m.manikandan

window-persistence-Privilege-Escalation. A complete hands-on reference of 67 Windows persistence techniques used by real-world APT groups. Each technique includes MITRE ATT&CK TTP mapping, known threat actor attribution, attack commands, verification steps, and cleanup — organized from No-Admin to Admin level. Built for red teamers, malware analysts, and cybersecurity learners.

PE-FORMAT-AND-MALWARE-ANALYSIS. Hands-on PE format internals lab — headers, sections, data directories, TLS, AoEP, packer detection & UPX unpacking, payload injection (.text/.rsrc/.data/XOR/Base64), and packed malware analysis using pestudio, pe-bear, malcat, x64dbg & more.

hta-malware-and-js-ransomware. A comprehensive guide to mshta.exe abuse. Explores its use as a Living Off the Land Binary (LOLBin), basic HTA structure, fileless execution techniques, and common attack vectors including Metasploit payloads and obfuscation

VBA-MALWARE-DEV-AND-ANALYSIS-TOOL. Resources, scripts, and notes from hands-on VBA macro analysis, malware analysis (Office files), C2 simulation, and cybersecurity research. Covers static & dynamic techniques, formula injection, and AMSI/PowerShell logging. Includes tools like base64dump, pecheck, and reference PDFs for red team & blue team learning.

frogman-tool. WMI Frogman is a PowerShell-based Windows security audit tool with 600+ WMI/CIM commands covering system info, users, services, processes, network, AD recon, browser artifacts, CVE matching, and MITRE ATT&CK mapping. Exports to HTML, PDF, JSON, CSV, and YAML.