Privilege Escalation Pillows

PowerSploit is a collection of Microsoft PowerShell modules that can be used to aid penetration testers during all phases of an assessment.

An awareness design to avoid Linux administrators to give sudo privileges to the command less. This could lead unwanted privilege escalation.

IT operation should be really careful when dealing with domain administrators. The best practice is that it should be only one per domain otherwise, it could be a nightmare to manage.

One of the ways to reduce the risk is to limit the impact in case of compromise so practicing least privilege is the way.

To conduct penetration testing is akin to solving a multifaceted puzzle, with the purpose of demonstrating the ability to access an organization's important assets. The associated design embodies this concept with a minimalist approach.

Penetration testing can be compared to solving a complex puzzle, with the ultimate aim of proving whether it is possible to obtain the crucial assets of an organization. The corresponding design represents this idea in a minimalist style.

Penetration testing can be likened to tackling a complex puzzle, where the goal is to demonstrate the feasibility of accessing the critical assets of an organization. The accompanying design embodies this concept in a minimalistic manner.

Funny design about the bad practice of sharing passwords in clear text over email, messaging applications and ticketing systems. They should be shared through a password management tool or one time secret applications.

Red team are like ninjas, they attack with their stealthy techniques to avoid being detected and prove there is a vulnerability before an actual attacker discovers it. Perfect design for CTF game.

An awareness design to avoid Linux administrators to provide sudo privileges for every single permission denied they get, when trying to run any command with a non root user.

Instead of giving systematically sudo or suid privileges when a non root user cannot perform an action on the system, the Linux capabilities are one of the alternatives to keep the least privilege principle.

A funny design to concern developers that the usage of eval() to process or parse untrusted data could let attackers to inject code to run.

Funny design of hashcat tool in a pun form. Hashcat the hash!

A sword is an offensive weapon which is normally used for attacking your opponent. That's why the Red Team may be represented with a sword in the CTF game.

Yet another security awareness design, this time related to one of the weakness to address in terms of Linux configuration or hardening. If you stop writing the previous commands in the history, you can avoid the passwords being wrote on it when admins use them in commands as parameters.

IT operation should be really careful when dealing with domain administrators. The best practice is that it should be only one per domain otherwise, it could be a nightmare to manage. This is a version of the design with black background and white letters.

Administrators tends to su or login as root to perform privileged actions on Linux systems while they shouldn't. It is a bad practice to use root account so, instead, the recommendation is to use a non-root user to elevate with sudo to perform those actions or give them enough capabilities.

The Germany flag design of the Cybersecurity Red Team in badge style. Ideal for your peers working with you in the same cyber security group. Let's prove to the Blue Team that their detections and security measures are useless!

This is the message that all pentesters don't want to receive when doing such activities.

The Ukraine flag design of the Cybersecurity Red Team in badge style. Ideal for your peers working with you in the same cyber security group. Let's prove to the Blue Team that their detections and security measures are useless!

If you want to test and prove your network, call the red team to do so. Any findings that they can report will be less findings for an eventual attacker to benefit from.

The Finland flag design of the Cybersecurity Red Team in badge style. Ideal for your peers working with you in the same cyber security group. Let's prove to the Blue Team that their detections and security measures are useless!

This is a black background with white letters design to avoid Linux administrators to provide sudo privileges for every single permission denied they get, when trying to run any command with a non root user.

Instead of giving systematically sudo or suid privileges when a non root user cannot perform an action on the system, the Linux capabilities are one of the alternatives to keep the least privilege principle. This is a black background with white letters design version for the security awareness.

If you passed the OSCP and finally got the certification then that means that you tried hard!! Here's the design with dark background and white letters.

A Red Team motivational slogan to keep trying hard on finding flaws or vulnerabilities on network or systems. Keep struggling in order to find the vulnerabilities and report them before any eventual attacker.

If you passed the OSCP and finally got the certification then that means that you tried hard!

When you are doing penetration testing is like solving a big complex puzzle in order to prove if it is possible to get the important assets of the organisation. In this design, it is represented the concept in a minimalistic way.

Yet another security awareness design, but not less important, about the bad practice of saving clear text passwords in notepad. They should be saved in a password manager tool instead.

The principle of the Zero Trust architecture is to assume the breach inside your network, therefore, never trust any asset access before validation or authentication. Therefore, in a funny way, it should be similar to validate your dog before he can enter home.