Penetration testing/ethical hacking

Introduction
💿Virtualbox network setup
🕵️OSINT
😨Social Engineering
😈MitM attack
🔌UPnP exploitation
🪚Network hacking
- What is network hacking?
1️⃣Network live host discovery
2️⃣Network port scan/services enumeration
3️⃣Network services vulnerability scanning & exploitation
Vulnerability & exploitation
Web Hacking
🛣️Attacks on routing protocols
- What are attacks on routing protocols?
- BGP hijacking
🏕️To explore
👤Anonymity
Credentials brute-force/cracking
Post-exploitation
- Gaining shell
- Repository
Privilege escalation
- Linux
- Windows
  - Password harvesting
  - Vulnerabilities exploit
    Scheduled tasks
    AlwaysInstallElevated
    Service misconfigurations
    Insecure permissions on service executable
    Unquoted service path
    Insecure service permission
    Abusing privileges
Ⓜ️MITRE ATT&CK
- Introduction
🧰Tools/services
Write-ups
- TryHackMe
  - Silver Platter

Powered by GitBook

On this page

Fake subdomains
Shadow links
Homograph attack/IDN spoofing
Tracking pixel

😨Social Engineering

Email phishing

Previous7 tricks of social engineering NextTyposquatting

Last updated 5 months ago

Fake subdomains

Non-existent, but seemingly legitimate subdomains that can be resolved by malicious DNS servers.

Shadow links

A hidden link in the href that is different from the shown text display

Homograph attack/IDN spoofing

Tracking pixel

https://docs.google.com/document/d/1wqnOvWsu2ka10GQqa3uL9KXP_5FIdz3r14Aj_5PPDeg/editdocs.google.com