首页

投稿

网安攻防- 单人紫队

2610

1

2026-02-10 11:30:00

转载于：https://www.youtube.com/c/Hackers/playlists 开启B站官方字幕即可翻译成中文字幕学习，麻烦给个免费点赞三连是UP持续更新的动力。 == VX订阅号 | 哔哩哔哩同名：0x00实验室欢迎订阅.

0x00实验室发消息

人无名方能潜心练剑。

1 - Course Introduction

06:24

2 - Solo Purple Teaming

08:42

3 - Scenario One

03:13

4 - Red Team Layout Initial Lab Setup

02:08

5 - Red Team Layout Choosing C2 Framework

03:15

6 - Red Team Layout PowerShell Reverse Shell Without Defender

06:19

7 - Red Team Layout Determining Root Cause

22:54

8 - Red Team Layout What is AMSI

03:38

9 - Red Team Layout ByPass AMSI Using x64dbg

07:23

10 - Red Team Layout When Patching Doesnt Go As Planned

15:11

11 - Red Team Layout Introduction to Managed Code and NET Assemblies

06:57

12 - Red Team Layout Full AMSI ByPass

24:08

13 - Red Team Layout A Warning and a Challenge

01:36

14 - Red Team Layout Installing Mythic C2 Framework

06:57

15 - Red Team Layout Installing Apollo Agent and a Couple C2 Profiles

08:18

16 - Red Team Layout Introduction to Reflection

21:51

17 - Red Team Layout Prepping Apollo for Reflection

10:26

18 - Red Team Layout Introduction to AV

08:28

19 - Red Team Layout Bypassing SignatureBased Detections

12:33

20 - Red Team Layout Moving Custom Apollo to Mythic Server

18:07

21 - Lab Setup for Level 0 Attack Path Outline

02:10

22 - Lab Setup for Level 0 Attack Path Setting Up Edge Appliances

23:38

23 - Lab Setup for Level 0 Attack Path Moving Kali to Attack LAN

07:27

24 - Lab Setup for Level 0 Attack Path Configuring Firewall Rules for Attack LAN

11:52

25 - Lab Setup for Level 0 Attack Path Setting Up Assumed Breach Host

08:53

26 - Lab Setup for Level 0 Attack Path Testing Apollo on Assumed Breach Host

09:50

27 - Lab Setup for Level 0 Attack Path Setting Up ECORP Edge Appliance

12:45

28 - Lab Setup for Level 0 Attack Path Setting Up ECORP Domain and DC

22:50

29 - Lab Setup for Level 0 Attack Path Joining Assumed Breach Host to ECOIN Doma

10:39

30 - Lab Setup for Level 0 Attack Path Creating Service Account and Service

23:18

31 - Red Team Engage Review Attack Path Level 0

02:33

32 - Red Team Engage Introduction to Mythic UI

03:37

33 - Red Team Engage Mythic User Settings

05:11

34 - Red Team Engage Create Operation for Level 0 Attack Path

05:49

35 - Red Team Engage Generate Payload for Attack Level 0

09:43

36 - Red Team Engage Establish Foothold In ECOIN

09:41

37 - Red Team Engage Mythic Callbacks UI

07:01

38 - Red Team Engage Mythic Tasking

05:15

39 - Red Team Engage Enumeration

10:54

40 - Red Team Engage Privilege Escalation

42:16

41 - Lab Setup For Blue Team Activities Setting Up The AllSafe Edge Device

06:53

42 - Lab Setup For Blue Team Activities Setting Up Wazuh Server

15:15

43 - Lab Setup For Blue Team Activities Port Forwarding to Wazuh Server

04:10

44 - Lab Setup For Blue Team Activities Installing Wazuh Agent on Assumed Breach

04:09

45 - Lab Setup For Blue Team Activities Installing Sysmon on Assumed Breach

04:59

46 - Lab Setup For Blue Team Activities Configuring Wazuh for Defender and Sysmo

17:48

47 - Lab Setup For Blue Team Activities Sending Syslog Events From ECOIN Edge

15:17

48 - What is Detection Engineering

01:53

49 - Pyramid of Pain

03:21

50 - Balancing Accuracy VS Coverage

04:17

51 - Balancing Telemetry VS Performance

04:38

52 - Blue Team Explore Detection Opportunities

09:47

53 - Blue Team Explore Sysmon ProcessCreate Event ID 1 NetworkConnect Event ID 3

27:57

54 - Blue Team Explore Sysmon ImageLoad Event ID 7

10:06

55 - Blue Team Explore Sysmon FileCreate Event ID 11

10:26

56 - Blue Team Explore PowerShell ScriptBlock Logging

10:15

57 - Blue Team Trace Setting Up Wazuh for Trace Activities

13:16

58 - Blue Team Trace Build Custom Rule for Unsigned ImageLoads

05:57

59 - Blue Team Trace Build Custom Rule for Network Connect to Common C2 Port

04:38

60 - Blue Team Trace Build Custom Correlation Rule

08:26

61 - Blue Team Trace Building Advanced Correlation Engine Part 1

43:01

62 - Blue Team Trace Building Advanced Correlation Engine Part 2

10:37

63 - Blue Team Trace Building Advanced Correlation Engine Part 3

09:57

64 - Blue Team Trace Building Advanced Correlation Engine Part 4

33:44

65 - Blue Team Trace Hunting For PowerShell IOCs and Building Detections

10:44

66 - Blue Team Trace Creating Custom Rule for PowerShell Reflection

04:31

67 - Blue Team Trace Improving Solo Purple Teaming Detection Dashboard

13:06

68 - Red Team ReEngage For Level Testing All Detections

18:03

69 - Red Team Layout Using Threat Intel to Formulate Next Attack Path

02:23

70 - Red Team Layout Attack Path Level 1

02:38

71 - Red Team Layout Using Run Box to Bypass UnSigned ImageLoads From Downloads

15:12

72 - Red Team Layout Using Application Domain to Bypass Reflection Detection

16:52

73 - Red Team Layout Writing A Service Enumeration Tool Part 1

09:15

74 - Red Team Layout Writing A Service Enumeration Tool Part 2

01:01:54

75 - Red Team Layout Writing A Service Enumeration Tool Part 3

15:42

76 - Red Team Layout Writing A Service Enumeration Tool Part 4

27:20

77 - Red Team Layout Testing Service Enumeration Bypass

18:52

78 - Adding svcecoinsync to Domain Admins

03:50

79 - Red Team Engage Initial Access

09:50

80 - Red Team Engage Privilege Escalation

13:18

81 - Red Team Engage Lateral Movement

22:06

82 - Blue Team Explore What to Expect

02:18

83 - Blue Team Explore Learning About executeassembly Process Injection and IPC

04:44

84 - Blue Team Explore Enabling Sysmon Event IDs 10 17 18

06:10

85 - Blue Team Explore Hunting For Indications of executeassembly

27:50

86 - Blue Team Explore Enabling Sysmon Event IDs 12 13 14

05:28

87 - Blue Team Explore Hunting For Initial Access Execution

17:08

88 - Blue Team Trace Reversing Execute Assembly and Customizing Mythic

21:45

89 - Blue Team Trace Extracting Payload

10:04

90 - Blue Team Trace Basic Malware Analysis

07:16

91 - Build Detection For IWR and RunMRU

12:27

92 - Final Thoughts

02:15

顶部