HackTricks
HackTricks
HackTricks
Pentesting Methodology
Exfiltration
Tunneling and Port Forwarding
Brute Force - CheatSheet
Search Exploits
Basic Python
References
Shells
SHELLS
Shells - Linux
Shells - Windows
MSFVenom - CheatSheet
Physical attacks
Physical Attacks
Linux/Unix
Checklist - Linux Privilege Escalation
Linux Privilege Escalation
Useful Linux Commands
Linux Environment Variables
Windows
Checklist - Local Windows Privilege Escalation
Windows Local Privilege Escalation
Active Directory Methodology
NTLM
Stealing Credentials
Authentication, Credentials, Token privileges, UAC and EFS
Basic CMD for Pentesters
Basic PowerShell for Pentesters
AV Bypass
Escaping from GUI applications
Mobile Apps Pentesting
Android Applications Pentesting
Pentesting
Pentesting Network
Pentesting JDWP - Java Debug Wire Protocol
21 - Pentesting FTP
22 - Pentesting SSH/SFTP
23 - Pentesting Telnet
25,465,587 - Pentesting SMTP/s
43 - Pentesting WHOIS
53 - Pentesting DNS
69/UDP TFTP
79 - Pentesting Finger
80,443 - Pentesting Web Methodology
88tcp/udp - Pentesting Kerberos
110,995 - Pentesting POP
111/TCP/UDP - Pentesting Portmapper
113 - Pentesting Ident
123/udp - Pentesting NTP
135, 593 - Penstesting WRPC
139,445 - Pentesting SMB
143,993 - Pentesting IMAP
161,162,10161,10162/udp - Pentesting SNMP
194,6667,6660-7000 - Pentesting IRC
264 - Pentesting Check Point FireWall-1
389, 636, 3268, 3269 - Pentesting LDAP
500/udp - Pentesting IPsec/IKE VPN
502 - Pentesting Modbus
512 - Pentesting Rexec
513 - Pentesting Rlogin
514 - Pentesting Rsh
548 - Pentesting Apple Filing Protocol (AFP)
554,8554 - Pentesting RTSP
623/UDP - IPMI
873 - Pentesting Rsync
1098/1099 - Pentesting Java RMI
1433 - Pentesting MSSQL - Microsoft SQL Server
1521,1522-1529 - Pentesting Oracle TNS Listener
1723 - Pentesting PPTP
1883 - Pentesting MQTT (Mosquitto)
2049 - Pentesting NFS Service
2301,2381 - Pentesting Compaq/HP Insight Manager
3000 - GraphQL
3260 - Pentesting ISCSI
3299 - Pentesting SAPRouter
3306 - Pentesting Mysql
3389 - Pentesting RDP
3632 - Pentesting distcc
5432,5433 - Pentesting Postgresql
5353/UDP Multicast DNS (mDNS)
5800,5801,5900,5901 - Pentesting VNC
5984 - Pentesting CouchDB
5985,5986 - Pentesting WinRM
6000 - Pentesting X11
6379 - Pentesting Redis
8009 - Pentesting Apache JServ Protocol (AJP)
9100 - Pentesting PJL
9160 - Pentesting Cassandra
10000 - Pentesting Network Data Management Protocol (ndmp)
11211 - Pentesting Memcache
27017,27018 - Pentesting MongoDB
44818 - Pentesting EthernetIP
47808/udp - Pentesting BACNet
50030,50060,50070,50075,50090 - Pentesting Hadoop
Automatic Scanning tools
Pentesting Web
2FA Bypass
Abusing hop-by-hop headers
Captcha Bypass
Clickjacking
Client Side Template Injection (CSTI)
Command Injection
Content Security Policy (CSP) Bypass
Cookies Hacking
CORS - Misconfigurations & Bypass
CRLF (%0D%0A) Injection
CSRF (Cross Site Request Forgery)
Dangling Markup - HTML scriptless injection
Deserialization
Email Header Injection
File Inclusion
File Upload
IDOR
JWT Vulnerabilities (Json Web Tokens)
NoSQL injection
LDAP Injection
Open Redirect
Race Condition
SQL Injection
SSRF (Server Side Request Forgery)
SSTI (Server Side Template Injection)
Domain/Subdomain takeover
Unicode Normalization vulnerability
Web Tool - WFuzz
XPATH injection
XSLT Server Side Injection (Extensible Stylesheet Languaje Transformations)
XXE - XEE - XML External Entity
XSS (Cross Site Scripting)
XSSI (Cross-Site Script Inclusion)
XS-Search
Exploiting
Linux Exploiting (Basic) (SPA)
Exploiting Tools
Windows Exploiting (Basic Guide - OSCP lvl)
Reversing
Forensics
Malware Analysis
Memory dump analysis
Pcaps analysis
Volatility - Examples
Basic Forensics (ESP)
Crypto
Electronic Code Book (ECB)
Cipher Block Chaining CBC-MAC
Padding Oracle
RC4 - Encrypt&Decrypt
Crypto CTFs Tricks
BACKDOORS
Merlin
Empire
Salseo
ICMPsh
Stego
Stego Tricks
Esoteric languages
TODO
More Tools
TO TAKE A LOOK
MISC
Pentesting DNS
Android Checklist
Cache Deception
HTTP Request Smuggling
Burp Suite
Other Web Tricks
Interesting HTTP
Arbitrary Emails - Hard Bounce Rate
Bug Bounties Methodology
Cloud security review
SHELLS
​
Shells - Linux
​
​
Shells - Windows
​
​
MSFVenom - CheatSheet
​
​
Previous
References
Next - Shells
Shells - Linux
Last updated
12 months ago
Contents
Shells - Linux
Shells - Windows
MSFVenom - CheatSheet
