-execution/environment-variable-interception","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Privilege Escalation"},{"label":"Hijacking Execution"}]},{"id":"-Mg7W7NZueukj0ttaJxG","title":"DLL Hijacking","pathname":"/the-red-team-handbook/techniques/privilege-escalation/hijacking-execution/dll-hijacking","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Privilege Escalation"},{"label":"Hijacking Execution"}]},{"id":"-Mg45PM1mJBPvbHYQdM9","title":"Insecure Permissions","pathname":"/the-red-team-handbook/techniques/privilege-escalation/insecure-permissions","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Privilege Escalation"}]},{"id":"-Mg7STHcsbQwjcuJMnDe","title":"Missing Services and Tasks","pathname":"/the-red-team-handbook/techniques/privilege-escalation/insecure-permissions/missing-services-and-tasks","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Privilege Escalation"},{"label":"Insecure Permissions"}]},{"id":"-Mg78ZyluTbuZY1Q8QSj","title":"Misconfigured Registry Hives","pathname":"/the-red-team-handbook/techniques/privilege-escalation/insecure-permissions/misconfigured-registry-hives","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Privilege Escalation"},{"label":"Insecure Permissions"}]},{"id":"-Mg47a1XQAVyYZVihghn","title":"Insecure Binary Path","pathname":"/the-red-team-handbook/techniques/privilege-escalation/insecure-permissions/insecure-binary-path","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Privilege Escalation"},{"label":"Insecure Permissions"}]},{"id":"-Mg45SchuQQwL2Mveqxe","title":"Unquoted Service Paths","pathname":"/the-red-team-handbook/techniques/privilege-escalation/insecure-permissions/unquoted-service-paths","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Privilege Escalation"},{"label":"Insecure Permissions"}]},{"id":"-Mfzg1M_rnRbAtR4gJ-y","title":"Enumeration","pathname":"/the-red-team-handbook/techniques/enumeration","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"}]},{"id":"-MfzhLRqdJMnT8t19MZF","title":"Situational Awareness","pathname":"/the-red-team-handbook/techniques/enumeration/situational-awareness","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Enumeration"}]},{"id":"-MfzgOExkwGmK4rovDvU","title":"Recon Commands","pathname":"/the-red-team-handbook/techniques/enumeration/recon-commands","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Enumeration"}]},{"id":"-MfzgQEv1M7cN99fSxXO","title":".NET AD Enum commands","pathname":"/the-red-team-handbook/techniques/enumeration/recon-commands/.net-ad-enum-commands","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Enumeration"},{"label":"Recon Commands"}]},{"id":"-Mfzg3wrSEeep0_KWt9U","title":"WMIC commands","pathname":"/the-red-team-handbook/techniques/enumeration/recon-commands/wmic-commands","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Enumeration"},{"label":"Recon Commands"}]},{"id":"-MhLx29Jg2j_U6L_HxlI","title":"WMI queries from c++","pathname":"/the-red-team-handbook/techniques/enumeration/recon-commands/wmic-commands/wmi-queries-from-c++","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Enumeration"},{"label":"Recon Commands"},{"label":"WMIC commands"}]},{"id":"-Mg7tZK3DzgbXj5ppkNP","title":"Execution","pathname":"/the-red-team-handbook/techniques/execution","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"}]},{"id":"8Q2R0MTHu350Np663gI1","title":"Cool ways of Calling a Process","pathname":"/the-red-team-handbook/techniques/execution/cool-ways-of-calling-a-process","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Execution"}]},{"id":"-Mg7t_tl0bMUemCcHeRU","title":"One Liners","pathname":"/the-red-team-handbook/techniques/execution/one-liners","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Execution"}]},{"id":"-Mfp_-lSZtQS3b95Z16K","title":"Initial Access","pathname":"/the-red-team-handbook/techniques/initial-access","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"}]},{"id":"-Mfp_5_ivWPg-ZKTL_dC","title":"Tips and