Skip to content

📕 The Red Book

Temporary links

📕 The Red Book

📕 The Red Book
Introduction
🦳 Stages of Ethical Hacking
🦳 Stages of Ethical Hacking
- 1️⃣ Information Gathering
  1️⃣ Information Gathering
  - Active Information Gathering
    
    Active Information Gathering
    
    DNS Zone Transfers
    
    NMAP
    
    netdiscover
    
    Amass
    
    fping
    
    RustScan
    
    sqlMap
    
    Shodan
    
    Nikto
  - Passive Information Gathering
    
    Passive Information Gathering
    
    Website Recon & Footprinting
    
    Whois Enumeration
    
    Netcraft
    
    ⭐ DNS
    
    Identify if site is protected by firewall or proxy - wafw00f
    
    Subdomain Enumeration - Sublist3r
    
    ❌ theHarvester (borked)
    
    Email gathering
    
    Leaked Password Databases
    
    Certificates
- 2️⃣ Enumeration
  2️⃣ Enumeration
  - SMB
    
    SMB
    
    Windows discover & Mount
    
    NMAP Scripts
    
    SMBMap
    
    Samba with Linux
    
    Dictionary Attack
  - FTP
  - SSH
  - HTTP
    
    HTTP
    
    Subdomain
    
    IIS
    
    Apache
  - SQL
- 3️⃣ Vulnerability Assessment
  3️⃣ Vulnerability Assessment
  - Nessus
💾 System/Host Based Attacks
💾 System/Host Based Attacks
- 🪟 Windows
  🪟 Windows
  - Frequently exploited Windows Services
- 🐧 Linux
🥽 Dorks
🥽 Dorks
- Google
  Google
  - Cheatsheet
  - Examples
- Extra
🎣 Phishing
🎣 Phishing
🔎 OSINT
🔎 OSINT
- Temporary links
👾 Data exfiltration
👾 Data exfiltration
- Temporary links
🐝 OWASP
🐝 OWASP
- OWASP Top 10
📙 Cheat Sheet
📙 Cheat Sheet

Temporary links

SharpExfiltrate GitHub Repository

DNSExfiltrator GitHub Repository

Egress-Assess GitHub Repository