Skip to content

n0m4d50u1/Pentesting-Guide

BranchesTags
 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

1,895 Commits
styles
styles
 
 
.gitignore
.gitignore
 
 
README.md
README.md
 
 
SUMMARY.md
SUMMARY.md
 
 
active_information_gathering.md
active_information_gathering.md
 
 
arp-spoofing.md
arp-spoofing.md
 
 
attacking_the_user.md
attacking_the_user.md
 
 
automated_vulnerability_scanners.md
automated_vulnerability_scanners.md
 
 
bash-scripting.md
bash-scripting.md
 
 
basics.md
basics.md
 
 
basics_of_linux.md
basics_of_linux.md
 
 
basics_of_windows.md
basics_of_windows.md
 
 
binary_exploitation.md
binary_exploitation.md
 
 
binary_exploitation2.md
binary_exploitation2.md
 
 
broken_authentication_or_session_management.md
broken_authentication_or_session_management.md
 
 
browser_vulnerabilities.md
browser_vulnerabilities.md
 
 
buffer_overflow_bof.md
buffer_overflow_bof.md
 
 
bypass_image_upload.md
bypass_image_upload.md
 
 
bypassing_antivirus.md
bypassing_antivirus.md
 
 
clean_up.md
clean_up.md
 
 
clickjacking.md
clickjacking.md
 
 
cmd.md
cmd.md
 
 
commands.md
commands.md
 
 
common_web-services.md
common_web-services.md
 
 
compiling-windows-exploits.md
compiling-windows-exploits.md
 
 
connections.md
connections.md
 
 
create_shellcode.md
create_shellcode.md
 
 
creating_malicious_files.md
creating_malicious_files.md
 
 
cross-site-scripting.md
cross-site-scripting.md
 
 
cross_site_request_forgery.md
cross_site_request_forgery.md
 
 
dGaQO6Y.png
dGaQO6Y.png
 
 
database.md
database.md
 
 
default_layout_apache_on_different_versiont.md
default_layout_apache_on_different_versiont.md
 
 
dictionary_attacks.md
dictionary_attacks.md
 
 
directory-traversal-attack.md
directory-traversal-attack.md
 
 
dns-spoofing.md
dns-spoofing.md
 
 
dns_basics.md
dns_basics.md
 
 
dns_zone_transfer_attack.md
dns_zone_transfer_attack.md
 
 
dom-based-xss.md
dom-based-xss.md
 
 
editing-exploits.md
editing-exploits.md
 
 
email_harvesting.md
email_harvesting.md
 
 
escaping_restricted_shell.md
escaping_restricted_shell.md
 
 
example_of_company_architecture.md
example_of_company_architecture.md
 
 
examplesXSS.md
examplesXSS.md
 
 
exploit-examples_2.md
exploit-examples_2.md
 
 
exploit_examples_and_tutorials.md
exploit_examples_and_tutorials.md
 
 
exploiting.md
exploiting.md
 
 
exploits.md
exploits.md
 
 
exposed_version_control.md
exposed_version_control.md
 
 
failure-to-restrict-url-access.md
failure-to-restrict-url-access.md
 
 
find_subdomains.md
find_subdomains.md
 
 
finding_subdomains.md
finding_subdomains.md
 
 
firewalls.md
firewalls.md
 
 
fss.jpg
fss.jpg
 
 
function1-stackframe.png
function1-stackframe.png
 
 
function1.png
function1.png
 
 
general_tips.md
general_tips.md
 
 
generate_custom_wordlist.md
generate_custom_wordlist.md
 
 
getting_meterpreter_shell.md
getting_meterpreter_shell.md
 
 
google_hacking.md
google_hacking.md
 
 
hashcat.md
hashcat.md
 
 
host-header-attack.md
host-header-attack.md
 
 
html-injection.md
html-injection.md
 
 
identify_hash_and_crack_it.md
identify_hash_and_crack_it.md
 
 
identifying-technology-stack.md
identifying-technology-stack.md
 
 
immunity_debugger.md
immunity_debugger.md
 
 
insecure-direct-object-reference-idor.md
insecure-direct-object-reference-idor.md
 
 
java_applet.md
java_applet.md
 
 
lead_to_compromise.md
lead_to_compromise.md
 
 
linux.md
linux.md
 
 
list_of_common_ports.md
list_of_common_ports.md
 
 
littearature.md
littearature.md
 
 
local_file_inclusion.md
local_file_inclusion.md
 
 
loot.md
loot.md
 
 
loot_windows_-_for_credentials_and_other_stuff.md
loot_windows_-_for_credentials_and_other_stuff.md
 
 
main-stackframe.png
main-stackframe.png
 
 
metasploit.md
metasploit.md
 
 
meterpreter.md
meterpreter.md
 
 
modules.md
modules.md
 
 
msfvenom---create-shellcode.md
msfvenom---create-shellcode.md
 
 
netcat.md
netcat.md
 
 
network_traffic.md
network_traffic.md
 
 
networking.md
networking.md
 
 
nosql-injections.md
nosql-injections.md
 
 
online_password_cracking.md
online_password_cracking.md
 
 
oscp.md
oscp.md
 
 
pass_the_hash_-_reusing_hashes.md
pass_the_hash_-_reusing_hashes.md
 
 
passive_information_gatherig.md
passive_information_gatherig.md
 
 
password-cracking.md
password-cracking.md
 
 
payloads.md
payloads.md
 
 
persistence.md
persistence.md
 
 
physical_access_to_machine.md
physical_access_to_machine.md
 
 
pivoting.md
pivoting.md
 
 
port_forwarding_and_tunneling.md
port_forwarding_and_tunneling.md
 
 
port_knocking.md
port_knocking.md
 
 
port_scanning.md
port_scanning.md
 
 
post_exploitation.md
post_exploitation.md
 
 
powershell.md
powershell.md
 
 
powershell_scripting2.md
powershell_scripting2.md
 
 
privilege-escalation-powershell.md
privilege-escalation-powershell.md
 
 

Repository files navigation

IT-Security

My notepad about stuff related to IT-security, and specifically penetration testing. Stuff I have come across that I don't feel like googeling again.

I have used this book to try to write down how some things work, but at the same time I want to use it as a reference book to find commands and things I just can't remember. Therefore I have tried to create a TLDR section in the beginning of some chapters where I have copy-paste ready commands that are useful. And if you want to know more you can continue to read the rest of the chapter. This is my way of making the book a hybrid between the Red Team Field Manual and a standard introduction book to pentesting.

Also, this book is just a collection of stuff that is available on the interwebz. I am just a simple collector. I have tried to include a reference section to show where I found the technique. This book is my way of trying to give something back to the infosec community and I hope it can be useful to someone.

You can read this book on https://pha5matis.gitbooks.io/netsec/content/. If you feel like contributing, or just forking it, you can do that from its github repo here: https://github.com/pha5matis/Pentesting-Guide. If you feel like this is a good start, but you want to add and remove things and just make it yours you can just fork it and do whatever you want with it.

Find practical examples

If you read about a vulnerability that you want to know more about I can really recommend searching for in on HackerOne via google. It is a good way to find real life examples of vulnerabilities.

Here is an example of such a search:

site:hackerone.com sql-injection

Disclaimers

Sometimes the line isn't very clear between the chapters. Some actions might be considered part of the vulnerability analysis-phase, but it could also but considered part of the recon-phase. It is what it is.

Use at own risk.

About

No description, website, or topics provided.

Resources

Readme
Activity

Stars

0 stars

Watchers

0 watching

Forks

0 forks
Report repository

Releases

No releases published

Packages

No packages published

Languages

  • CSS 100.0%