Tricks","pathname":"/the-red-team-handbook/techniques/initial-access/tips-and-tricks","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"}]},{"id":"-Mfs2EpgBu-9s-rHchmR","title":"Tools","pathname":"/the-red-team-handbook/techniques/initial-access/tools","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"}]},{"id":"-Mfs2T1hjzEgbHevzeVh","title":"Staging/Stagers","pathname":"/the-red-team-handbook/techniques/initial-access/staging-stagers","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"}]},{"id":"-MfsVSP_HFHQERKI6GX7","title":"MS Office","pathname":"/the-red-team-handbook/techniques/initial-access/ms-office","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"}]},{"id":"-MfsYpNvcurnDxpnydZb","title":"Macros","pathname":"/the-red-team-handbook/techniques/initial-access/ms-office/macros","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"},{"label":"MS Office"}]},{"id":"-MfscKOfIjSGhgEAbqMX","title":"Evasion","pathname":"/the-red-team-handbook/techniques/initial-access/ms-office/macros/evasion","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"},{"label":"MS Office"},{"label":"Macros"}]},{"id":"-Mfsdpib-CusWvx3HiRn","title":"VBA Stomping","pathname":"/the-red-team-handbook/techniques/initial-access/ms-office/macros/evasion/vba-stomping","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"},{"label":"MS Office"},{"label":"Macros"},{"label":"Evasion"}]},{"id":"-MfscpIHUQLxf5swBdP5","title":"Revert To Legacy Warning in Excel","pathname":"/the-red-team-handbook/techniques/initial-access/ms-office/macros/evasion/revert-to-legacy-warning-in-excel","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"},{"label":"MS Office"},{"label":"Macros"},{"label":"Evasion"}]},{"id":"-MfscNoI2XpAUhqpi1IK","title":"Sandbox Evasion","pathname":"/the-red-team-handbook/techniques/initial-access/ms-office/macros/evasion/sandbox-evasion","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"},{"label":"MS Office"},{"label":"Macros"},{"label":"Evasion"}]},{"id":"-Mfu6IIBiBoADmsfYeAp","title":"Info Extraction","pathname":"/the-red-team-handbook/techniques/initial-access/ms-office/macros/info-extraction-1","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"},{"label":"MS Office"},{"label":"Macros"}]},{"id":"-MfskeQy8RH24umzI4TO","title":"Inline Shapes","pathname":"/the-red-team-handbook/techniques/initial-access/ms-office/macros/inline-shapes","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"},{"label":"MS Office"},{"label":"Macros"}]},{"id":"-Mfu5o3w7fEnP-jPQ4BI","title":".MAM Files","pathname":"/the-red-team-handbook/techniques/initial-access/ms-office/macros/.mam-files","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"},{"label":"MS Office"},{"label":"Macros"}]},{"id":"-Mfsb7estCcQT8NZ2_Wu","title":"PowerPoint","pathname":"/the-red-team-handbook/techniques/initial-access/ms-office/macros/powerpoint","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"},{"label":"MS Office"},{"label":"Macros"}]},{"id":"-Mfsaip3DG4jhhR9HjoN","title":"ACCDE","pathname":"/the-red-team-handbook/techniques/initial-access/ms-office/macros/accde","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"},{"label":"MS Office"},{"label":"Macros"}]},{"id":"-MfsbyW4_3lMmpplHjWo","title":"Shellcode Execution","pathname":"/the-red-team-handbook/techniques/initial-access/ms-office/macros/shellcode-execution","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"},{"label":"MS Office"},{"label":"Macros"}]},{"id":"-MfsZPh7XfqlyoDT1kW1","title":"Info Extraction","pathname":"/the-red-team-handbook/techniques/initial-access/ms-office/macros/info-extraction","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"},{"label":"MS Office"},{"label":"Macros"}]},{"id":"-MfsVUPR4GcO5PH42AV_","title":"Dechaining Macros","pathname":"/the-red-team-handbook/techniques/initial-access/ms-office/macros/dechaining-macros","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"},{"label":"MS Office"},{"label":"Macros"}]},{"id":"-MftuqW35aDYyZJwTWVA","title":"Field