Home
Notes
CTF Writeups
Blog
About

Notes Explorer

1. eJPT

1. Assessment Methodologies

Active & Passive Recon

MetaSploit

Services

HTTP (80)

Apache Tomcat

Directory Listing

HTTP

php

05-Microsoft IIS (80,443)

06-DNS (53)

07-NetBIOS (137,138,139)

Shells

Tools

Brute Force

Hashcat

John The Ripper

Directory bruteforce

Dirb

GoBuster

wfuzz

nmap

Scan Types

PrivEsc Tools

To Exploit WebDAV

WordLists

2. Host Exploitation

AV Evasion

AV Evasion Techniques

Shellter

Exploits

Compiling Exploits

Exploitation

Linux

Exploits & Vulnerability

CVE-2014-6271 (ShellShock) Bash

Linux

Linux Exploit Suggester

Linux Password Hashes

Misplaced Passwords

Windows

Credential Dumping

Kiwi

MimiKatz

NTLM

Unattended Installation

Exploits & Vulnerability

CVE-2017-0144 (EternalBlue) SMB

CVE-2019-0708 (BlueKeep) RDP

Pass-The-Hash

SMB PsExec

Access Tokens

Alternate Data Streams

Persistence

Windows

Windows Exploits Suggester

Windows Services 🪟

2. Host Exploitation

3. Network PenTesting

SMB Relay Attack

4. Post Exploitation

1. Linux

Linux Persistence

Persistence via Cronjobs

Persistence via SSH or backdoor user

Privilege Escalation

Dangerous SUID binaries

find

Shell permissions

Change root pass in shadow file

Cron Jobs

Dangerous SUID Binaries to Look For

LinEnum & LinPEAS

PrivEsc Linux Cheat Sheet

Vulnerabilities

Enumerating LINUX Information

Linux Post-Exploitation Modules

Tmux

2. Windows

Privilege Escalation

!ntro Win PrivEsc

PrivEscCheck

UAC

2. Windows

Enumerating WINDOWS information

JAWS

KeyLogging

Windows Post-Exploitation Modules

3. Pivoting

Port Forwarding

What is Pivoting

Cleaning artifacts

Linux

Clear bash history

Windows

Clear Windows Event Log

4. Post Exploitation

Transfer files to Windows & Linux Targets

5. Web Pentesting

HTTP Request & Response

curl

HTTP Request Methods

HTTP Response Component

Glossary

ZAP

Exam Notes

2. SOC L1

4n6

Cheatsheets

Malware Analysis

KAPE

Brim

Email Analysis

Email Security

C2 over SMTP

DKIM (DomainKeys Identified Mail)

DMARC (Domain-Based Message Authentication Reporting and Conformance)

S-MIME (Secure-Multipurpose Internet Mail Extensions)

SPF (Sender Policy Framework)

Phishing Prevention

Phishing Prevention Intro

Social Engineering

Email Phishing Tools

Phishing🎣

Email Body Analysis

Email Header Analysis Tools

EZTools

Incidents Playbooks

1- Ransomware Playbook

Snort

TShark

TShark Advanced Filtering

Wireshark

3- HTTP-S & DNS Analysis

4- Nmap Scans

5- ARP Filters

6- DHCP Filters

7- NetBIOS & Kerberos

8- ICMP Filters

9- FTP Filters

WireShark

Brim vs Wireshark vs Zeek

Malware Traffic Analysis

tcpdump

3. eCIR

Glossary

Playbooks in SOC

Incident Handling vs Incident Response

HTB machines

Soulmate

Notes
1. eJPT
2. Host Exploitation
Windows
Windows Exploits Suggester

MSF Module:

post/multi/recon/local_exploit_suggester