Skill UI

This guide details setting up advanced Command and Control (C2) redirectors, acting as protective intermediaries between implant beacons and the hidden team server. It covers using Nginx and Apache for request filtering based on Malleable C2 profiles, layering Let's Encrypt TLS, and implementing advanced OPSEC controls like domain fronting, geo/UA filtering, and decoy diversion. Essential for red-teaming operations requiring high resilience against blue-team detection and takedown.

This guide provides comprehensive, battle-tested techniques for expanding access across a compromised network. It covers credential-based movement (Pass-the-Hash, Pass-the-Ticket), NTLM relay attacks, and remote execution protocols (WMI, WinRM). Used exclusively in authorized red team engagements and penetration testing, it details command sequences and OPSEC considerations required to reach high-value targets while minimizing detection.