19 Apr 2024 - 15:12

# Passive Recon

Certificates

# Network

Port Scan

# Service Recon

DNS
FTP
GIT Scan
RDP
Web Scan
SMB
SSH
Wordpress

# Windows Ecosystem

w/ Creds
LPE/HOST
w/o Creds
Payload/Loot
Ressources

# C2 / TRANSMISSION

File Tansfer
Shells
Metasploit

# PIVOTING

Chisel
SSH Socks Proxy

# WEB Generic

HTTP Parameter Pollution
HTML TO PDF
Json Web Token
LFI/RFI
SQLi
Jinja SSTI
XSS (Cross-Site Scripting)

# Linux 🐧

Enum
SUID
SUDO
Vulns

# Post Exploit / Loot

🐧 SSH Key Persistence
Crack Password
Kerberoasting

# Tips

AWS Products
AV/EDR/Isolation
Docker
Forensic
JavaScript
- Deobfuscator
🐧 LXC/LXD
MySQL
PowerShell
Tomcat
Wordlist

# Exploit (Misc)

SMB MS17-010
Splunk
AD ZeroLogon

# RESSOURCES

Offline Pentest Preps

JavaScript
View page source

JavaScript

Deobfuscator

https://beautifier.io/

Previous Next

© Copyright ERROR - DOCUMENT IS NOT LOADED PROPERLY.

Built with Sphinx using a theme provided by Read the Docs.