PowerShell Remoting Cheatsheet

Introduces Invoke-MassMimikatz-PsRemoting, which combines SPN discovery, PowerShell Remoting, and Invoke-Mimikatz to harvest credentials from many domain systems automatically.

A pentest cheat sheet of fifteen file transfer techniques for compromised Windows boxes, from PowerShell and Python to FTP, TFTP, bitsadmin, wget, netcat, and compiled-source tricks.

Examines WinRM misconfigurations—unencrypted channels, Basic auth, permissive TrustedHosts—that let attackers intercept credentials or relay authentication for remote command execution.

A pentest shows Claude refuses to build an LSASS dumper, but local DeepSeek and uncensored Qwen models produce a working XOR-encrypted minidumper, making AI-assisted EDR evasion nearly effortless.

WinRM over HTTP isn't the cleartext disaster people assume — payloads are encrypted at the application layer — and the post explains when HTTPS genuinely adds value and when it doesn't.

A practical Nmap cheat sheet covering the ten most useful scan techniques — ping, SYN, UDP, version and OS detection and more — with tips on scope, timing and output options.