day-to-day

Table of Contents

• Enumeration
• Exploitation
• Password Attacks
• Wordlists
• Privilege Escalation
• Buffer Overflows and Exploits
• OSCP Preparation

---

Enumeration

Web Discovery

• Dirsearch - Web path scanner
• Gobuster - Directory/file & DNS busting tool written in Go
• Wfuzz - Web application fuzzer

SMB Enumeration

• SMB Checklist

Exploitation

Search

• Google
• Exploit Database - Exploits for Penetration Testers, Researchers, and ...

Privilege Escalation

Linux Privilege Escalation

• pspy - Monitor linux processes without root permissions
• LinEnum - Scripted Local Linux Enumeration & Privilege Escalation Checks
• linuxprivchecker.py -- a Linux Privilege Escalation Check Script
• vector (getcap/setcap)
• linux-exploit-suggester
• Checklist

Windows Privilege Escalation

• PowerSploit - A PowerShell Post-Exploitation Framework
• Windows Kernel Exploits
• PayloadsAllTheThings - Windows - Privilege Escalation
• Checklist

Standalone binaries for Linux/Windows

• Impacket Static Binaries - Standalone binaries for Linux/Windows of Impacket's examples
• Various nix tools built as statically-linked binaries

Password Attacks

Brute Force

• Nmap Brute forcing Scripts
• John The Ripper - is a fast password cracker
• Crunch - Wordlist Generator
• Hashcat - World's fastest and most advanced password recovery utility

Extract

• Mimikatz - to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory

Wordlists

• SecLists - It's a collection of multiple types of lists used during security assessments, collected in one place

Buffer Overflows and Exploits

Nmap Fuzzers

• Nmap Fuzzer List

Stack Based Overflows

• Exploit writing tutorial part 1 : Stack Based Overflows

Mona

• mona.py - the manual

Debugger

• .NET debugger and assembly editor
• Immunity Debugger
• OllyDbg
• Radare

OSCP Preparation

Writeups / Exploits / Training

• Random Exploits
• Stack practice
• MiniShare 1.4.1 - Remote Buffer Overflow

Writeups / Guide

• OSCP Survival Guide

OSCP labs to automate information gathering and service enumeration

• Reconnoitre
• Vanquish

Vulnhub - Machines similar to the PWK labs

• Metasploitable3
• Kioptrix: Level 1 (#1)
• Kioptrix: Level 1.1 (#2)
• Kioptrix: Level 1.2 (#3)
• Kioptrix: Level 1.3 (#4)
• FristiLeaks: 1.3
• Stapler: 1
• PwnLab: init
• Tr0ll: 1
• Tr0ll: 2
• Kioptrix: 2014
• Lord Of The Root: 1.0.1
• Mr-Robot: 1
• HackLAB: Vulnix
• HackInOS
• VulnOS: 2
• SickOs: 1.2
• pWnOS: 2.0
• Temple of Doom
• SolidState
• Vulnix
• Zico2
• Billu_b0x 2
• SkyTower
• WinterMute

IppSec Videos - Machines Windows

• CTF - Windows -Easy
• CTF - Windows - Medium
• CTF - Windows - Hard
• CTF - Windows - Insane

IppSec Videos - Machines Unix

• CTF - Nix - Easy
• CTF - Nix - Medium
• CTF - Nix - Hard
• CTF - Nix - Insane