Commit Graph

  • 394c53baf9 Fixed MMS PDF and added demo videos main Mayyhem 2026-05-13 16:36:13 -04:00
  • 68cb131107 Upload updated version of presentation Chris Thompson 2026-05-04 13:35:02 -04:00
  • 404a6fc2fe Delete presentations/The_Admin's_Guide_to_Preventing_SCCM_Attacks.pdf Chris Thompson 2026-05-04 13:34:32 -04:00
  • 3caec8779d Add files via upload Chris Thompson 2026-05-03 15:31:21 -04:00
  • c0272c587a Merge pull request #48 from DocumentationDave/MatrixCleanup Chris Thompson 2026-04-22 10:09:36 -04:00
  • e315416c07 Update detect-7_description.md to remove an offensive ID Chris Thompson 2026-04-22 10:05:06 -04:00
  • bd65ad2313 Remove RECON-1 from DETECT-7 Chris Thompson 2026-04-22 10:04:02 -04:00
  • d4413da571 Remove RECON-7 from PREVENT-9 Chris Thompson 2026-04-22 10:02:17 -04:00
  • 2a572be35a Update prevent-9_description.md Chris Thompson 2026-04-22 09:59:04 -04:00
  • e259c56be9 Restore RECON-1 description and details Chris Thompson 2026-04-22 09:53:14 -04:00
  • 910c33d7aa Update defensive ID for CRED-5 description Chris Thompson 2026-04-22 09:50:16 -04:00
  • e2e2525629 Update CRED-4 description and examples Chris Thompson 2026-04-22 09:49:15 -04:00
  • b9e5c4d649 Revise CRED-3 description and add references Chris Thompson 2026-04-22 09:48:50 -04:00
  • 7c88576e45 Update CRED-2 description and references Chris Thompson 2026-04-22 09:48:24 -04:00
  • 40029737c3 Update CRED-1 description and examples Chris Thompson 2026-04-22 09:47:12 -04:00
  • 7286a3aca5 Merge pull request #52 from 5tuk0v/main Chris Thompson 2026-04-22 09:24:00 -04:00
  • 32d3ded59b Revise SCCM resources and add new links Chris Thompson 2026-04-22 09:18:56 -04:00
  • aac2b3d234 Update SCCM Lab and Resource sections Chris Thompson 2026-04-22 09:16:19 -04:00
  • 259638259b Small update to CRED-8 to add examples for mssqlkaren and pulling policies with a dbo.datareader account 5tuk0v 2026-04-03 23:45:33 -04:00
  • 3965e882d0 Merge pull request #51 from chryzsh/cred6-site-server-shares Chris Thompson 2026-03-30 18:20:45 +00:00
  • 3d0d0dec73 Add operational tradecraft and examples for CRED-6 site server shares chryzsh 2026-03-24 19:12:38 +01:00
  • 091bf1415a Expand CRED-6 to cover credential exposure on other site server shares chryzsh 2026-03-22 19:59:53 +01:00
  • 32901e15f2 Merge pull request #50 from Zoiiid/PrivEsc-Add unsigned_sh0rt 2026-03-16 08:41:15 -07:00
  • 66221359bf Added new PREVENT-ID (PREVENT-23) and added ELEVATE-6 to Matrix Zoiiid 2026-03-12 20:00:18 +01:00
  • 036867c173 Added new CCMCache PrivEsc-Technique Zoiiid 2026-03-11 20:57:39 +01:00
  • ad10853066 Merge pull request #49 from logangoins/main Duane Michael 2026-02-20 13:57:58 -08:00
  • 648f59728a removed unnecessary ntlmrelayx output Duane Michael 2026-02-20 13:55:34 -08:00
  • 9e5dabd2a4 Update ELEVATE-2 description with DNS requirement Logan Goins 2026-02-11 16:42:15 -06:00
  • 1a69333ccf Edit ELEVATE-2 description to remove redundancy Logan Goins 2026-02-11 16:29:09 -06:00
