Skip to content

RustBelt RedTeam Forge

Nimbus — Attack Chain

Initializing search

RustBelt RedTeam Forge

Home
Markdown cheat sheet
1. Plan
1. Plan
AI
AI
AWS
AWS
- Resources
Active Directory
Active Directory
- John Hammond Active Directory YT
- Microsoft Active Directory Federation Server Set up
- CyberHeaven
  CyberHeaven
  - Wolf's AD lab
- Cybrary
  Cybrary
- TryHackMe
  TryHackMe
Blue Team tools
Blue Team tools
- Volatility
- Wireshark
CTF
CTF
- LinPeas to target machine
- Playbook
- Pwn.college
- Reverse shell bash upgrade
- Ctf list
- Stderr dk challenges
- CISA
  CISA
  - CISA
  - Login
- Crunch's boxes
  Crunch's boxes
  - Challange 1
  - Challenge 2 Promotion
- Cyberstart
  Cyberstart
- HTB
  HTB
  - HTB —
  - AGENTS.md — HTB Pentest Education Coach (Notes + Attack Workflow)
  - TMUX whitespace remover
  - Template
  - Active
    Active
    
    Active
  - Administrator
    Administrator
    
    Administrator (HTB) - Step-by-step notes
  - Appointment
    Appointment
    
    Appointment
  - Baby
    Baby
    
    Baby - HackTheBox
    
    Attack Chain - Baby
    
    Loot
    Loot
    
    Credentials - Baby
  - Blackfield
    Blackfield
    
    HTB — Blackfield
    
    Blackfield
  - Broker
    Broker
    
    Broker — HTB
    
    Broker — Attack Chain (COMPLETE)
    
    Loot
    Loot
    
    Broker — Credentials
  - Certified
    Certified
    
    Certified - HTB Writeup
    
    Attack Chain - Certified
    
    Loot
    Loot
    
    Credentials - Certified
  - Cicada
    Cicada
    
    Cicada
  - Clicker
    Clicker
    
    Clicker
  - Codify
    Codify
    
    Codify — HTB
    
    Codify — Attack Chain (COMPLETE)
    
    Loot
    Loot
    
    Codify — Credentials
  - Cozyhosting
    Cozyhosting
    
    CozyHosting — HTB
    
    CozyHosting — Attack Chain (COMPLETE)
    
    Loot
    Loot
    
    CozyHosting — Credentials
  - Devvortex
    Devvortex
    
    Devvortex — Attack Chain
    
    Devvortex write up
    
    Loot
    Loot
    
    Devvortex — Credentials
  - Escape
    Escape
    
    HTB — Escape
    
    Escape
  - EscapeTwo
    EscapeTwo
    
    EscapeTwo - Work Log
  - Flight
    Flight
    
    Flight
  - Forest
    Forest
    
    Forest
  - Jarvis
    Jarvis
    
    Jarvis — Attack Chain (ROOTED)
    
