OffensiveSecurity.
Notes, labs, and tools for practitioners — Windows internals, AD, maldev, and cloud.
Explore
01
Blog
Notes on Windows internals, Active Directory, offensive tooling, and everything in between.
02
Labs
Hands-on guided labs — set up, attack, and understand the full kill chain step by step.
03
Maldev
Malware development techniques — shellcode, loaders, evasion, and post-exploitation tooling.
04
Cloud
Cloud attack paths across AWS, Azure, and GCP — enumeration, privilege escalation, and lateral movement.
Open Source
Nightcrawler
A modern, open-source command & control framework built for red team operators and security researchers. Modular by design, operator-first in practice — anyone can contribute.
- Async C2 communication model
- Modular implant & listener system
- HTTP/S, DNS, and SMB channels
- OPSEC-aware by design
- Community-driven, open to contributions
$ nightcrawler server start
[*] Nightcrawler C2 — listening
[+] HTTPS :443 DNS :53 SMB online
nc> agents
ID HOSTNAME OS LAST
01 DC01 Win2025 2s
02 WS01 Win2025 7s
nc> interact 01
[*] Session opened → DC01
nc(DC01)> whoami
nt authority\system
nc(DC01)>