Attack Techniques
An educational library of offensive techniques for security professionals and ethical hackers.
This library covers attack techniques across Active Directory, web, cloud, and detection evasion. It is curated by Vid Grosek, Slovenia's first OSCE3 and OSCP+ certified penetration tester, who delivers engagements through Telprom d.o.o.
Active Directory
Kerberoasting, NTLM relay, ADCS abuse, attack paths, and privilege escalation in domain environments.
Expertise: Active Directory security
Web Vulnerabilities
SQL injection, XSS, SSRF, logic flaws, JWT abuse, and API vulnerabilities beyond the OWASP Top 10.
Expertise: web application security
Cloud Attacks
AWS, Azure, and GCP attacks: IAM misconfigurations, metadata leakage, and cloud privilege escalation.
Detection Evasion
EDR evasion techniques, AMSI bypass, command obfuscation, and operational security for red teams.
For Ethical Use Only
All content is intended for educational purposes, authorized penetration testing, and security research. Techniques are presented with the aim of understanding and defending against attacks.
Frequently Asked Questions
What is Kerberoasting?
Kerberoasting is an Active Directory attack in which an attacker requests service tickets for accounts that have a Service Principal Name and then cracks their passwords offline to recover service account credentials.
What is ADCS abuse?
ADCS abuse exploits misconfigurations in Active Directory Certificate Services, where an attacker uses vulnerable certificate templates to issue certificates for other users, impersonate them, and escalate privileges up to domain administrator.
What is AMSI and EDR evasion?
AMSI and EDR evasion are techniques red teams use to bypass security controls such as the Antimalware Scan Interface and endpoint detection and response tools, using command obfuscation and living-off-the-land techniques to test how effectively an attack is actually detected.
Are these techniques legal to use?
These techniques are legal to use only during authorized penetration testing with written permission from the system owner; they are meant for education, security research, and defense, never for unauthorized attacks.