# 레드팀 플레이북

## 레드팀 플레이북

- [레드팀 플레이북](https://www.xn--hy1b43d247a.com/readme.md)
- [레드팀이란](https://www.xn--hy1b43d247a.com/what-even-is-redteam.md)
- [레드팀 글로벌 동향 (2024)](https://www.xn--hy1b43d247a.com/redteam-global-trend-2024.md)
- [개요](https://www.xn--hy1b43d247a.com/basic-redteam/overview.md)
- [1. 공격자 인프라 구성](https://www.xn--hy1b43d247a.com/basic-redteam/1-attacker-infra.md)
- [2. 초기 침투](https://www.xn--hy1b43d247a.com/basic-redteam/2-initial-access.md)
- [3. 정보 수집](https://www.xn--hy1b43d247a.com/basic-redteam/3-enumeration.md)
- [4. 권한 상승 - US](https://www.xn--hy1b43d247a.com/basic-redteam/privesc-us-domain.md)
- [5. 횡적 이동: USWKSTN01 -> SQL01](https://www.xn--hy1b43d247a.com/basic-redteam/5-lateralmovement-to-sql01.md)
- [6. 권한 상승 - SQL01](https://www.xn--hy1b43d247a.com/basic-redteam/6-privesc-sql01.md)
- [7. 도메인 장악 WEB01](https://www.xn--hy1b43d247a.com/basic-redteam/7-us-domain-compromise.md)
- [8. US -> RT 장악](https://www.xn--hy1b43d247a.com/basic-redteam/8-rt-forestrootdomain-compromise.md)
- [9. RT -> DEV 정보 수집](https://www.xn--hy1b43d247a.com/basic-redteam/9-rt-to-dev-enumeration.md)
- [10. 권한 상승 및 목표 달성](https://www.xn--hy1b43d247a.com/basic-redteam/10-complete-mission.md)
- [개념](https://www.xn--hy1b43d247a.com/infrastructure/concepts.md)
- [예시 인프라](https://www.xn--hy1b43d247a.com/infrastructure/example-infra.md)
- [팀 서버 - Sliver](https://www.xn--hy1b43d247a.com/infrastructure/sliver.md)
- [스테이저 (Stager) 사용](https://www.xn--hy1b43d247a.com/infrastructure/sliver/stager.md)
- [도메인 분류와 신뢰도](https://www.xn--hy1b43d247a.com/infrastructure/domain-categorization-reputation.md)
- [HTTP 리다이렉터](https://www.xn--hy1b43d247a.com/infrastructure/http-redirector.md)
- [HTTPS 리다이렉터](https://www.xn--hy1b43d247a.com/infrastructure/https-redirector.md)
- [SMTP Gophish + Mail](https://www.xn--hy1b43d247a.com/infrastructure/smtp-do.md)
- [SMTP Gophish + ESP](https://www.xn--hy1b43d247a.com/infrastructure/smtp-aws-zoho.md): 본 실습은 레드팀 인프라에 꼭 필요한 SMTP 서버를 GoPhish 피싱 프레임워크와 ZoHo Third-party 메일 서비스를 활용해 AWS에서 설정하는 법을 다룬다.
- [SMTP Gophish + Relay + ESP](https://www.xn--hy1b43d247a.com/infrastructure/smtp-toolkit-relay-esp.md)
- [인프라 구축 자동화](https://www.xn--hy1b43d247a.com/infrastructure/infra-automation.md)
- [테라폼 (Terraform)](https://www.xn--hy1b43d247a.com/infrastructure/infra-automation/terraform.md)
- [SMTP 테라폼 자동화](https://www.xn--hy1b43d247a.com/infrastructure/infra-automation/mail-terraform.md)
- [HTTPS 리다이렉터 자동화 (AWS)](https://www.xn--hy1b43d247a.com/infrastructure/infra-automation/https-redir-automation.md)
- [old-네뷸라를 이용한 인프라 구축](https://www.xn--hy1b43d247a.com/infrastructure/old.md)
- [도메인과 리다이렉터 설정](https://www.xn--hy1b43d247a.com/infrastructure/old/domain-redirector-config.md)
- [중립 공간 (클라우드) 설정](https://www.xn--hy1b43d247a.com/infrastructure/old/neutral-area-cloud-config.md)
- [네뷸라 (Nebula)](https://www.xn--hy1b43d247a.com/infrastructure/old/nebula.md)
- [네뷸라 설정](https://www.xn--hy1b43d247a.com/infrastructure/old/nebula-config.md)
- [도메인 프론팅 (Domain Fronting)](https://www.xn--hy1b43d247a.com/infrastructure/domain-fronting.md)
- [도메인 프론팅 - Azure Edgio CDN](https://www.xn--hy1b43d247a.com/infrastructure/domain-fronting-azure-edgio-cdn.md): Akamai가 Edgio를 2024년 12월 인수하고, Edgio가 파산신청을 진행하며 이 도메인 프론팅은 2025/01/15 이후 더 이상 할 수 없다.
