SUMMARY.md

Table of contents

• Welcome
• Source Zero Con References

1. Reconnaissance/ OSINT

• Information gathering
• OSINT tools
• Search Engine OSINT
• Sock puppets

2. Scanning

• Host discovery
• Port Scanning with Nmap
• Nmap Scripting Engine

3. Enumeration

• 21 - FTP
• 22 - SSH
• 25 - SMTP
• 53 - DNS
• 80/443 - HTTP(s)
• 111 - NFS
• 135 - RPC
• 139/445 - NetBIOS/SMB
• 161 (UDP) - SNMP
• Wordpress
• Finger (Solaris)
• Active Directory

4. Exploitation

• Public exploits
• Web application attacks
  • Command injection
  • Cross site scripting
  • Directory traversal
  • File inclusion
  • SQL injection
• Password attacks
• Buffer overflows
• Active Directory
• Metasploit

5. Maintaining access

• Upgrading simple shells
• Reverse shells
• MSFvenom
• File transfers
• Linux privilege escalation
• Windows privilege escalation
• Tunneling/Port Forwarding

6. Miscellaneous

• Connections

7. Walkthroughs

• HTB - Blunder
• HTB - Haircut
• THM -HackPark