Penetration testing/ethical hacking

Introduction
💿Virtualbox network setup
🕵️OSINT
😨Social Engineering
😈MitM attack
🔌UPnP exploitation
🪚Network hacking
- What is network hacking?
1️⃣Network live host discovery
2️⃣Network port scan/services enumeration
3️⃣Network services vulnerability scanning & exploitation
Vulnerability & exploitation
Web Hacking
🛣️Attacks on routing protocols
- What are attacks on routing protocols?
- BGP hijacking
🏕️To explore
👤Anonymity
Credentials brute-force/cracking
Post-exploitation
- Gaining shell
- Repository
Privilege escalation
- Linux
- Windows
  - Password harvesting
  - Vulnerabilities exploit
    Scheduled tasks
    AlwaysInstallElevated
    Service misconfigurations
    Insecure permissions on service executable
    Unquoted service path
    Insecure service permission
    Abusing privileges
Ⓜ️MITRE ATT&CK
- Introduction
🧰Tools/services
Write-ups
- TryHackMe
  - Silver Platter

Powered by GitBook

On this page

Tools
Learning videos
Practice labs
Readings

🔌UPnP exploitation

Compiled resources

List of references for UPnP exploitation

PreviousLAN devices NextWhat is network hacking?

Last updated 5 months ago

MORE TO ADD - REFER TO DOCS https://docs.google.com/document/d/1ZaLToULp99iE5EWiLG_hBWGgAqB9VraG_kGOXfr1tVU/edit

Tools

Learning videos

Practice labs

Readings

GitHub - 0x90/miranda-upnp: Automatically exported from code.google.com/p/miranda-upnpGitHub

upnpc(1) — miniupnpc — Debian unstable — Debian Manpages

Intro to IoT PentestingTryHackMe

Security Flaws in Universal Plug and Play: Unplug, Don't Play | Rapid7 BlogRapid7 Blog

UPnP, SSDP, and Port Forwarding Services Explained | Rapid7 | Rapid7 BlogRapid7 Blog

https://www.esat.kuleuven.be/cosic/publications/thesis-377.pdfwww.esat.kuleuven.be

Dumping Router FirmwareTryHackMe

Spoofing SSDP and UPnP Devices with EvilSSDPHackTricks

UPnP (Universal Plug and Play) Pentesting | Exploit Noteshideckies