daemon-sec-cheatsheet

credits.astro (12352B)

---

 ---
 import Base from '../layouts/Base.astro';
 import { payloadsByTopic } from '../lib/payloads';
 import { internalBySection, internalRootPages } from '../lib/internal';
 import { hackTricksBySection } from '../lib/hacktricks';
 import { url } from '../lib/url';
 import iredSource from '../data/ired-source.json';
 
 const groups = await payloadsByTopic();
 const totalPages = groups.reduce((n, g) => n + g.count, 0);
 const sha = groups[0]?.readme?.data.sha ?? '';
 
 const sections = await internalBySection();
 const internalPages =
   sections.reduce((n, g) => n + g.count, 0) + (await internalRootPages()).length;
 /* Not every section ships an index upstream, so fall back to a leaf page. */
 const internalSha = sections[0]?.index?.data.sha ?? sections[0]?.items[0]?.data.sha ?? '';
 
 const hackTricksSections = await hackTricksBySection();
 const hackTricksPages = hackTricksSections.reduce((n, section) => n + section.count, 0);
 const hackTricksSha = hackTricksSections[0]?.items[0]?.data.sha ?? '';
 
 const LICENSE = `MIT License
 
 Copyright (c) 2019 Swissky
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.`;
 ---
 <Base title="Credits & Licenses — DÆMON//SEC" description="Attribution and licensing for third-party content mirrored into DÆMON//SEC, including HackTricks, PayloadsAllTheThings, and InternalAllTheThings.">
   <div class="wrap prose" style="max-width:56rem;margin-top:2.5rem;">
     <p class="eyebrow" style="color: var(--iris)">// Credits</p>
     <h1>Credits &amp; Licenses</h1>
     <p>
       DÆMON//SEC stands on the shoulders of the open-source security community.
       This page attributes third-party content that has been mirrored into the site.
     </p>
 
     <h2>PayloadsAllTheThings</h2>
     <p>
       The entire <a href={url('payloads')}>Payloads</a> section — <strong>{groups.length} topics</strong>,
       <strong>{totalPages} pages</strong> — is a verbatim mirror of
       <a href="https://github.com/swisskyrepo/PayloadsAllTheThings" target="_blank" rel="noopener">PayloadsAllTheThings</a>,
       created and maintained by <strong>Swissky</strong> (<a href="https://github.com/swisskyrepo" target="_blank" rel="noopener">@swisskyrepo</a>)
       and hundreds of contributors. It is one of the most valuable payload and bypass references in the field,
       and every page here links back to its upstream source.
     </p>
     <div class="slab corners provenance">
       <p class="micro provenance__label">// provenance · payloadsallthethings</p>
       <ul>
       <li><strong>Upstream:</strong> <a href="https://github.com/swisskyrepo/PayloadsAllTheThings" target="_blank" rel="noopener">github.com/swisskyrepo/PayloadsAllTheThings</a></li>
       <li><strong>License:</strong> MIT</li>
       {sha && <li><strong>Mirrored at commit:</strong> <code>{sha}</code></li>}
       <li><strong>Fidelity:</strong> markdown is mirrored on-site; images and raw payload files (wordlists, scripts) load from, or link to, the upstream repository.</li>
       </ul>
     </div>
     <p class="muted">
       This mirror is provided for convenience and offline-friendly search. The upstream repository remains the
       canonical source — please star it, contribute back, and consider sponsoring the maintainer.
     </p>
 
     <h3>MIT License</h3>
     <figure class="code-pane plate corners" style="margin:1.2rem 0;">
       <figcaption class="code-pane__bar">
         <span class="code-pane__lang">LICENSE · PayloadsAllTheThings</span>
       </figcaption>
       <pre style="overflow:auto;font-size:13px;line-height:1.7;color:#e0def4;"><code>{LICENSE}</code></pre>
       <div class="scanlines" aria-hidden="true"></div>
     </figure>
 
     <h2>InternalAllTheThings</h2>
     <p>
       The entire <a href={url('internal')}>Internal</a> section — <strong>{sections.length} sections</strong>,
       <strong>{internalPages} pages</strong> — is a verbatim mirror of
       <a href="https://github.com/swisskyrepo/InternalAllTheThings" target="_blank" rel="noopener">InternalAllTheThings</a>,
       also created and maintained by <strong>Swissky</strong> (<a href="https://github.com/swisskyrepo" target="_blank" rel="noopener">@swisskyrepo</a>)
       and its contributors. It is the home of the Active Directory, cloud and red-team material that
       PayloadsAllTheThings moved out of its own tree, and every page here links back to its upstream source.
     </p>
     <div class="slab corners provenance">
       <p class="micro provenance__label">// provenance · internalallthethings</p>
       <ul>
       <li><strong>Upstream:</strong> <a href="https://github.com/swisskyrepo/InternalAllTheThings" target="_blank" rel="noopener">github.com/swisskyrepo/InternalAllTheThings</a></li>
       <li><strong>License:</strong> the repository publishes no LICENSE file, so no licence is claimed or implied here. Copyright stays with Swissky and the project's contributors.</li>
       {internalSha && <li><strong>Mirrored at commit:</strong> <code>{internalSha}</code></li>}
       <li><strong>Fidelity:</strong> markdown is mirrored on-site; images and other assets load from, or link to, the upstream repository.</li>
       </ul>
     </div>
     <p class="muted">
       This mirror exists for search and offline-friendly reading, with attribution on every page. The upstream
       repository is the canonical source — please star it and contribute back. If the author would rather this
       mirror were changed or taken down, open an issue on the site repository and it will be honoured.
     </p>
 