- [Cloudflared Tunnel과 Worker](https://www.xn--hy1b43d247a.com/infrastructure/cloudflared-tunnel-and-worker-redirector.md): 이 문서는 Jumpsec Labs 블로그 글(https://labs.jumpsec.com/putting-the-c2-in-c2loudflare/)을 기반으로 쓰여졌습니다. 해당 글에서 부족한 부분 및 서비스 업데이트로 인해 deprecated된 요소를 디버깅 및 연구한 결과를 포함해 문서화 했습니다.
- [Cloudflared Tunnel과 Pages](https://www.xn--hy1b43d247a.com/infrastructure/cloudflared-tunnel-pages.md)
- [개념](https://www.xn--hy1b43d247a.com/initial-recon/concept.md)
- [타겟 발견](https://www.xn--hy1b43d247a.com/initial-recon/target-discovery.md)
- [OSINT](https://www.xn--hy1b43d247a.com/initial-recon/osint.md)
- [작전보안](https://www.xn--hy1b43d247a.com/initial-recon/osint/opsec.md)
- [자산 정보 수집](https://www.xn--hy1b43d247a.com/initial-recon/osint/asset-discovery.md)
- [구글 도킹](https://www.xn--hy1b43d247a.com/initial-recon/osint/google-dorking.md)
- [개념](https://www.xn--hy1b43d247a.com/initial-access/concepts.md): MITRE ATTACK - A0001
- [피싱 첨부파일](https://www.xn--hy1b43d247a.com/initial-access/phish-attachments.md)
- [오피스 VBA 매크로](https://www.xn--hy1b43d247a.com/initial-access/phish-attachments/vba-macros.md)
- [XLM Excel 4.0 매크로](https://www.xn--hy1b43d247a.com/initial-access/phish-attachments/xlm-excel-40.md)
- [원격 템플렛 인젝션](https://www.xn--hy1b43d247a.com/initial-access/phish-attachments/remote-template-injection.md)
- [VBA Stomping](https://www.xn--hy1b43d247a.com/initial-access/phish-attachments/vba-stomping.md)
- [HTA](https://www.xn--hy1b43d247a.com/initial-access/phish-attachments/hta.md): T1218.005
- [LNK](https://www.xn--hy1b43d247a.com/initial-access/phish-attachments/lnk.md)
- [ISO](https://www.xn--hy1b43d247a.com/initial-access/phish-attachments/iso.md): T1553.005
- [VBA Purging - TODO](https://www.xn--hy1b43d247a.com/initial-access/phish-attachments/vba-purging.md)
- [DotNetToJS - TODO](https://www.xn--hy1b43d247a.com/initial-access/phish-attachments/dotnettojs.md)
- [Follina - TODO](https://www.xn--hy1b43d247a.com/initial-access/phish-attachments/follina.md)
- [HTML 스머글링 (Smuggling)](https://www.xn--hy1b43d247a.com/initial-access/html-smuggling.md)
- [피싱 - AitM (Adversary in the Middle)](https://www.xn--hy1b43d247a.com/initial-access/aitm.md): T1557
- [Living Off Trusted Sites (LOTS)](https://www.xn--hy1b43d247a.com/initial-access/living-off-trusted-sites.md)
- [개념](https://www.xn--hy1b43d247a.com/enumeration/concepts.md): TA0007
- [로컬 호스트 정보 수집](https://www.xn--hy1b43d247a.com/enumeration/local-host-enumeration.md): MITRE ATTACK - TA0007 (T1082, T1016, ...)
