W#
Index#
Reference of weapon-system categories an operator may need to identify, classify, or describe in reporting. The catalog below is non-exhaustive, the focus is on the identification dimensions (caliber, family,…
A short tradecraft sheet for the operator working web targets. The page covers enumeration, local file inclusion, reflected and persistent cross-site scripting, XML vulnerabilities, and manual SQL injection. Payloads…
When the operator needs an HTTP listener and the box has no nginx, no Apache, no installed web framework, a rudimentary webserver written in whatever interpreter is on hand will do. The handbook collects one-shot…
A reference for the operator working a Windows host from cmd.exe. The page covers the network admin one-liners, share enumeration, remote command execution via psexec and wmic, registry poking via…
A defender’s reference for triaging a Windows host. The page covers evidence collection order, blue / DFIR tools, where on disk the OS parks browser, email, prefetch, jump-list, and PowerShell history artifacts, plus…
A red-team reference for moving on a Windows host post-foothold. The page leans on living-off-the-land binaries (LoLbins), privilege escalation, RDP exploitation, persistence mechanisms, and LoLBin download chains….
The structured Windows-hardening references the operator hands to a blue team. Microsoft’s own Security Baselines (delivered via the Security Compliance Toolkit) carry the per-version GPOs; CIS and DISA STIGs cover…
Historical Windows services and ports across versions. The operator uses this when fingerprinting a host, mapping discovery results to the service that owns a port, or planning lateral movement against known Windows…
The default top-level layout under C:\ on a modern Windows install. The operator references this when surveying a fresh foothold to pick a staging area, to locate the OS’s own binaries and configuration, or to…
A short bag of host-level tradecraft for the operator working a Windows box. Firewall manipulation, Remote Desktop enable, NTFS last-access flag, log cleanup, and timestamp doctoring. Two-sided material, the operator…
Release table of Microsoft Windows versions, dates, NT release numbers, and latest build identifiers. The operator uses this to correlate a fingerprint or banner back to a known release.
Reference table of wireless standards and their frequency ranges. The operator (or signal-side analyst) reaches for this when picking a radio, scoping site survey results, or correlating a captured spectrum to the…
A pointer set for the operator working radio targets, WiFi, Bluetooth Low Energy, HID, Ethernet, and SDR. Each entry is a free, public project the operator drops into a kit when the engagement involves wireless.
Wireshark is the operator’s GUI packet capture and protocol analyzer. Display filters narrow a capture down to the bytes that matter, by host, port, protocol, MAC, HTTP attribute, or 802.11 frame type. The table…
Reference of current heads of state and heads of government for UN member states (current as of 2026; verify against the live sources at the end, positions change, sometimes weekly).