# References

1- [incognito ](https://gracefulsecurity.com/privesc-stealing-windows-access-tokens-incognito/)

2- [Windows Tokens](https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc759267\(v=ws.10\))

3- [Shellter](https://www.shellterproject.com/introducing-shellter/)

4- [Backdoor Factory](https://github.com/secretsquirrel/the-backdoor-factory)

5- [SAM database](https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc756748\(v=ws.10\))

6- [Pass the Hash](https://www.securityfocus.com/bid/233/discuss)

7- [Reg Command](https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/cc732643\(v=ws.11\))

8- [Mimikatz](https://github.com/gentilkiwi/mimikatz)

9- [Mimikatz wiki](https://github.com/gentilkiwi/mimikatz/wiki)

10- [Wdigest](https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc778868\(v=ws.10\)?redirectedfrom=MSDN)

11- [WCE](https://www.ampliasecurity.com/research/windows-credentials-editor/)

12- [WMIC](https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-2000-server/bb742610\(v=technet.10\)?redirectedfrom=MSDN)

13- [Veil Framework](https://github.com/Veil-Framework/)

14- [PTES: Pillaging](http://www.pentest-standard.org/index.php/Post_Exploitation#Pillaging)

15- [Windows Pillaging](https://docs.google.com/document/d/1U10isynOpQtrIK6ChuReu-K1WHTJm4fgG3joiuz43rw/edit?hl=en_US)

16- [Linux Pillaging](https://docs.google.com/document/d/1ObQB6hmVvRPCgPTRZM5NMH034VDM-1N-EWPRz2770K4/edit?hl=en_US)

17- [OSX Pillaging](https://docs.google.com/document/d/10AUm_zUdAQGgoHNo_eS0SO1K-24VVYnulUD2x3rJD3k/edit?hl=en_US)

18- [Metasploit Pillaging](https://docs.google.com/document/d/1ZrDJMQkrp_YbU_9Ni9wMNF2m3nIPEA_kekqqqA2Ywto/edit?pref=2\&pli=1)

19- [Mubix Post-exploitation](https://github.com/mubix/post-exploitation/wiki)

20- [Post Exploitation 1](http://tim3warri0r.blogspot.com/)

21- [Post Exploitation List](https://github.com/mubix/post-exploitation/wiki/Linux-Post-Exploitation-Command-List)

22- [Nirsoft](http://www.nirsoft.net/)

23- [DLL Preloading](https://support.microsoft.com/en-us/help/2389418/secure-loading-of-libraries-to-prevent-dll-preloading-attacks)

24- [DLL Search Order](https://docs.microsoft.com/en-us/windows/win32/dlls/dynamic-link-library-search-order?redirectedfrom=MSDN)

25- [Skype dll hijacking](https://packetstormsecurity.com/files/146325/msskype-dllhijack.txt)

26- [DLL planting](https://blogs.technet.microsoft.com/srd/2018/04/04/triaging-a-dll-planting-vulnerability/)

27- [DLL hijacking vulnerable apps ](https://www.exploit-db.com/search?q=DLL+Hijacking)

28- [Pass the Hash](https://www.harmj0y.net/blog/redteaming/pass-the-hash-is-dead-long-live-localaccounttokenfilterpolicy/)

29- [Slack Client DLL Hijacking](https://www.obscurechannel.com/x42/slack.html)

30- [Process Monitor ](https://docs.microsoft.com/en-us/sysinternals/downloads/procmon)
