Main Page

BOOK_GHANIM

Welcome to Book Ghanim - A collection of cybersecurity notes, write-ups, programming guides, and homelab documentation.

This website is created by Alaa Ghanim. I'm currently working as a red team operator and this website is mainly used for documenting my cyber security journey. There is so much to learn and keep track of, so it's kind of a library where I add everything new I learn and use it as a reference point.

For more, see the About page.

Note: Just migrated away from wordpress, so there might be some broken changes that I might not have adressed yet.

Handbooks

Handbook	Description
Handbook I - Basic	Pentesting fundamentals - enumeration, services, shells, privilege escalation, tools
Handbook II - Advanced	Advanced techniques and methodologies
Handbook III - Cloud	Cloud security notes
Handbook IV - RedTeam	Red team operations and techniques
Handbook V - Maldev	Malware development notes and resources

Sections

Offensive Security

• Active Directory - Notes, Methodology, Cheatsheet
• AV Evasion 101
• Buffer Overflow - Notes and Cheatsheet
• Command and Control - C2 Framework
• Pivoting and Port Forwarding Guide
• OSEP Checklist

Write-ups

See all write-ups or browse by platform:

• HackTheBox Write-ups
• TryHackMe Write-ups

Learning Path (TryHackMe Course Notes)

See Learning Path for the full ordered list.

Programming

• C# - Basics and Examples
• Python - Notes and Examples

HomeLab

• Setting Up a Detection Lab
• NGINX SSL Reverse Proxy
• Snort3 + ELK Stack
• Homelab Cheatsheet
• All HomeLab guides

Recently Created Pages

1. Programming/How To Post data to Elasticsearch
2. Programming/Use SQLite in Csharp
3. Extract BitLocker VMK from TPM
4. Offensive Security/Extract BitLocker VMK from TPM
5. Toolbox

Recently Changed

{Link:

List of abbreviations:

N

This edit created a new page (also see list of new pages)

m

This is a minor edit

b

This edit was performed by a bot

(±123)

The page size changed by this number of bytes

16 March 2026

			11:39		Handbook II - Advanced 7 changes history +3,074 [Administrator (7×)]
					11:39 (cur | prev) +98 Administrator talk contribs (→AppLocker bypass using Aspnet_Compiler.exe)
					11:37 (cur | prev) +1,410 Administrator talk contribs (→AppLocker bypass using Aspnet_Compiler.exe)
					11:31 (cur | prev) +333 Administrator talk contribs (→AppLocker bypass using Aspnet_Compiler.exe)
					11:28 (cur | prev) +384 Administrator talk contribs (→AppLocker bypass using Aspnet_Compiler.exe)
					11:27 (cur | prev) +314 Administrator talk contribs (→AppLocker bypass using Aspnet_Compiler.exe)
					11:26 (cur | prev) +191 Administrator talk contribs (→AppLocker bypass using Aspnet_Compiler.exe)
					11:22 (cur | prev) +344 Administrator talk contribs (→AppLocker bypass using Aspnet_Compiler.exe)