    Jarvis — HTB Writeup
    
    Loot
    Loot
    
    Jarvis — Credentials
  - Jeeves
    Jeeves
    
    Jeeves - HackTheBox
    
    Attack Chain - Jeeves
    
    Loot
    Loot
    
    Credentials - Jeeves
  - Mentor
    Mentor
    
    Mentor — HTB Writeup
    
    Mentor — Attack Chain
    
    Loot
    Loot
    
    Mentor — Credentials
  - Mist
    Mist
    
    Mist writeup
  - Monteverde
    Monteverde
    
    Monteverde
  - Nimbus
    Nimbus
    
    Nimbus — HTB Writeup
    
    Nimbus — Attack Chain Nimbus — Attack Chain
    Table of contents
    
    Current Path
    
    Branch Points
    
    Next Steps
    
    Loot
    Loot
    
    Nimbus — Credentials
  - Overwatch
    Overwatch
    
    Overwatch
    
    Overwatch — Attack Chain
    
    Loot
    Loot
    
    Overwatch — Credentials
  - Principal
    Principal
    
    Principal — HackTheBox
    
    Attack Chain — Principal
    
    Loot
    Loot
    
    Credentials — Principal
  - Puppy
    Puppy
    
    Puppy - HTB Writeup
    
    Attack Chain - Puppy
    
    Loot
    Loot
    
    Credentials - Puppy
  - Return
    Return
    
    Return
  - Sauna
    Sauna
    
    [[HTB]]: Sauna – Write-up
  - Sea
    Sea
    
    Sea - HackTheBox
    
    Attack Chain - Sea
    
    Loot
    Loot
    
    Credentials - Sea
  - Support
    Support
    
    Support
  - Tabby
    Tabby
    
    Tabby — HTB Writeup
    
    Tabby — Attack Chain
    
    Loot
    Loot
    
    Tabby — Credentials
  - Tartarsauce
    Tartarsauce
    
    TartarSauce — HackTheBox
    
    Attack Chain — TartarSauce
    
    Loot
    Loot
    
    Credentials — TartarSauce
  - TheFrizz
    TheFrizz
    
    Attack Chain - theFrizz
    
    theFrizz - HTB Writeup
    
    Loot
    Loot
    
    Credentials - theFrizz
    
    Wapt
    Wapt
    
    Lib
    Lib
    
    Site packages
    Site packages
    
    Soupsieve 2.5.dist info
    Soupsieve 2.5.dist info
    
    Licenses
    Licenses
    
    LICENSE
    
    Werkzeug
    Werkzeug
    
    Debug
    Debug
    
    Shared
    Shared
    
    ICON LICENSE
  - Timelapse
    Timelapse
    
    Timelapse
    
    Timelapse htb
  - Usage
    Usage
    
    Usage — HTB Writeup
    
    Usage — Attack Chain
    
    Loot
    Loot
    
    Usage — Credentials
- Hacky Holidays 2022
  Hacky Holidays 2022
  - Factory Reset
- HaikuPro
  HaikuPro
  - Pros
- NahamCom
  NahamCom
  - NahamCon2022 CTF
- SANS KringleCon 2021
  SANS KringleCon 2021
  - Main
- TryHackMe
  TryHackMe
  - Food
  - Jurassic Park
  - nmap scans
  - OpenVPN
  - Panda
  - Poster
  - Rootme
  - Shrek
  - Wonderland
  - Year of the Fox
- Hackmyvm.eu
  Hackmyvm.eu
  - Venus
- Overthewire.org
  Overthewire.org
  - Speed Run time - 2 hr to level 23
  - Natas
Certifications and courses
Certifications and courses
- CompTia Network+ Course
  CompTia Network+ Course
  - Core Concepts
  - IPv4 Addressing
    IPv4 Addressing
    
    APIPA Automatic Private IP addresses
    
    Classes
    
    IPv4 decimal to Binary
  - Network Services
    Network Services
    
    DNS Domain naming Services
    
    NAS Network Attached Storage
    
    Remote Access
    
    Tunneling and IPSec
  - OSI & TCP IP Model
    OSI & TCP IP Model
    
    Creed's Notes
    
    OSI TCP IP Model
    
    Presentation Layer
    
    TCP IP
    
    Main
    
    Application Layer
    Application Layer
    
    Application Layer Layer 7
    
    Protocols
    
    Troubleshooting
    
    Data Link Layer
    Data Link Layer
    
    Data Link Layer 2
    
    Troubleshooting
    
    Network Layer
    Network Layer
    
    Network layer Layer 3
    
    Protocols
    
    TroubleShooting
    
    Physical layer
    Physical layer
    
    Physical Layer Layer 1
    
    Troubleshooting
    
    Ports and Protocols
    Ports and Protocols
    
    Protocols of TCP ip
    
    Main
    
    Session Layer
    Session Layer
    
    Protocols
    
    Transport Layer
    Transport Layer
    
    Transport layer Layer 4
    
    Protocols
    
    Troubleshooting
- GRC Analyst Master Class
  GRC Analyst Master Class
  - 1.3 What is Cybersecurity
- Network+ Comptia
  Network+ Comptia
  - Cybrary Practice Labs
    Cybrary Practice Labs
    
