refabr1k's Pentest Notebook
  • refabr1k's Pentest Notebook
  • Steganography
  • Kali USB with persistence memory
  • useful tools
  • Understanding ICACLS permissions
  • INFO GATHERING
    • Port Knocking
    • 22 tcp - SSH
      • SSH Tunneling
    • 25 tcp - SMTP
    • 53 tcp/udp - DNS
    • 88 tcp - Kerberos
    • 161 udp - SNMP
    • 445 tcp - SMB
    • 1098,1099 tcp - Java RMI
    • 8009 tcp - AJP
    • 5901,5902 tcp - VNC
  • Web
    • XSS cookie stealing
    • PHP
    • Webdav
    • Wordpress
    • XML RPC
    • SQL Injection
    • SSRF
  • EXPLOITATION
    • File Transfers
    • Buffer Overflow
    • Bruteforce
      • Hashcat
      • Ophcrack (rainbow tables)
      • John The Ripper
    • PHP rce
    • Compiling
    • msfvenom
    • Reverse shell
    • Using ENV to escape Bad Characters
    • shellshock
    • Ncat Persistent Backdoor
  • PRIVESC - LINUX
    • Basic checks
    • Upgrading Shells
    • SUID
  • Privesc - Windows
    • Basic checks / powershell
    • Privesc Openings
    • LonelyPotato - SeImpersonatePrivilege
    • Enable RDP @ Firewall
    • NTLM (Pass The Hash)
  • Windows
    • NTDS.dit
    • Responder / SMB Relay
    • Attacking AD
      • AD Hacking Lab Setup
  • Metasploit
    • Basic Usage
    • Meterpreter
      • Pivoting
      • Windows Post Exploitation
  • Unsorted
    • other notes
  • eLearnSecurity eJPT
    • eJPT notes
  • OSWP
  • Getting started
  • WEP Attacks
    • WEP Attack (OPEN) - Clients connected
    • WEP Attack (OPEN) - Clientless
    • WEP Attack (SKA)
  • WPA/WPA2 Attacks
  • Scripts
    • get port from nmap
    • Curl response
    • ping sweep
    • iptables-counter.sh
    • (DNS) zonetransfer_check.sh
    • (DNS) dns-rev-brute.sh
    • (DNS) dns-fwd-brute.sh
    • (SMB) vuln-scan.sh
    • (SMB) samba-checker.sh
    • (SMTP) vrfy.py
    • (SNMP) mib-check.sh
  • Zeroday vulnerabilities explained
    • 2020-12 Solarwind supply chain
Powered by GitBook
On this page
  • Must read
  • Must do
  • Must use

Was this helpful?

refabr1k's Pentest Notebook

Hello! refabr1k is my handle and I'm a pentester. I originally created this for my OSCP prep, but now I use this note book as reference when I'm performing pentesting. Feel free to use for your gain!

NextSteganography

Last updated 5 years ago

Was this helpful?

:bulb: Use the search function to look for a command.

Must read

  • Windows Privilege Escalation - https://www.fuzzysecurity.com/tutorials/16.html

  • Linux Privilege Escalation - https://blog.g0tmi1k.com/2011/08/basic-linux-privilege-escalation/

  • hakluke's OSCP guide pt. 1 - https://medium.com/@hakluke/haklukes-ultimate-oscp-guide-part-1-is-oscp-for-you-b57cbcce7440

  • hakluke's OSCP guide pt. 2 - https://medium.com/@hakluke/haklukes-ultimate-oscp-guide-part-2-workflow-and-documentation-tips-9dd335204a48

  • hakluke's OSCP guide pt. 3 - https://medium.com/@hakluke/haklukes-ultimate-oscp-guide-part-3-practical-hacking-tips-and-tricks-c38486f5fc97

  • Abatchy's OSCP guide - https://www.abatchy.com/2017/03/how-to-prepare-for-pwkoscp-noob

  • TJnull's OSCP study guide - https://www.netsecfocus.com/oscp/2019/03/29/The_Journey_to_Try_Harder-_TJNulls_Preparation_Guide_for_PWK_OSCP.html

  • James Hall's OSCP Prep - https://411hall.github.io/OSCP-Preparation/

  • KongWenBin OSCP Review - https://kongwenbin.wordpress.com/2017/02/23/officially-oscp-certified/

Must do

  • TJnull's HTB and Vulnhub machines - https://www.netsecfocus.com/oscp/2019/03/29/The_Journey_to_Try_Harder-_TJNulls_Preparation_Guide_for_PWK_OSCP.html#vulnerable-machines

  • Georgia Weidman's Cybrary Pentest Course (Free!) - https://www.cybrary.it/course/advanced-penetration-testing/

  • OverTheWire: Bandit linux challenges - https://overthewire.org/wargames/bandit/

  • Windows/Linux Privesc Workshop (lpeworkshop) - https://github.com/sagishahar/lpeworkshop

  • Metasploit Unleashed - https://www.offensive-security.com/metasploit-unleashed/

  • Try harder

Must use

  • SecLists wordlists - https://github.com/danielmiessler/SecLists

  • PentestMonkey cheatsheet - http://pentestmonkey.net/cheat-sheet/shells/reverse-shell-cheat-sheet

  • PayloadsAllTheThings cheatsheet - https://github.com/swisskyrepo/PayloadsAllTheThings

  • OSCP Prep Discord Channel - https://discord.gg/2AG6TCm

  • SecWiki windows kernel exploits - https://github.com/SecWiki/windows-kernel-exploits

  • AutoRecon.py - https://github.com/Tib3rius/AutoRecon

  • OBS Recorder for OSCP EXAM - https://obsproject.com/

Logorefabr1k's Pentest Notebookrefabr1k's Pentest Notebook