ForbiddenProgrammer/conti-pentester-guide-leak resource

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1104 stars · 260 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

An archive of leaked technical training manuals originally distributed to affiliates of the Conti ransomware gang, covering attack techniques like data exfiltration, domain takeover, and Cobalt Strike usage. It serves as educational material for pentesters and a source of detection knowledge for defenders.

Use cases

• learn how ransomware operators conduct intrusions
• study real-world pentesting tradecraft from leaked manuals
• build detection rules and IOCs for Conti-style attacks
• improve red team skills with adversary techniques
• understand post-exploitation tactics like Kerberoasting and credential dumping
• research threat actor tooling such as Cobalt Strike and Rclone

When to choose

• you want primary-source insight into ransomware operator playbooks
• you are a defender building detections for Conti TTPs
• you are a pentester studying adversary techniques for education

When to avoid

• you need a maintained tool or framework rather than static documents
• you cannot read Russian-language materials
• you need legally clean, licensed content for commercial use
• you are looking for step-by-step beginner pentesting tutorials in English

Facets

learning-resource · maturity maintenance

penetration-testing security osint security penetration-testing tutorials cross-platform conti-ransomware leaked-documents red-teaming cobalt-strike threat-intelligence ransomware-detection ioc russian-language educational-archive cybercrime-research

Member repositories

For agents

markdown · JSON · MCP: product_card(name="ForbiddenProgrammer/conti-pentester-guide-leak")