Main Page

BOOK_GHANIM

Welcome to Book Ghanim - A collection of cybersecurity notes, write-ups, programming guides, and homelab documentation.

This website is created by Alaa Ghanim. I'm currently working as a red team operator and this website is mainly used for documenting my cyber security journey. There is so much to learn and keep track of, so it's kind of a library where I add everything new I learn and use it as a reference point.

For more, see the About page.

Note: Just migrated away from wordpress, so there might be some broken changes that I might not have adressed yet.

Handbooks

Handbook	Description
Handbook I - Basic	Pentesting fundamentals - enumeration, services, shells, privilege escalation, tools
Handbook II - Advanced	Advanced techniques and methodologies
Handbook III - Cloud	Cloud security notes
Handbook IV - RedTeam	Red team operations and techniques
Handbook V - Maldev	Malware development notes and resources

Sections

Offensive Security

• Active Directory - Notes, Methodology, Cheatsheet
• AV Evasion 101
• Buffer Overflow - Notes and Cheatsheet
• Command and Control - C2 Framework
• Pivoting and Port Forwarding Guide
• OSEP Checklist

Write-ups

See all write-ups or browse by platform:

• HackTheBox Write-ups
• TryHackMe Write-ups

Learning Path (TryHackMe Course Notes)

See Learning Path for the full ordered list.

Programming

• C# - Basics and Examples
• Python - Notes and Examples

HomeLab

• Setting Up a Detection Lab
• NGINX SSL Reverse Proxy
• Snort3 + ELK Stack
• Homelab Cheatsheet
• All HomeLab guides

Recently Created Pages

1. Windows Security Internals
2. Programming/How To Post data to Elasticsearch
3. Programming/Use SQLite in Csharp
4. Extract BitLocker VMK from TPM
5. Offensive Security/Extract BitLocker VMK from TPM

Recently Changed

{Link:

List of abbreviations:

N

This edit created a new page (also see list of new pages)

m

This is a minor edit

b

This edit was performed by a bot

(±123)

The page size changed by this number of bytes

22 September 2026

N    19:16

Windows Security Internals diffhist +28,618 Administrator talk contribs (Created page with "= Windows Security Internals – Reference Notes = I'm reading the book Windows Security Internals by James Forshaw. Beside the reading I've also taken phyiscal notes, and then used AI to organize my notes before posting them here. The intended use-case is for qucikly reading up on a subject or a topic. It is not intended to replace the book for in-depth information about a topic/subject. __TOC__ == Chapter 1: The Windows Kernel Executive == === Overview === The ''...")