📚 eJPT Certification Study Notes

Organized study notes for the eLearnSecurity Junior Penetration Tester (eJPT) certification, structured for use with Obsidian but readable in any Markdown viewer.

---

🗂️ Contents

#	Course	Topics
2	Footprinting & Scanning	fping, Nmap, Host Discovery, Port Scanning, IDS Evasion
3	Enumeration	FTP, SMB, HTTP, MySQL, SSH, SMTP Enumeration via Metasploit
4	Vulnerability Assessment	EternalBlue, BlueKeep, Shellshock, Pass-The-Hash, WMAP
5	Windows Attacks	PsExec, RDP, WinRM, UAC Bypass, Token Impersonation, Mimikatz
5	Linux Attacks	FTP/SSH/Samba Exploitation, Kernel Exploits, SUID, Cron Jobs
6	Network-Based Attacks	SMB Relay, SNMP Enumeration, MITM, Pivoting, Proxychains
7	Metasploit Framework	Msfvenom, Payloads, Encoding, Resource Scripts, Post Exploitation
8	Exploitation	Banner Grabbing, SearchSploit, Bind/Reverse Shells, Black Box Pentest
9	Post-Exploitation	Enumeration, Persistence, Pivoting, Hash Cracking, Clearing Tracks

---

🚀 How To Use

Option 1: Obsidian (Recommended)

git clone https://github.com/ziadmahmod/eJPT-Notes

1. Open Obsidian
2. Click "Open folder as vault"
3. Select the cloned folder
4. All internal links between notes will work automatically ✅

Option 2: Download ZIP

1. Click the green "Code" button above
2. Select "Download ZIP"
3. Extract and open in Obsidian or any Markdown editor

---

📝 Notes Structure

Each note follows the same format:

• Overview — topic map at the top
• Commands — in code blocks, ready to copy
• Tables — for quick flag/option reference
• Callouts — > [!tip], > [!warning], > [!important] for key points
• Quick Reference — most important commands summarized at the bottom
• Internal Links — [[Course Name]] connecting related notes

---

🛠️ Tools & Topics Covered

Nmap · Metasploit · Msfvenom · Hydra · Mimikatz · CrackMapExec
SearchSploit · Netcat · Wireshark · John the Ripper · Hashcat
SMB · FTP · SSH · RDP · WinRM · SMTP · MySQL · SNMP · HTTP
EternalBlue · BlueKeep · Shellshock · Pass-The-Hash · WebDAV
Pivoting · Port Forwarding · Proxychains · ARP Spoofing

---

⚠️ Disclaimer

These notes are intended for educational purposes only and for use in legal, authorized penetration testing environments such as labs and CTF challenges. The author is not responsible for any misuse of the information provided.

---

👤 Author

Ziad Mahmoud

• GitHub: @ziadmahmod

---

_{⭐ If these notes helped you, consider starring the repo!}