    1.1 Introduction to the OSI Model
    
    1.2 Networking Topologies and Characteristics
    
    1.3 Internet Protocol Addressing Solutions
  - Cybrary Videos
    Cybrary Videos
    
    1 Learning Objectives
    
    M1 Risk Management and Security Basics
    M1 Risk Management and Security Basics
    
    Chapter 1 Agenda
    
    Risk Management and Security Basics
    
    M2 Threats, Attacks and Vulnerabilities
    M2 Threats, Attacks and Vulnerabilities
    
    M2 Threats, Attacks and Vulnerabilities
    
    M3 Cryptography
    M3 Cryptography
    
    M3 Cryptography
    
    M4 Networking Basics
    M4 Networking Basics
    
    M4 Networking Basics
    
    M5 Network Connectivity Devices
    M5 Network Connectivity Devices
    
    M5 Network Connectivity Devices
    
    M6 Operational Security
    M6 Operational Security
    
    M6 Operational Security
    
    M7 Identity and Access Management
    M7 Identity and Access Management
    
    M7 Identity and Access Management
  - Professor Messer
    Professor Messer
    
    1.1 1 OSI model
    
    1.1 2 Data Communication
- OSCP HTB boxes
  OSCP HTB boxes
  - CozyHosting
  - Keeper
  - Knife
  - Lame
  - Nibbles
  - OSCP CheckMethodology
  - Pilgrimage
  - Poison
  - Precious
  - SolidState
  - Sunday
  - Lain Kusanagi machines
    Lain Kusanagi machines
    
    Lain Kusanagi OSCP like machines
- Security+
  Security+
  - Encryption
  - Security + flash cards
  - Attack surface.excalidraw
  - Links
  - Study Notes for Security+
    Study Notes for Security+
    
    Security StudyNotes
    Security StudyNotes
    
    Sy0 601 05
    Sy0 601 05
    
    Testing Hashes
Cisco Router
Cisco Router
- Setup
- Wolf's Cisco Modeling Lab Workbench
Computer Networks A Systems Approach
Computer Networks A Systems Approach
- 1.1 Applications
CyberSec Labs
CyberSec Labs
- Shares Linux
DNS
DNS
- Coredns
Docker
Docker
- Install
- Tutorials
- Apache
- Commands
Email Analysis
Email Analysis
- 2 Main concerns in email analysis
- Tools
Encoding
Encoding
- Identifiers
- Identifier
Enterprise CyberSec Basics
Enterprise CyberSec Basics
- Enterprise CyberSecurity Basics
Excalidraw
Excalidraw
- Scripts
  Scripts
  - Downloaded
    Downloaded
    