Abuse","pathname":"/the-red-team-handbook/techniques/initial-access/ms-office/field-abuse","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"},{"label":"MS Office"}]},{"id":"-MfsY9Y85370Hjc_nnv4","title":"DDE","pathname":"/the-red-team-handbook/techniques/initial-access/ms-office/dde","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"},{"label":"MS Office"}]},{"id":"-MgMbAixB8Qh4d0wWUMQ","title":"Payload Delivery","pathname":"/the-red-team-handbook/techniques/initial-access/payload-delivery","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"}]},{"id":"-Mfs4NjAe2TSmwhXJHma","title":"File Formats","pathname":"/the-red-team-handbook/techniques/initial-access/file-formats","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"}]},{"id":"-MfsUgk1Cq-gzTn1Sy9W","title":"MSG","pathname":"/the-red-team-handbook/techniques/initial-access/file-formats/msg","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"},{"label":"File Formats"}]},{"id":"-MfsTxWXCT7SM6I6cJEP","title":"RTF","pathname":"/the-red-team-handbook/techniques/initial-access/file-formats/rtf","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"},{"label":"File Formats"}]},{"id":"-Mg7sCv283Cty1Kft8VG","title":"REG","pathname":"/the-red-team-handbook/techniques/initial-access/file-formats/reg","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"},{"label":"File Formats"}]},{"id":"-Mg7pOyVmarUO3hPTl7o","title":"BAT","pathname":"/the-red-team-handbook/techniques/initial-access/file-formats/bat","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"},{"label":"File Formats"}]},{"id":"-MfsTCgYYmGuK_3Wnh6V","title":"MSI Files","pathname":"/the-red-team-handbook/techniques/initial-access/file-formats/msi-files","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"},{"label":"File Formats"}]},{"id":"-MfsE4LAUDWEK-kuTaWl","title":"IQY","pathname":"/the-red-team-handbook/techniques/initial-access/file-formats/iqy","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"},{"label":"File Formats"}]},{"id":"-Mfs4aj-hILGVoTiJ9k3","title":"CHM","pathname":"/the-red-team-handbook/techniques/initial-access/file-formats/chm","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"},{"label":"File Formats"}]},{"id":"-Mfs4__IVDzbW-xB2UFT","title":"LNK","pathname":"/the-red-team-handbook/techniques/initial-access/file-formats/lnk","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"},{"label":"File Formats"}]},{"id":"CgzS64DLCdr6AmAjiLwp","title":"Using LNK to Automatically Download Payloads","pathname":"/the-red-team-handbook/techniques/initial-access/file-formats/lnk/using-lnk-to-automatically-download-payloads","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"},{"label":"File Formats"},{"label":"LNK"}]},{"id":"-Mfs4Z4t__lztFg8DwFr","title":"HTA","pathname":"/the-red-team-handbook/techniques/initial-access/file-formats/hta","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Initial Access"},{"label":"File Formats"}]},{"id":"-MfzwGewCtT0bqp9Ec1I","title":"Lateral Movement","pathname":"/the-red-team-handbook/techniques/lateral-movement","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"}]},{"id":"-MgIpyl1wLrZxhaUtmPu","title":"Linux","pathname":"/the-red-team-handbook/techniques/lateral-movement/linux","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Lateral Movement"}]},{"id":"-MgIsLZK1y_WRwP3KXxJ","title":"SSH Hijacking","pathname":"/the-red-team-handbook/techniques/lateral-movement/linux/ssh-hijacking","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Lateral Movement"},{"label":"Linux"}]},{"id":"-MgIqeTTegQiiF3Cf5nc","title":"RDP","pathname":"/the-red-team-handbook/techniques/lateral-movement/linux/rdp","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Lateral Movement"},{"label":"Linux"}]},{"id":"-MgIq4u7FtlE8a_i8T_q","title":"Impacket","pathname":"/the-red-team-handbook/techniques/lateral-movement/linux/impacket","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Lateral Movement"},{"label":"Linux"}]},{"id":"-MgInQo0tUFWZWhakzuM","title":"No