> For the complete documentation index, see [llms.txt](https://www.redteam.cafe/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.redteam.cafe/red-team.md).

# Red Team

- [HTTPS C2 Done Right NGINX](https://www.redteam.cafe/red-team/https-c2-done-right-nginx.md)
- [Domain Front](https://www.redteam.cafe/red-team/domain-front.md)
- [Firebase Domain Front - Hiding C2 as App traffic](https://www.redteam.cafe/red-team/domain-front/firebase-domain-front-hiding-c2-as-app-traffic.md)
- [GoLang](https://www.redteam.cafe/red-team/golang.md)
- [Red Team: How to embed Golang tools in C#](https://www.redteam.cafe/red-team/golang/red-team-how-to-embed-golang-tools-in-c.md)
- [Red Team: Using SharpChisel to exfil internal network](https://www.redteam.cafe/red-team/golang/red-team-using-sharpchisel-to-exfil-internal-network.md)
- [Converting your GO bins to Shellcode and Using them in C#](https://www.redteam.cafe/red-team/golang/converting-your-go-bins-to-shellcode-and-using-them-in-c.md): How to convert binaries compiled in golang to shellcode
- [ShellCode Injection](https://www.redteam.cafe/red-team/shellcode-injection.md)
- [magic\_mz\_x86 and magic\_mz\_x64](https://www.redteam.cafe/red-team/shellcode-injection/magic_mz_x86-and-magic_mz_x64.md)
- [Process Hollowing DInvoke](https://www.redteam.cafe/red-team/shellcode-injection/process-hollowing-dinvoke.md)
- [Shellcode Formatter](https://www.redteam.cafe/red-team/shellcode-injection/shellcode-formatter.md)
- [DLL Sideloading](https://www.redteam.cafe/red-team/shellcode-injection/dll-sideloading.md): Not the perfect way, but the faster way
- [InMemory Shellcode Encryption and Decryption using SystemFunction033](https://www.redteam.cafe/red-team/shellcode-injection/inmemory-shellcode-encryption-and-decryption-using-systemfunction033.md): Shellcode encoding using SystemFunction033
- [PowerShell](https://www.redteam.cafe/red-team/powershell.md)
- [Enable Restricted Admin using powershell and use mimikatz for RDP](https://www.redteam.cafe/red-team/powershell/enable-restricted-admin-using-powershell-and-use-mimikatz-for-rdp.md)
- [Powershell Custom Runspace](https://www.redteam.cafe/red-team/powershell/powershell-custom-runspace.md)
- [Using Reflection for AMSI Bypass](https://www.redteam.cafe/red-team/powershell/using-reflection-for-amsi-bypass.md): Converting an already available AMSI Bypass to FULL in memory AMSI Bypass
- [Database](https://www.redteam.cafe/red-team/database.md)
- [Extract MSSQL Link Password](https://www.redteam.cafe/red-team/database/extract-mssql-link-password.md)
- [MSSQL Link Crawl - OpenQuery Quotes Calculator](https://www.redteam.cafe/red-team/database/mssql-link-crawl-openquery-quotes-calulator.md): MSSQL Link Crawls
- [DLL Sideloading](https://www.redteam.cafe/red-team/dll-sideloading.md)
- [DLL Koppeling](https://www.redteam.cafe/red-team/dll-sideloading/dll-koppeling.md): Short guide on How to use the Koppeling project
- [DLL Sideloading not by DLLMain](https://www.redteam.cafe/red-team/dll-sideloading/dll-sideloading-not-by-dllmain.md): Never run your payloads from the DLLMain
- [Walking with Docker](https://www.redteam.cafe/red-team/walking-with-docker.md)
- [Self-Hosting Havoc C2 / or any other C2  in Docker](https://www.redteam.cafe/red-team/walking-with-docker/self-hosting-havoc-c2-or-any-other-c2-in-docker.md): Running Havoc C2 server and client in Docker
- [Breach Attack Simulation - Starting With OpenBAS](https://www.redteam.cafe/red-team/breach-attack-simulation-starting-with-openbas.md): Caldera has been in market for years, I have never tried it. I saw OpenBAS on my recommended lists in Github so I thought I might give it a try
- [Update - OpenBAS to OPENAEV. Performing Adversary Emulation](https://www.redteam.cafe/red-team/update-openbas-to-openaev.-performing-adversary-emulation.md): OpenBAS changed its branding to OPENAEV. How to set it up and start working