    Change shape of selected elements
    
    Darken background color
Firewall
Firewall
- OPNsense
Gaming
Gaming
- Game development
- Minecraft
GitHub
GitHub
Hacking visualizations
Hacking visualizations
- Hacking scenarios
- Updating your machine
Hak5 Tools
Hak5 Tools
Hardware
Hardware
- Current Desktop
Images
Images
- 318144411987083274
- Open history view
Incident Response
Incident Response
Introductory Networking
Introductory Networking
- Encapsulating
- OSI model overview
- OSI workshop
- TCP IP model
- Port forwarding
- Networking Tools
  Networking Tools
  - Dig
  - WHOIS
  - Ping
  - Traceroute
- Packet Tracer
  Packet Tracer
Juniper labs
Juniper labs
Kubernetes
Kubernetes
- Kubernetes
Languages
Languages
- Bash Cheat Sheet
- Python
  Python
  - Python Resources
  - Python Cheat Sheet
Linux
Linux
- App download and make world run able
- Customized linux
- Directory permissions
- Disk Management
- Ghostty
- Resetting password on Ubuntu VM with lvm
- Shells
- Tutorials
- Ubuntu Server 2022
- Commands
- Ed
- Haxnet permissions
- Session Control (from the command line)
- Vi
- Flavors
  Flavors
- TryHackMe
  TryHackMe
  - $PATH
  - Automation
  - BASH
  - Common directories
  - Kali
  - Linux commands
  - Logs
  - Package Management eh
  - Permissions
  - Processes
  - Regex
  - Shell Operators
  - Text Editors
  - Utilities
  - Find
  - Main
- Kali
  Kali
  - Kali autopilot
Mainframe hacking
Mainframe hacking
- Telnet 3270
Networking
Networking
- OSI model Data encapsulation decapsulation
NoriKittea
NoriKittea
OSINT
OSINT
- GitHub Dorks
- OSINT Thingy an OSINT tool
Pentesting Notes
Pentesting Notes
- Chmod utils
- 📋Master Port Enumeration Cheat Sheet
- Engagement outline
- Enumeration
- Methodology
- Physical Penetration Testing
- Stabilize Shell BASH
- Stabilize shell Python
- Wi Fi hacking
- Exfil data
- Reverse shell one liners
- Active Directory
  Active Directory
- Attacks
  Attacks
  - Attack vectors
  - Brute Forcing Passwords
  - Remote Access services
  - Cross site Scriping XSS
  - Google Dorking
  - HTTP methods
  - Hydra Cheat Sheet
  - LFI RFI
  - LSASS
  - Log4j
  - NTLM Reflection
  - OSINT
  - Tools
  - Windows methodology
  - XXS
  - Main
  - Coercion
    Coercion
    
    PetitPotam (NTLM Coercion via EFSRPC)
  - Hacking Tools
    Hacking Tools
    
    Active Directory
    
    Command and Control
    
    Feroxbuster
    
    Gobuster
    
    Hashcat 1
    
    [[John]] the Ripper Cheat Sheet
    
    Links
    
    Mindmap Pentest Active Directory
    
    Reverse shells
    
    Rustscan
    
    SQLmap Cheat Sheet
    
    Ffuf
    
    Advanced CPU-based password recovery utility
    
    Kerbrute
    
    Main
    
    Metasploit Cheat Sheet
    
    Mitmproxy
    
    Netdiscover
    
    Ss
    
    Network Exploitation
    Network Exploitation
    
    Network Services
    Network Services
    
    NFS
    
    SMB
    
    Telnet
    
    Ftp
    
    Main
    
    Nmap
    Nmap
    
    Firewall Evasion
    
    ICMP Network Scanning
    
    NSE Scripts
    
    NULL, FIN, Xmas
    
    SYN Scans
    
    Scan Types Overview
    
    TCP Connect Scans
    
    UDP Scans
    
    Main
    
    Nmap Cheat Sheet
    
    Nmap
  - Kerberoasting
    Kerberoasting
    
    Kerberoasting
  - Phishing
    Phishing
    
    EvilGinx
    
    IP warming
  - WebSite hacking
    WebSite hacking
    
    Certificate vulnerability, FTP and SFTP
    
    Unblocking text selections
  - Sql injection
    Sql injection
    
    1 SQL Injection.excalidraw
    
    2 SQL injection types
    
    Cybrary Injection Lab
    
    Fuzzing
    
    Resources
    
    SQL basic queries by THM
    
    [[SQL injection]] step by step guide
    
    SQL injection by TryHackMe
    
    SQL Injection Cheatsheet
    
    Tools
    
    Tryhackme SQL Injection
    
    Books
    
    Portswigger
    Portswigger
    
    1 Lab SQL injection vulnerability in WHERE clause allowing retrieval of hidden data
    
    2 Lab SQL injection vulnerability allowing login bypass
    
    3 Lab SQL injection UNION attack, determining the number of columns returned by the query
    
    Lab SQL injection UNION attack, finding a column containing text
    
    Lab SQL injection UNION attack, retrieving multiple values in a single column
    
    Portswigger
    
    [[SQL injection]] cheat sheet
- Services
  Services
  - MSSQL
  - Mysql
- Tools books materials repos
  Tools books materials repos
  - Hashes
  - Repos
  - NetExec
    NetExec
    