Admin?","pathname":"/the-red-team-handbook/techniques/lateral-movement/no-admin","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Lateral Movement"}]},{"id":"-Mg40X47nlL24U28LX3X","title":"Checking for access","pathname":"/the-red-team-handbook/techniques/lateral-movement/checking-for-access","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Lateral Movement"}]},{"id":"-MgImw1aAj43TW4Kk7wq","title":"Poison Handler","pathname":"/the-red-team-handbook/techniques/lateral-movement/poison-handler","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Lateral Movement"}]},{"id":"-Mg3S4EhAY4WlINnBp6T","title":"WinRM","pathname":"/the-red-team-handbook/techniques/lateral-movement/winrm","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Lateral Movement"}]},{"id":"-Mg4-o4PiQe6II4-oWuB","title":"AT","pathname":"/the-red-team-handbook/techniques/lateral-movement/at","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Lateral Movement"}]},{"id":"-Mg4-8nDXIpqLRebsNCq","title":"PsExec","pathname":"/the-red-team-handbook/techniques/lateral-movement/psexec","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Lateral Movement"}]},{"id":"-Mg3fxqWb5X4MPSVHhRc","title":"WMI","pathname":"/the-red-team-handbook/techniques/lateral-movement/wmi","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Lateral Movement"}]},{"id":"-Mg3Q_1WLuxW93bVWxGE","title":"Service Control","pathname":"/the-red-team-handbook/techniques/lateral-movement/service-control","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Lateral Movement"}]},{"id":"-MfzzCLeM_EenPOwBBMe","title":"DCOM","pathname":"/the-red-team-handbook/techniques/lateral-movement/dcom","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Lateral Movement"}]},{"id":"-Mfzwx5UoXK5OZ6f55F6","title":"RDP","pathname":"/the-red-team-handbook/techniques/lateral-movement/rdp","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Lateral Movement"}]},{"id":"-MfzwJ3J4GgKMM-L9YMO","title":"SCShell","pathname":"/the-red-team-handbook/techniques/lateral-movement/scshell","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Lateral Movement"}]},{"id":"-MgHKJCnI-9hU2pwkdxq","title":"Code Injection","pathname":"/the-red-team-handbook/techniques/code-injection","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"}]},{"id":"-MgRykoORAUVPwK4XfsV","title":"Hooking","pathname":"/the-red-team-handbook/techniques/code-injection/hooking","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Code Injection"}]},{"id":"-MgRzASW3dJQa1IO2Otu","title":"Detours","pathname":"/the-red-team-handbook/techniques/code-injection/hooking/detours","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Code Injection"},{"label":"Hooking"}]},{"id":"-MgHKKxK6o6-eOYb-bMu","title":"CreateRemoteThread","pathname":"/the-red-team-handbook/techniques/code-injection/createremotethread","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Code Injection"}]},{"id":"-MgHKk0I0l5_sh8GSrzF","title":"DLL Injection","pathname":"/the-red-team-handbook/techniques/code-injection/dll-injection","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Code Injection"}]},{"id":"-MgHL4JUhAOgjAjeTd5i","title":"APC Queue Code Injection","pathname":"/the-red-team-handbook/techniques/code-injection/apc-queue-code-injection","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Code Injection"}]},{"id":"-MgHLMl3glCDYBAnNmql","title":"Early Bird Injection","pathname":"/the-red-team-handbook/techniques/code-injection/early-bird-injection","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Code Injection"}]},{"id":"-MfpR8hfnkBqUmKpTW3p","title":"Persistence","pathname":"/the-red-team-handbook/techniques/persistence","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"}]},{"id":"-Mfu8s1zZ2CzCyMg2pQs","title":"Scheduled Tasks","pathname":"/the-red-team-handbook/techniques/persistence/scheduled-tasks","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Persistence"}]},{"id":"-MgH56HkpFMlYGn8eknu","title":"AT","pathname":"/the-red-team-handbook/techniques/persistence/scheduled-tasks/at","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Persistence"},{"label":"Scheduled