- [블러드하운드](https://www.xn--hy1b43d247a.com/enumeration/bloodhound.md)
- [SMB 쉐어 수집](https://www.xn--hy1b43d247a.com/enumeration/smb-share.md)
- [정보 수집 - 파워쉘](https://www.xn--hy1b43d247a.com/enumeration/powershell.md)
- [정보 수집 - C# - TODO](https://www.xn--hy1b43d247a.com/enumeration/csharp.md)
- [커버로스 유저 이름 정보수집](https://www.xn--hy1b43d247a.com/enumeration/kerberos-username-enumeration.md): Discovery (TA0007) + Account Discovery (T1087)
- [CME - 호스트이름과 IP주소](https://www.xn--hy1b43d247a.com/enumeration/cme-hostname-ip.md)
- [LDAP Anonymous Bind](https://www.xn--hy1b43d247a.com/enumeration/ldap-anonymous-bind.md)
- [개념](https://www.xn--hy1b43d247a.com/execution/concepts.md): TA0002
- [파워쉘](https://www.xn--hy1b43d247a.com/execution/powershell.md)
- [인메모리 실행](https://www.xn--hy1b43d247a.com/execution/powershell/in-memory-execution.md)
- [C# 실행](https://www.xn--hy1b43d247a.com/execution/powershell/csharp-execution.md)
- [윈도우 API 실행](https://www.xn--hy1b43d247a.com/execution/powershell/winapi-execution.md)
- [LOLBAS](https://www.xn--hy1b43d247a.com/execution/lolbas.md): T1218
- [Native API - TODO](https://www.xn--hy1b43d247a.com/execution/native-api.md)
- [개념](https://www.xn--hy1b43d247a.com/persistence/concepts.md)
- [골든 티켓 (Golden Ticket)](https://www.xn--hy1b43d247a.com/persistence/golden-ticket.md)
- [DLL 사이드로딩 (DLL Side-Loading)](https://www.xn--hy1b43d247a.com/persistence/dll-sideloading.md)
- [DLL Search Order Hijacking - TODO](https://www.xn--hy1b43d247a.com/persistence/dll-hijacking.md)
- [레지스트리 / 스타트업 폴더](https://www.xn--hy1b43d247a.com/persistence/registry-startup-folder.md)
- [개념](https://www.xn--hy1b43d247a.com/privilege-escalation/concepts.md): TA0004
- [AD 권한 상승](https://www.xn--hy1b43d247a.com/privilege-escalation/ad.md)
- [Active Directory Certificate Services (ADCS)](https://www.xn--hy1b43d247a.com/privilege-escalation/ad/adcs.md)
- [ESC1](https://www.xn--hy1b43d247a.com/privilege-escalation/ad/adcs/esc1.md)
- [ESC8](https://www.xn--hy1b43d247a.com/privilege-escalation/ad/adcs/esc8.md)
- [Shadow Credentials](https://www.xn--hy1b43d247a.com/privilege-escalation/ad/shadow-credentials.md)
- [noPac](https://www.xn--hy1b43d247a.com/privilege-escalation/ad/nopac.md)
- [Kerberoasting](https://www.xn--hy1b43d247a.com/privilege-escalation/ad/kerberoasting.md)
- [AS-REP Roasting](https://www.xn--hy1b43d247a.com/privilege-escalation/ad/asrep-roasting.md)
- [DHCPv6 포이즈닝](https://www.xn--hy1b43d247a.com/privilege-escalation/ad/dhcpv6.md): T1557.003
- [Resource-Based Constrained Delegation (RBCD)](https://www.xn--hy1b43d247a.com/privilege-escalation/ad/rbcd.md)
- [SCCM](https://www.xn--hy1b43d247a.com/privilege-escalation/ad/sccm.md)
- [AD-DACL](https://www.xn--hy1b43d247a.com/privilege-escalation/ad-dacl.md)
- [AddAllowedToAct](https://www.xn--hy1b43d247a.com/privilege-escalation/ad-dacl/addallowedtoact.md)
- [AddKeyCredentialLink](https://www.xn--hy1b43d247a.com/privilege-escalation/ad-dacl/addkeycredentiallink.md)
- [GenericAll](https://www.xn--hy1b43d247a.com/privilege-escalation/ad-dacl/genericall.md)
- [GenericWrite](https://www.xn--hy1b43d247a.com/privilege-escalation/ad-dacl/genericwrite.md)
- [WriteDACL](https://www.xn--hy1b43d247a.com/privilege-escalation/ad-dacl/writedacl.md)
- [AllExtendedRights](https://www.xn--hy1b43d247a.com/privilege-escalation/ad-dacl/allextendedrights.md)
