Penetration testing & ethical hacking concepts

Ctrlk

Introduction
💿Virtual Machines
- VirtualBox
- VMware Workstation
🕵️OSINT
Tools
😨Social Engineering
😈MitM attack
🔌UPnP exploitation
Network Reconnaissance & Attacks
- What is network recon & attacks?
1️⃣ Network live host discovery
2️⃣ Network port scan/services enumeration
3️⃣ Network services vulnerability scanning & exploitation
Vulnerability & exploitation
Misconfigurations
Reverse Engineering/Binary Exploitation
Hardware Exploitation
Other important skills
Research ideas
Past experiments
Web Exploitation
Webshell
Web API pentesting
OWASP
General web knowledge
Framework specific
Methodology
🛣️Attacks on routing protocols
- What are attacks on routing protocols?
- BGP hijacking
🏕️To explore
👤Anonymity
Credentials brute-force/cracking
Post-exploitation
Privilege escalation
- Linux
- Windows
Ⓜ️MITRE ATT&CK
- Introduction
- OS Credential Dumping (T1003)
🧰Tools/services
Professional report writing
- Report template
Tasks on-the-go
Practice
Forensics
- Steganography
Operational Security (OpSec)
- Hardening
Safe document viewer
Challenge write-ups
AI prompt
- ChatGPT
Windows/Active Directory
🐉OSCP
- Resources
- Practice labs

Powered by GitBook

On this page

OWASP
Web Security Testing Guide (WSTG)
WSTG-SESS

WSTG-SESS-10 ~ JWT

OWASP WSTG-SESS-10 ~ JSON Web Token (JWT) | Penetration testing & ethical hacking conceptsjarrettgxz-sec.gitbook.io

Examples

Exploiting kid header value:

Hammer | Penetration testing & ethical hacking conceptsjarrettgxz-sec.gitbook.io

PreviousWSTG-SESS NextGeneral web knowledge

Last updated 7 months ago