Tasks"}]},{"id":"-MgJ1ywixNv8wRCsmfmL","title":"MS Office","pathname":"/the-red-team-handbook/techniques/persistence/ms-office","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Persistence"}]},{"id":"-MgESMxc60nF_mZkaunD","title":"SQL","pathname":"/the-red-team-handbook/techniques/persistence/sql","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Persistence"}]},{"id":"-Mfu6Ru0fDQEj01VsXfY","title":"Admin Level","pathname":"/the-red-team-handbook/techniques/persistence/admin-level","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Persistence"}]},{"id":"-MgH4y3tQe6V17SEdR-n","title":"SSP","pathname":"/the-red-team-handbook/techniques/persistence/admin-level/ssp","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Persistence"},{"label":"Admin Level"}]},{"id":"-MfzRlnrZ_guWQMYIVYc","title":"Services","pathname":"/the-red-team-handbook/techniques/persistence/admin-level/services","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Persistence"},{"label":"Admin Level"}]},{"id":"-MgH4rPImZ7GA_u7C0Qp","title":"Default File Extension","pathname":"/the-red-team-handbook/techniques/persistence/admin-level/default-file-extension","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Persistence"},{"label":"Admin Level"}]},{"id":"-MgGxD5_ay06qbH9EnYs","title":"AppCert DLLs","pathname":"/the-red-team-handbook/techniques/persistence/admin-level/appcert-dlls","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Persistence"},{"label":"Admin Level"}]},{"id":"-MgGuzDFIkz97QUXj4Lu","title":"Time Provider","pathname":"/the-red-team-handbook/techniques/persistence/admin-level/time-provider","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Persistence"},{"label":"Admin Level"}]},{"id":"-MgGu7BoLt9_Gta9qtyh","title":"Waitfor","pathname":"/the-red-team-handbook/techniques/persistence/admin-level/waitfor","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Persistence"},{"label":"Admin Level"}]},{"id":"-MgGrz_mjXSxTRG3kfzy","title":"WinLogon","pathname":"/the-red-team-handbook/techniques/persistence/admin-level/winlogon","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Persistence"},{"label":"Admin Level"}]},{"id":"-MgGqqog0oH1HIzaGDdw","title":"Netsh Dlls","pathname":"/the-red-team-handbook/techniques/persistence/admin-level/netsh-dlls","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Persistence"},{"label":"Admin Level"}]},{"id":"-MgGqMsbJQdCzqNszNDm","title":"RDP Backdoors","pathname":"/the-red-team-handbook/techniques/persistence/admin-level/rdp-backdoors","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Persistence"},{"label":"Admin Level"}]},{"id":"-MgGn_KWo1PrAOhwge6G","title":"AppInit Dlls","pathname":"/the-red-team-handbook/techniques/persistence/admin-level/appinit-dlls","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Persistence"},{"label":"Admin Level"}]},{"id":"-MgGkpZ25doImklwvJ5l","title":"Port Monitor","pathname":"/the-red-team-handbook/techniques/persistence/admin-level/port-monitor","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Persistence"},{"label":"Admin Level"}]},{"id":"-Mfu6UA5uqdUbI4K7mVq","title":"WMI Event Subscriptions","pathname":"/the-red-team-handbook/techniques/persistence/admin-level/wmi-event-subscriptions","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Persistence"},{"label":"Admin Level"}]},{"id":"-MfpRARRYDFz8mhtlCFX","title":"User Level","pathname":"/the-red-team-handbook/techniques/persistence/user-level","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Persistence"}]},{"id":"-MgH4vE8ahMhUdhjSfVD","title":"LNK","pathname":"/the-red-team-handbook/techniques/persistence/user-level/lnk","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Persistence"},{"label":"User Level"}]},{"id":"-MfpRIkUFcG8aHEWdINg","title":"Startup Folder","pathname":"/the-red-team-handbook/techniques/persistence/user-level/startup-folder","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Persistence"},{"label":"User