- [WriteAccountRestrictions](https://www.xn--hy1b43d247a.com/privilege-escalation/ad-dacl/writeaccountrestrictions.md)
- [WriteOwner](https://www.xn--hy1b43d247a.com/privilege-escalation/ad-dacl/writeowner.md)
- [AddMember](https://www.xn--hy1b43d247a.com/privilege-escalation/ad-dacl/addmember.md)
- [로컬 권한 상승 - TODO](https://www.xn--hy1b43d247a.com/privilege-escalation/local.md)
- [잘못된 서비스 설정](https://www.xn--hy1b43d247a.com/privilege-escalation/local/misconfigured-services.md)
- [Unquoted Service Path](https://www.xn--hy1b43d247a.com/privilege-escalation/local/unquoted-service-path.md)
- [Always Install Elevated](https://www.xn--hy1b43d247a.com/privilege-escalation/local/always-install-elevated.md)
- [PrintNightmare](https://www.xn--hy1b43d247a.com/privilege-escalation/local/printnightmare.md)
- [쉘코드 암호화](https://www.xn--hy1b43d247a.com/defense-evasion/shellcode-encryption.md)
- [런타임 다이나믹 링킹 (Run-time Dynamic Linking)](https://www.xn--hy1b43d247a.com/defense-evasion/run-time-dynamic-linking.md)
- [AMSI 우회](https://www.xn--hy1b43d247a.com/defense-evasion/amsi-bypass.md)
- [유저랜드 후킹 - 역사](https://www.xn--hy1b43d247a.com/defense-evasion/userland-hooking-history.md)
- [유저랜드 커널랜드 윈도우API 개념](https://www.xn--hy1b43d247a.com/defense-evasion/ring0-ring3-winapi.md)
- [유저랜드 후킹](https://www.xn--hy1b43d247a.com/defense-evasion/userland-hooking.md)
- [DInvoke - 시스템 콜](https://www.xn--hy1b43d247a.com/defense-evasion/dinvoke-syscall.md)
- [페이로드 크기](https://www.xn--hy1b43d247a.com/defense-evasion/payload-size.md)
- [가변적 C2 프로필](https://www.xn--hy1b43d247a.com/defense-evasion/malleable-c2-profile.md)
- [프로세스 인젝션](https://www.xn--hy1b43d247a.com/defense-evasion/process-injection.md)
- [CreateRemoteThread](https://www.xn--hy1b43d247a.com/defense-evasion/process-injection/createremotethread.md)
- [NtMapViewOfSection](https://www.xn--hy1b43d247a.com/defense-evasion/process-injection/ntmapviewofsection.md)
- [간단 디펜더 우회 - 쉘코드](https://www.xn--hy1b43d247a.com/defense-evasion/simple-defender-bypass.md)
- [간단 디펜더 우회 - C#](https://www.xn--hy1b43d247a.com/defense-evasion/simple-defender-bypass-csharp.md)
- [MSIExec](https://www.xn--hy1b43d247a.com/defense-evasion/msiexec.md)
- [다형성 코드](https://www.xn--hy1b43d247a.com/defense-evasion/polymorphic-code.md): by. @j0eun https://github.com/ChoiSG/kr-redteam-playbook/pull/5
- [후속 공격의 진화](https://www.xn--hy1b43d247a.com/post-exploitation/evolution-of-postex.md)
- [External SID Golden Ticket](https://www.xn--hy1b43d247a.com/post-exploitation/external-sid-golden-ticket.md)
- [커버로스](https://www.xn--hy1b43d247a.com/credential-access/kerberos.md)
- [커버로스팅 (Kerberoasting)](https://www.xn--hy1b43d247a.com/credential-access/kerberos/kerberoasting.md): MITRE ATTACK - T1558.003
- [AS-Rep Roasting](https://www.xn--hy1b43d247a.com/credential-access/kerberos/as-rep-roasting.md): MITRE ATTACK - T1558.004
- [비밀번호 스프레이 공격](https://www.xn--hy1b43d247a.com/credential-access/password-spraying.md): MITRE ATTACK - T1110.003
- [LLMNR/NBT-NS 포이즈닝](https://www.xn--hy1b43d247a.com/credential-access/llmnr-nbtns-poisoning.md)
- [NTLM 릴레이 (NTLM Relay)](https://www.xn--hy1b43d247a.com/credential-access/ntlm-relay.md)
- [SMB to SMB](https://www.xn--hy1b43d247a.com/credential-access/ntlm-relay/smb-to-smb.md)
- [SMB to LDAP/S](https://www.xn--hy1b43d247a.com/credential-access/ntlm-relay/smb-to-ldap-s.md)
