Interactive
Maps & attack-path explorers
Interactive
AD Attack Path Explorer
A guided Active Directory attack map — techniques by access level, each with commands and the next move one click away.
Explore →Interactive
Cloud Attack Path Explorer
Entra/Azure, AWS and Kubernetes attack paths by access stage, each technique linked to its theory page.
Explore →Interactive
Linux Privesc Explorer
Sudo, SUID/capabilities, cron/PATH, writable files, credential reuse and kernel CVEs — routed to root.
Explore →Interactive
Windows Privesc Explorer
Token privileges, service misconfigs, DLL hijacking, scheduled tasks, stored creds, UAC and CVEs — routed to SYSTEM.
Explore →Interactive
Web Pentest Checklist
A WSTG-based web-app testing checklist with tickable progress and links to the tools and vulnerabilities.
Open the checklist →Interactive
External Red Team Workflow
An outside-in recon checklist plus a jumpable initial-access playbook, handing off to the AD and web maps.
Open the workflow →Reference
Quick references
Reference
Operator Cheatsheet
Reverse shells, listeners, file transfer, pivoting and enumeration one-liners — set LHOST/LPORT once and copy.
Open →Reference
Living Off the Land — LOLBAS & GTFOBins
Trusted Windows and Linux binaries abused for download, execution, read/write and control bypass — filter by OS and function.
Browse →Search
Search everything
One box across all theory, vulns, tools, maps and writeups.
Search →