Level"}]},{"id":"-MgH4l2C000nvvzZ6Hii","title":"Junction folders","pathname":"/the-red-team-handbook/techniques/persistence/user-level/junction-folders","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Persistence"},{"label":"User Level"}]},{"id":"-MfpSDhxrhJkdDWl0hlA","title":"Registry Keys","pathname":"/the-red-team-handbook/techniques/persistence/user-level/registry-keys","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Persistence"},{"label":"User Level"}]},{"id":"-MfpThrdnzVodm1ZRMv2","title":"Logon Scripts","pathname":"/the-red-team-handbook/techniques/persistence/user-level/logon-scripts","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Persistence"},{"label":"User Level"}]},{"id":"-MfpUQvcNx956OwimJpe","title":"Powershell Profiles","pathname":"/the-red-team-handbook/techniques/persistence/user-level/powershell-profiles","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Persistence"},{"label":"User Level"}]},{"id":"-MfpWc6xZPjVW3MPrzrt","title":"Screen Savers","pathname":"/the-red-team-handbook/techniques/persistence/user-level/screen-savers","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Techniques"},{"label":"Persistence"},{"label":"User Level"}]},{"id":"-Mg4BTXtYrLtyJB9p_C3","title":"SQL","pathname":"/the-red-team-handbook/infrastructure/sql","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Infrastructure"}]},{"id":"-Mg4BsPgnpGwyHQEZ9sO","title":"MS SQL","pathname":"/the-red-team-handbook/infrastructure/sql/ms-sql","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Infrastructure"},{"label":"SQL"}]},{"id":"-Mg4BffffF_NbRgZTlE7","title":"Basics","pathname":"/the-red-team-handbook/infrastructure/sql/ms-sql/basics","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Infrastructure"},{"label":"SQL"},{"label":"MS SQL"}]},{"id":"-Mg4CWr6Bq-57e5xUGAh","title":"Finding Sql Servers","pathname":"/the-red-team-handbook/infrastructure/sql/ms-sql/finding-sql-servers","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Infrastructure"},{"label":"SQL"},{"label":"MS SQL"}]},{"id":"-Mg6rH2zZ1I0ONJf0GVb","title":"Privilege Escalation","pathname":"/the-red-team-handbook/infrastructure/sql/ms-sql/privilege-escalation","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Infrastructure"},{"label":"SQL"},{"label":"MS SQL"}]},{"id":"-MgESFw556LG8nFgqh-C","title":"Post Exploitation","pathname":"/the-red-team-handbook/infrastructure/sql/ms-sql/post-exploitation","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Infrastructure"},{"label":"SQL"},{"label":"MS SQL"}]},{"id":"7arfwzt7mATxP2MTtAK5","title":"Vulnerability Discovery","pathname":"/the-red-team-handbook/other/vulnerability-discovery","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Other"}]},{"id":"uameNZQmL8DsSZ1YiBP8","title":"Web Vulnerabilities","pathname":"/the-red-team-handbook/other/vulnerability-discovery/web-vulnerabilities","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Other"},{"label":"Vulnerability Discovery"}]},{"id":"Qb0LSGvsJmcwxBIyEu2v","title":"Code Grepping","pathname":"/the-red-team-handbook/other/vulnerability-discovery/web-vulnerabilities/code-grepping","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Other"},{"label":"Vulnerability Discovery"},{"label":"Web Vulnerabilities"}]},{"id":"JnNosew3R7yIALtY6hXU","title":"PHP Cheatsheet","pathname":"/the-red-team-handbook/other/vulnerability-discovery/web-vulnerabilities/code-grepping/php-cheatsheet","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Other"},{"label":"Vulnerability Discovery"},{"label":"Web Vulnerabilities"},{"label":"Code Grepping"}]},{"id":"-Mg74iUGqjhNh9IYHVRB","title":"Windows Internals","pathname":"/the-red-team-handbook/other/windows-internals","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Other"}]},{"id":"-Mg74ksMNgjmX2aJKYCu","title":"Unorganized Notes","pathname":"/the-red-team-handbook/other/windows-internals/unorganized-notes","siteSpaceId":"sitesp_UQAGA","description":"","breadcrumbs":[{"label":"Other"},{"label":"Windows Internals"}]}]}