- [HTTP to LDAP](https://www.xn--hy1b43d247a.com/credential-access/ntlm-relay/http-to-ldap.md)
- [SMB to HTTP](https://www.xn--hy1b43d247a.com/credential-access/ntlm-relay/smb-to-http.md)
- [SMB to SCCM](https://www.xn--hy1b43d247a.com/credential-access/ntlm-relay/smb-to-sccm.md)
- [강제 인증 (Authentication Coercion)](https://www.xn--hy1b43d247a.com/credential-access/authentication-coercion.md)
- [MS-RPRN - Printerbug / Print Spooler](https://www.xn--hy1b43d247a.com/credential-access/authentication-coercion/ms-rprn.md)
- [MS-EFSRPC - Petitpotam](https://www.xn--hy1b43d247a.com/credential-access/authentication-coercion/ms-efsrpc.md)
- [MS-FSRVP - ShadowCoerce](https://www.xn--hy1b43d247a.com/credential-access/authentication-coercion/ms-fsrvp.md)
- [MS-DFSNM - DFSCoerce](https://www.xn--hy1b43d247a.com/credential-access/authentication-coercion/ms-dfsnm.md)
- [NTLM 다운그레이드](https://www.xn--hy1b43d247a.com/credential-access/ntlm-downgrade.md)
- [DHCPv6 포이즈닝](https://www.xn--hy1b43d247a.com/credential-access/dhcpv6.md)
- [LAPS - TODO](https://www.xn--hy1b43d247a.com/credential-access/laps-todo.md)
- [DCSync](https://www.xn--hy1b43d247a.com/credential-access/dcsync.md): ID: T1003.006 - OS Credential Dumping: DCSync
- [DPAPI](https://www.xn--hy1b43d247a.com/credential-access/dpapi.md): T1555 -  Credentials from Password Stores
- [개념](https://www.xn--hy1b43d247a.com/lateral-movement/concepts.md)
- [Pass-the-Hash](https://www.xn--hy1b43d247a.com/lateral-movement/pass-the-hash.md)
- [SMB 와 PsExec](https://www.xn--hy1b43d247a.com/lateral-movement/smb-psexec.md)
- [WMI](https://www.xn--hy1b43d247a.com/lateral-movement/wmi.md)
- [WinRM / Powershell Remoting](https://www.xn--hy1b43d247a.com/lateral-movement/winrm-ps-remoting.md)
- [RDP](https://www.xn--hy1b43d247a.com/lateral-movement/rdp.md)
- [SSH Port Forwarding & Tunneling](https://www.xn--hy1b43d247a.com/lateral-movement/ssh-tunnel.md)
- [Dynamic Port Forwarding & ProxyChains](https://www.xn--hy1b43d247a.com/lateral-movement/dynamic-port-fowarding.md): 저번 SSH Port Forwarding 시간에서 배웠던 2가지 SSH 연결 방식과는 다른 차원의 개념일 수 있어 어려울 수도 있지만 끝까지 따라와 주길 바란다.
- [네트워크 피버팅 - 툴](https://www.xn--hy1b43d247a.com/lateral-movement/pivoting-tools.md): Pivoting에 자주 쓰이는 도구 간단 정리
- [Network Pivoting (피벗) - TODO](https://www.xn--hy1b43d247a.com/lateral-movement/pivoting.md)
- [윈도우 사용자 인증](https://www.xn--hy1b43d247a.com/general-concepts/windows-authentication.md)
- [NTLM 인증](https://www.xn--hy1b43d247a.com/general-concepts/windows-authentication/ntlm.md)
- [커버로스 (Kerberos) 인증 - TODO](https://www.xn--hy1b43d247a.com/general-concepts/windows-authentication/kerberos-authentication.md)
- [ADCS 인증서 기반 인증](https://www.xn--hy1b43d247a.com/general-concepts/windows-authentication/adcs-auth.md)
- [AD 관련 용어 해설](https://www.xn--hy1b43d247a.com/general-concepts/glossary.md)
- [개념](https://www.xn--hy1b43d247a.com/real-attack-ttp-and-mitigations/concepts.md)
- [시스몬 (sysmon) 설치](https://www.xn--hy1b43d247a.com/homelab/installing-sysmon.md)
- [SIEM과 EDR 솔루션 설치](https://www.xn--hy1b43d247a.com/homelab/edr.md)
- [취약한 랩을 위한 설정 커맨드](https://www.xn--hy1b43d247a.com/homelab/homelab-misconfigurations.md)
- [말웨어 자동 분석툴 Cuckoo 샌드박스 설치](https://www.xn--hy1b43d247a.com/homelab/cuckoo.md): 이 문서에서는 Cuckoo Sandbox를 설치 및 구동하는 방법에 대해 설명합니다.