  • 6d3ae640ff SCCM Matrix and technique documentation updates DocumentationDave 2026-02-09 15:40:48 -06:00
  • e2f39ff85c Add reference to Logan Goins' blog Logan Goins 2026-02-06 17:22:39 -06:00
  • b31bd996a9 Update ELEVATE-2 description with HTTP Coercion Logan Goins 2026-02-06 17:21:23 -06:00
  • d71d14431f Fix formatting and link references in ELEVATE-2 description Logan Goins 2026-02-06 16:37:22 -06:00
  • 104d83c9ed Add files via upload Chris Thompson 2026-02-04 05:28:55 -05:00
  • 42058736bf Update slides Chris Thompson 2026-02-03 13:18:26 -05:00
  • 3461729ec4 Update slides Chris Thompson 2026-02-02 11:58:53 -05:00
  • 50d3771765 Add files via upload Chris Thompson 2026-02-02 10:44:07 -05:00
  • 82cf567279 Add remediation by upgrading to v2509 Chris Thompson 2026-01-21 11:02:48 -05:00
  • 22a6c58cf8 Add ConfigManBearPig and SharpPXE Chris Thompson 2026-01-14 11:10:30 -05:00
  • 9a3a21f45d Add link to ConfigManBearPig Chris Thompson 2026-01-13 15:49:08 -05:00
  • b7b28eb407 Add SO-CON recording link Chris Thompson 2026-01-07 12:48:13 -05:00
  • 13526a5f90 Update SCCM Lab Resources section Chris Thompson 2026-01-02 09:27:00 -05:00
  • e259f4e981 Add cred1py Chris Thompson 2026-01-01 13:33:57 -05:00
  • cfc237addd Add SCCMSiteCodeHunter Chris Thompson 2026-01-01 13:31:45 -05:00
  • aee05b1796 Add blog post Chris Thompson 2026-01-01 13:29:43 -05:00
  • 186ec20063 Add RelayInformer post Chris Thompson 2026-01-01 13:25:09 -05:00
  • 2031941342 Add Garrett's latest takeover Chris Thompson 2026-01-01 13:23:10 -05:00
  • 1327456af2 Add SCCMVNC Chris Thompson 2026-01-01 13:20:22 -05:00
  • 335751a893 Add SCCM_SQL_Collector Chris Thompson 2026-01-01 13:18:45 -05:00
  • 841625ba16 Add sccmsqlclient Chris Thompson 2026-01-01 13:16:27 -05:00
  • e3dbda02b4 Add sccmhound Chris Thompson 2026-01-01 13:14:24 -05:00
  • 78d470f486 Add mssqlkaren and update handles Chris Thompson 2026-01-01 13:10:35 -05:00
  • 68f2f07dce Added 2025 blog link Duane Michael 2025-11-03 11:58:46 -08:00
  • 71662c249c Fix typo in ELEVATE-5 description Chris Thompson 2025-10-27 18:25:15 -04:00
  • a894fc44b3 Update TAKEOVER-1 description and details Chris Thompson 2025-10-21 14:03:12 -04:00
  • b23b3130ff Update cred-8_description.md unsigned_sh0rt 2025-10-01 09:26:05 -07:00
  • 1e885203f7 Fixed cross-link Duane Michael 2025-09-26 16:02:35 -07:00
  • eebdaa83c9 Updated readme Duane Michael 2025-09-26 15:28:42 -07:00
  • 79de812c0b Fixed cred-8 def ids Duane Michael 2025-09-26 15:28:06 -07:00
  • 5747f85ecf Added mssqlkaren unsigned_sh0rt 2025-09-26 15:08:45 -07:00
  • a83cd528f3 Merge pull request #47 from subat0mik/cred-8 Duane Michael 2025-09-26 15:03:09 -07:00
  • 863b59b17e Reorganized def IDs for cred-8 Duane Michael 2025-09-26 15:02:17 -07:00
  • a7be1bc960 Updated readme Duane Michael 2025-09-26 15:01:54 -07:00
  • f4b153da4d Fixed typos Duane Michael 2025-09-26 14:53:56 -07:00
  • 44e8c59400 Updated detect-1 Duane Michael 2025-09-26 14:53:18 -07:00
