> For the complete documentation index, see [llms.txt](https://wiki.iredteam.cn/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://wiki.iredteam.cn/post-infiltration-attack-phase.md).

# 后渗透攻击阶段

- [AV探测](https://wiki.iredteam.cn/post-infiltration-attack-phase/av.md)
- [免杀](https://wiki.iredteam.cn/post-infiltration-attack-phase/free-to-kill.md)
- [PowerShell混淆](https://wiki.iredteam.cn/post-infiltration-attack-phase/free-to-kill/powershell-hun-xiao.md)
- [Shellcode混淆](https://wiki.iredteam.cn/post-infiltration-attack-phase/free-to-kill/shellcode-hun-xiao.md)
- [免杀技巧](https://wiki.iredteam.cn/post-infiltration-attack-phase/free-to-kill/mian-sha-ji-qiao.md)
- [免杀综合](https://wiki.iredteam.cn/post-infiltration-attack-phase/free-to-kill/mian-sha-zong-he.md)
- [权限提升](https://wiki.iredteam.cn/post-infiltration-attack-phase/elevated-privileges.md)
- [提权辅助](https://wiki.iredteam.cn/post-infiltration-attack-phase/elevated-privileges/ti-quan-fu-zhu.md)
- [Bypass AV](https://wiki.iredteam.cn/post-infiltration-attack-phase/elevated-privileges/bypass-av.md)
- [Linux提权](https://wiki.iredteam.cn/post-infiltration-attack-phase/elevated-privileges/linux-ti-quan.md)
- [Windows提权](https://wiki.iredteam.cn/post-infiltration-attack-phase/elevated-privileges/windows-ti-quan.md)
- [第三方提权](https://wiki.iredteam.cn/post-infiltration-attack-phase/elevated-privileges/di-san-fang-ti-quan.md)
- [单域信息收集](https://wiki.iredteam.cn/post-infiltration-attack-phase/single-domain-information-collection.md)
- [密码抓取](https://wiki.iredteam.cn/post-infiltration-attack-phase/single-domain-information-collection/hashdump.md): 先引用一下哈，有时间会自己写出来
- [C2上线&&反弹Shell](https://wiki.iredteam.cn/post-infiltration-attack-phase/rebound-shell.md)
- [C2上线姿势合集](https://wiki.iredteam.cn/post-infiltration-attack-phase/rebound-shell/c2-shang-xian-zi-shi-he-ji.md)
- [反弹shell的总结](https://wiki.iredteam.cn/post-infiltration-attack-phase/rebound-shell/fan-tan-shell-de-zong-jie.md): 更多请看工具篇--->代理工具&&国外
- [持久化控制](https://wiki.iredteam.cn/post-infiltration-attack-phase/persistence-control.md)
- [DLL Proxying for Persistence](https://wiki.iredteam.cn/post-infiltration-attack-phase/persistence-control/dll-hijacked.md)
- [工具篇](https://wiki.iredteam.cn/post-infiltration-attack-phase/tools.md)
- [代理工具](https://wiki.iredteam.cn/post-infiltration-attack-phase/tools/proxy-tool.md)
- [国内](https://wiki.iredteam.cn/post-infiltration-attack-phase/tools/domestic-tool.md)
- [国外](https://wiki.iredteam.cn/post-infiltration-attack-phase/tools/foreign-tool.md)
- [Cobalt Strike](https://wiki.iredteam.cn/post-infiltration-attack-phase/tools/foreign-tool/cobalt-strike.md)
- [dnscat2](https://wiki.iredteam.cn/post-infiltration-attack-phase/tools/foreign-tool/dnscat2.md)
- [Merlin](https://wiki.iredteam.cn/post-infiltration-attack-phase/tools/foreign-tool/merlin.md)
- [Metasploit](https://wiki.iredteam.cn/post-infiltration-attack-phase/tools/foreign-tool/metasploit.md): 来源自https://www.cnblogs.com/LyShark/p/12189163.html
- [ngrok内网穿透](https://wiki.iredteam.cn/post-infiltration-attack-phase/tools/foreign-tool/ngrok-nei-wang-chuan-tou.md)
- [Nishang](https://wiki.iredteam.cn/post-infiltration-attack-phase/tools/foreign-tool/nishang.md)
- [p0wnedShell](https://wiki.iredteam.cn/post-infiltration-attack-phase/tools/foreign-tool/p0wnedshell.md)
- [PoshC2](https://wiki.iredteam.cn/post-infiltration-attack-phase/tools/foreign-tool/poshc2.md)
- [PowerShell Empire](https://wiki.iredteam.cn/post-infiltration-attack-phase/tools/foreign-tool/powershell-empire.md)
- [Pupy Shell](https://wiki.iredteam.cn/post-infiltration-attack-phase/tools/foreign-tool/pupy-shell.md)