mantvydasb/redteaming-tactics-and-techniques

This repository is a personal notebook of offensive security research, maintained by a security professional who goes by the handle spotheplanet. The notes document experiments with the kinds of techniques that penetration testers and red teamers use when assessing the security of computer systems in controlled, authorized lab environments. The same content is published as a website at ired.team. Red teaming is a practice where a group of security specialists tries to break into an organization's systems using the same methods a real attacker might use, so that defenders can find and fix weaknesses before a genuine threat actor does. The notes here cover areas like getting code to run on a target machine, injecting code into running processes, moving across a network, staying persistent after an initial foothold, and avoiding detection by security tools. The author is clear about the purpose: this is a learning resource built by doing hands-on experiments and documenting the results. Most of the techniques covered were discovered by other researchers in the security community, and the author tries to credit original sources throughout. The notes are not meant to be exhaustive or perfectly accurate, and the README itself warns readers to verify claims against other sources rather than treating anything here as definitive. The repository is aimed at people already working in security or studying for certifications like OSCP, a well-known hands-on penetration testing qualification. The content assumes familiarity with Windows internals, command-line tools, and concepts like process memory and system APIs. It is not an introduction to security for beginners, but rather a reference library of techniques with code examples and explanations of how each method works and what traces it leaves behind.