- [DNS](https://www.xn--hy1b43d247a.com/basic-concepts/dns.md)
- [사이버 보안에 필요한 DNS 개념 편 #1](https://www.xn--hy1b43d247a.com/basic-concepts/dns/dns-concepts.md): DNS 개념 편 #1
- [해킹에 필요한 DNS 공격 & 우회 기법 편 #2](https://www.xn--hy1b43d247a.com/basic-concepts/dns/dns-and-2.md)
- [방어에 필요한 DNS 탐지 편 #3](https://www.xn--hy1b43d247a.com/basic-concepts/dns/dns-3.md)
- [01-계정관리](https://www.xn--hy1b43d247a.com/web-and-mobile/01-account-management.md): 1. 계정 관리
- [통신 과정 흐름 훑어보기](https://www.xn--hy1b43d247a.com/web-and-mobile/01-account-management/undefined.md)
- [첫번쩨, payload설정 방법](https://www.xn--hy1b43d247a.com/web-and-mobile/01-account-management/payload.md)
- [두번째, 세션을 유지하는 방법](https://www.xn--hy1b43d247a.com/web-and-mobile/01-account-management/undefined-1.md)
- [CSRF Token에 관하여](https://www.xn--hy1b43d247a.com/web-and-mobile/01-account-management/csrf-token.md)
- [세번째, OWASP Juice Shop 로그인 페이지에서의 통신 흐름과 구조 알아보기](https://www.xn--hy1b43d247a.com/web-and-mobile/01-account-management/owasp-juice-shop.md)
- [Host-based 공격 CheatSheet (FEAT. OSCP)](https://www.xn--hy1b43d247a.com/misc/host-based-cheatsheet-feat.-oscp.md): OSCP시험에 필요한 기본 호스트 공격 명령어 CheatSheet by Groot Security
- [Enumeration (정보 수집 및 열거)](https://www.xn--hy1b43d247a.com/misc/host-based-cheatsheet-feat.-oscp/enumeration.md): All you need to know about basic host-based enumeration for OSCP
- [Exploitation (공격)](https://www.xn--hy1b43d247a.com/misc/host-based-cheatsheet-feat.-oscp/exploitation.md): All you need to know about basic host-based exploitation for OSCP
- [Post Exploitation (후속공격)](https://www.xn--hy1b43d247a.com/misc/host-based-cheatsheet-feat.-oscp/post-exploitation.md): All you need to know about basic host-based post exploitation for OSCP
- [Changelog](https://www.xn--hy1b43d247a.com/misc/changelog.md)
- [기여하는 방법](https://www.xn--hy1b43d247a.com/misc/contributions.md)
- [레퍼런스와 크레딧](https://www.xn--hy1b43d247a.com/misc/undefined.md)
- [C# snippets](https://www.xn--hy1b43d247a.com/misc/csharp-snippets.md)
- [winapi 리스트](https://www.xn--hy1b43d247a.com/misc/winapi-list.md)
- [original notes from obsidian](https://www.xn--hy1b43d247a.com/misc/winapi-list/original-notes-from-obsidian.md)
- [파워쉘 원라이너 (oneliner)](https://www.xn--hy1b43d247a.com/misc/powershell-oneliners.md)
- [README-and-Template](https://www.xn--hy1b43d247a.com/personal-research/readme-and-template.md)
- [HellsGate](https://www.xn--hy1b43d247a.com/personal-research/readme-and-template/hellsgate.md)
- [HalosGate](https://www.xn--hy1b43d247a.com/personal-research/readme-and-template/halosgate.md)
- [FreshyCall](https://www.xn--hy1b43d247a.com/personal-research/readme-and-template/freshycall.md)