/Cybersecurity
BlackBox UploadVuln
We'll look at this as a step-by-step process. Let's say that we've been given a website to perform a security audit on. The first thing we would do is take a look at the website as a whole. Using…
Topic
Red Team
8 posts on this topic.
- /Cybersecurity
Layer 2 Security:LAB
DHCP Snooping, Dynamic ARP inspection, Port Security Exercise 4 - Configuring Layer 2 Security Features Sometimes a network could have traffic that is malicious. These types of traffic cannot be…
/CybersecurityAuthentication Attacks:NOTES
Types: MFA Fatigue Attacks - Social Engineering Cyber attack repeatedly sending MFA requests; SPAM attack; Pass-The-Hash Attack - Steal Hashed user credentials then use them to create a new session…
/CybersecurityReconTools:NOTES
Wayback Machine For reviewing internet archives; Free Via internet browser; archive.org/web ; Can see historical data about a website to identify new changes which may have vulnerabilities; Can…
/CybersecurityExploit Tools:NOTES
Metasploit Identifies potential exploits and provides ability to execute; Netcat Creates communication channels between two systems; Installed on linux, Install Nmap on windows to access ncat…
- /Cybersecurity
AuthTools:NOTES
CrackMapExec Dump Hashes in for cracking and move laterally in network; Various Protocols - rdp, winrm, ldap, ssh, mssql, smb, ftp; --shares Enumerate shares to show accounts that are vulnerable...
- /Cybersecurity
THM Web App Resources
OWASP Favicon Database: Other places to find information only using basic tools: robots.txt, sitemap.xml, HTTP Headers, Framework Stack - developer tools Google Hacking / Dorking Google hacking /…
/CybersecurityVulnerability Tools:NOTES
Nikto Open source tool used to scan web servers; Vulnerability scans for known issues; Checks for configuration errors; TruffleHog Scans for exposed secrets such as API Keys, Passwords and Token…