  • b7db6aa8b4 Updated prevent-12 Duane Michael 2025-09-26 14:52:48 -07:00
  • 9463e7df3a Updated prevent-10 Duane Michael 2025-09-26 14:52:25 -07:00
  • 5873eb07f3 Updated prevent-14 Duane Michael 2025-09-26 14:51:51 -07:00
  • e47c048afd Updated attack readme Duane Michael 2025-09-26 14:50:26 -07:00
  • ae2216232d Removed unnecessary example code Duane Michael 2025-09-25 17:25:43 -07:00
  • 8b8e9bb0e2 Added CRED-8 Duane Michael 2025-09-25 16:05:02 -07:00
  • 90f31e9d58 Merge pull request #46 from adindrabkin/patch-1 Duane Michael 2025-09-18 07:35:10 -07:00
  • b501da6914 Update reference to PREVENT-15 to properly hyperlink Adin Drabkin 2025-09-18 11:08:20 +03:00
  • cf50242130 Update RESOURCES.md Chris Thompson 2025-08-04 10:13:08 -07:00
  • c747cf2fe3 Update ELEVATE-5_description.md Chris Thompson 2025-07-29 08:51:08 -04:00
  • 75b407432e Update ELEVATE-4_description.md Chris Thompson 2025-07-29 08:47:36 -04:00
  • 46f260ff82 Update README.md Duane Michael 2025-07-21 20:07:05 -07:00
  • 5cc11e73d2 Update RESOURCES.md unsigned_sh0rt 2025-07-18 09:12:02 -07:00
  • 31d084c1f0 Update RESOURCES.md Chris Thompson 2025-07-18 11:56:24 -04:00
  • 519e89b376 Update README.md Chris Thompson 2025-07-16 14:28:02 -04:00
  • 6d41684b2c Update README.md Chris Thompson 2025-07-16 14:27:38 -04:00
  • e8a9645131 update readme unsigned_sh0rt 2025-07-16 11:25:59 -07:00
  • 60fd707a59 Merge pull request #45 from NocteDefensor/main Duane Michael 2025-07-14 11:07:54 -07:00
  • dcc411fb19 Update RESOURCES.md unsigned_sh0rt 2025-07-06 16:01:40 -07:00
  • 9557970a32 Update RESOURCES.md Chris Thompson 2025-06-30 18:03:51 -04:00
  • 9fa611cec5 Update cred-5_description.md NocteDefensor 2025-06-28 11:40:09 -06:00
  • 29de379cf0 Updated Troopers 25 slides Duane Michael 2025-06-26 05:21:27 -07:00
  • 33076b4afc Merge pull request #44 from subat0mik/2025-update Duane Michael 2025-06-26 03:05:07 -07:00
  • e5137e2cde Merge pull request #43 from garrettfoster13/2025updates Duane Michael 2025-06-26 03:04:17 -07:00
  • 8f0f784f7c Updated Troopers 25 slides Duane Michael 2025-06-25 08:40:43 -07:00
  • b77221c7b0 Added Troopers 25 slides Duane Michael 2025-06-25 04:14:14 -07:00
  • d2d0e48304 add elevate-5 Garrett Foster 2025-06-20 00:16:09 -07:00
  • 572074725a add elevate-4 Garrett Foster 2025-06-19 17:19:42 -07:00
  • ba18dff749 Merge pull request #42 from dlomellini/2025-update Duane Michael 2025-06-16 10:25:17 -07:00
  • 983395e237 Update coerce-1_description.md Duane Michael 2025-06-16 10:24:19 -07:00
  • e537d0d737 Create coerce-1_description.md Diego Lomellini 2025-06-13 17:24:45 -04:00
  • 4599482761 Delete attack-techniques/COERCE/COERCE-1 Diego Lomellini 2025-06-13 17:23:57 -04:00
  • 65a4c6a02c Create COERCE-1 Diego Lomellini 2025-06-13 17:18:56 -04:00
  • b541b956fc Update prevent-12_description.md Chris Thompson 2025-06-12 14:19:19 -04:00
  • 19f55ba9c1 Update prevent-14_description.md Chris Thompson 2025-06-12 14:02:15 -04:00