    Ftp
  - Bbot
    Bbot
    
    BBOT Pentesting Workflow for HackTheBox
- Websites Guides
  Websites Guides
  - Hacking
Pic notes
Pic notes
- Main
Podcast
Podcast
Presentations
Presentations
- Rea Info Sys Road Show
- HackYSU
  HackYSU
- What does a penetration tester do
  What does a penetration tester do
  - 1. Intro
  - What does a Penetration Tester Do?
Projects
Projects
- Echo server Echo client
- Raspberry Pi
Pwn.college
Pwn.college
- CSE 365
  CSE 365
  - HTTP protocol
SIEM
SIEM
- ELK stack
- T pot
Security Onion
Security Onion
- Cheat Sheet
- Training
Server
Server
- Machine
- Setup
- VM's
Shodan
Shodan
- Getting started
Splunk
Splunk
Stream
Stream
- Chad n00b defcon questions
- Community Gaming
- Content
- Convert YT to Sound clip
- Dramatic Readings of man pages
- Emotes
- Loaf's, Nori and Jess favorite js tool
- Movies
- Redeems
- Resources
- Rick roll link
- Real-Time Caption Translation Setup Guide
- Shortcuts
- Simple Pleasures in life
- Start your Day
- Topics
- Try Hack Me New Cyber Security 101 Learning Path
- Twitch, YT, TikTok upload defaults
- Viewer nicknames
- Xmetrix
- Bots to ban list
- Channel trailer
- Chat commands
- Hyperate
- Issues
- Path to partner
- Quotes
- Shorts
- Tts fun
- Charity
  Charity
  - Make a wish
- Community Resolutions
  Community Resolutions
  - Data Sherpa
  - Dragunov308
  - Lil Bryan To do
  - Melosh101
  - R4yyR4yy
  - Rain
  - Swevenski
  - WheelThis
  - Z Hackz To do
  - Zoogs
  - I processor
  - Iamxavier
  - League of lego boy99
  - Meknors chef
  - Msec
  - Theuntippable
- Contests
  Contests
  - T shirt Contest
- Music
  Music
- PainfulIT Bot
  PainfulIT Bot
  - Painful IT bot
  - TwitcHack Commands
- Security Live TTS
  Security Live TTS
- News talks
  News talks
  - Stream Talking Points — Feb 28, 2026
Study techniques
Study techniques
- Handwritten notes
- chatGPT with obsidian note taking
TCM PEH
TCM PEH
- Assessments
- Network Refresher
  Network Refresher
TCM PNPT
TCM PNPT
Tryhackme
Tryhackme
Virtual Machines
Virtual Machines
- Command line upgrade
Vulnerability research
Vulnerability research
Webi
Webi
- Webinstall.dev
Windows
Windows
- Custom windows install
- Rwxrob custom windows terminal
- Windows server 2022
  Windows server 2022
  - Untitled
Blog
Blog
- Blog
- Archive
Homelab
Homelab
- Taggart Institute homelab Almanac
Overgrowncarrot
Overgrowncarrot
- Invoke 1
Rwxrob
Rwxrob
- Creative Commons License
- Boost
  Boost
- Zettlekasten
  Zettlekasten
  - Rules

Table of contents

Current Path
Branch Points
Next Steps

Nimbus — Attack Chain¶

Current Path¶

(nothing yet)

Branch Points¶

Next Steps¶

Run initial nmap scan

Made with Material for MkDocs