     <h2>HackTricks</h2>
     <p>
       The <a href={url('hacktricks')}>HackTricks Library</a> contains <strong>{hackTricksPages} pages</strong>
       across <strong>{hackTricksSections.length} sections</strong>, adapted from
       <a href="https://github.com/HackTricks-wiki/hacktricks" target="_blank" rel="noopener">HackTricks</a>
       by <strong>Carlos Polop</strong> and its contributors. Every page links to the precise upstream file.
     </p>
     <div class="slab corners provenance">
       <p class="micro provenance__label">// provenance · hacktricks</p>
       <ul>
         <li><strong>Upstream:</strong> <a href="https://github.com/HackTricks-wiki/hacktricks" target="_blank" rel="noopener">github.com/HackTricks-wiki/hacktricks</a></li>
         <li><strong>Creator:</strong> Carlos Polop; additional copyright remains with the relevant upstream contributors and externally attributed authors.</li>
         <li><strong>License:</strong> <a href="https://creativecommons.org/licenses/by-nc/4.0/" target="_blank" rel="license noopener">Creative Commons Attribution-NonCommercial 4.0 International</a>.</li>
         {hackTricksSha && <li><strong>Imported at commit:</strong> <code>{hackTricksSha}</code></li>}
         <li><strong>Changes:</strong> this is an adapted mirror. GitBook wrappers and training banners were removed, frontmatter was added, and repository-relative links were rewritten for the local site or pinned upstream commit.</li>
         <li><strong>Use restriction:</strong> HackTricks-derived pages are provided for non-commercial use only. No endorsement by HackTricks or its contributors is implied.</li>
       </ul>
     </div>
     <p class="muted">
       The upstream repository remains canonical. Corrections should be contributed there whenever possible;
       this site can then regenerate its adapted copy from a newer commit.
     </p>
 
     <h2>ired.team</h2>
     <p>
       <a href="https://ired.team" target="_blank" rel="noopener">ired.team</a> — the red teaming notes of
       <strong>Mantvydas Baranauskas</strong> (<a href={iredSource.authorUrl} target="_blank" rel="noopener">@mantvydasb</a>) —
       is the reference behind sheets in Exploitation and DFIR. His write-ups on process injection and on
       Windows internals are some of the most careful hands-on documentation of those subjects anywhere.
     </p>
     <p>
       <strong>ired.team publishes no licence.</strong> That grants no right to copy it, so nothing from it is
       mirrored here. Sheets that draw on it are written from scratch for this site; commands, API sequences and
       technique facts are reproduced as facts; and the screenshots load from the upstream repository at a pinned
       commit rather than being copied onto this domain.
     </p>
     <div class="slab corners provenance">
       <p class="micro provenance__label">// provenance · ired.team</p>
       <ul>
         <li><strong>Upstream:</strong> <a href={`https://github.com/${iredSource.repo}`} target="_blank" rel="noopener">github.com/{iredSource.repo}</a></li>
         <li><strong>Author:</strong> {iredSource.author}. Per the upstream README, most techniques documented there were discovered by other researchers and he does not claim their ownership.</li>
         <li><strong>License:</strong> <strong>none published</strong> — no <code>LICENSE</code> file, the repository <code>license</code> field is <code>null</code>, and the licence API returns 404.</li>
         <li><strong>Pinned at commit:</strong> <code>{iredSource.sha}</code> (read {iredSource.fetched})</li>
         <li><strong>Fidelity:</strong> <em>not a mirror.</em> No upstream prose is reproduced. Sheet text is original; each sheet is marked <code>derived</code> and links the guide it draws on.</li>
         <li><strong>Images:</strong> screenshots remain the author's. They are hotlinked from the upstream repository at the commit above, credited individually in each caption, and are <strong>not</strong> redistributed from this site.</li>
         <li><strong>On request:</strong> if the author would prefer this material not be referenced here, it will be removed — open an issue on the site repository or contact the maintainer.</li>
       </ul>
     </div>
     <p class="muted">
       ired.team remains canonical and considerably deeper than any summary of it. Every sheet that draws on it
       links the original guide; read it there.
     </p>
 
     <h2>The DÆMON//SEC cheatsheets</h2>
     <p>
       The hand-curated <a href={url('')}>cheatsheet vault</a> is compiled from public tooling documentation and
       community knowledge, normalized and modernized for this site. Individual sheets credit their upstream source
       in frontmatter where applicable.
     </p>
 
     <h2>This site</h2>
     <p>
       Built with <a href="https://astro.build" target="_blank" rel="noopener">Astro</a> and
       <a href="https://pagefind.app" target="_blank" rel="noopener">Pagefind</a>, themed with
       <a href="https://rosepinetheme.com" target="_blank" rel="noopener">Rosé Pine</a>. Source on
       <a href="https://git.daemon-sec.xyz/daemon-sec-cheatsheet/" target="_blank" rel="noopener">git.daemon-sec.xyz</a>
       (browse it, or <code>git clone https://git.daemon-sec.xyz/daemon-sec-cheatsheet.git</code>).
     </p>
 
     <p class="muted" style="margin-top:2rem;border-top:1px solid var(--rule);padding-top:1rem;">
       For authorized testing, CTFs, and education only. Know your scope.
     </p>
   </div>
 </Base>
 
 <style>
   /* The provenance ledger for each mirror — upstream, licence, mirrored
      commit, fidelity — framed as a corner-bracketed slab with a mono micro
      label, the same furniture the callouts and code panes wear. */
   .provenance { padding: 1rem 1.2rem 1.2rem; margin: 1.2rem 0; }
   .provenance__label { color: var(--fg-faint); margin-bottom: 0.6rem; }
   .provenance ul { margin: 0; }
 </style>