Links @sigusr2 - Tumblr Blog

#bash #shell #sh #posix

Privilege escalation always comes down to proper enumeration. But to accomplish proper enumeration you need to know what to check and look for. This takes familiarity with systems that normally comes along with experience. At first privilege escalation can seem like a daunting task, but after a while you start...

#pentest #privesc #oscp

Often during penetration tests or security assessments you start from the external network and you try to get to the internal network and…

#pentest #pivot #redteam

Basic Pivoting Types Type Use Case Listen - Listen Exposed asset, may not want to connect out. Listen - Connect Normal redirect. Connect - Connect Can’t bind, so connect to bridge two hosts

#pentest #pivot #redteam

Quick walkthrough of pivot techniques including ssh, meterpreter, ncat, and netcat.

#pentest #pivot #redteam

A list of useful payloads and bypass for Web Application Security and Pentest/CTF - swisskyrepo/PayloadsAllTheThings

#oscp #pentesting #payloads #hacking

An organized guide to highlight some of the smartest techniques and resources for your OSCP journey.

#OSCP #pentesting #hacking

Checkpoints: 1. Older APIs versions tend to be more vulnerable and they lack security mechanisms. Leverage the predictable nature of REST AP...

#bugbounty #api #hacking

Before you start reading this post, let me tell you all the tips are collected from twitter (few mine 😓) where awesome community folks shar...

#bugbounty #hacking

Hey Guys, in this post I am just going to copy paste my notes which I collected during my OSCP journey from different sources. Feel free t...

#pentest #oscp #pentesting #hacking

Docker has become such an integral part of my worfklow recently. These examples should demonstrate how Docker can help you be a more efficient pentester

#windows #linux #pentest #docker #hacking

Privilege escalation always comes down to proper enumeration. But to accomplish proper enumeration you need to know what to check and look for. This takes familiarity with systems that normally comes along with experience. At first privilege escalation can seem like a daunting task, but after a while you start...

#pentest #hacking #windows #privesc

Lists all of the available service-specific resources, actions, and condition keys that can be used in IAM policies to control access to Identity And Access Management.

#aws #iam #keys

AWS Security Consulting

#aws #account

We’re excited to announce the launch of dedicated security chapters in the AWS documentation for over 40 services. Security is a key component of your decision to use the cloud. These chapters can help your organization get in-depth information about both the built-in and the configurable security of AWS services. This information goes beyond “how-to.” […]

#shared responsibility model #aws #cloud

Setup and managing a pentest dropbox infrastructure should be simple, reliable, and versatile. In part 1 we'll show you the hardware options, and in part 2 we'll go beyond autossh and create a OpenVPN environment that reduces time spent managing remote network connectivity.

#pentest #hacking #dropbox #infra

Table of Contents: Overview Dedication A Word of Warning! Section 1: Getting Comfortable with Kali Linux Section 2: Essential Tools in Kali Section 3: Passive Reconnaissance Section 4: Active Reconnaissance Section 5: Vulnerability Scanning Section 6: Buffer Overflows Section 7: Handling Public Exploits Section 8: Transferring Files to your target Section 9: Privilege Escalation Section 10: Client-Side Attacks Section 11: Web Application Attacks Section 12: Password Cracking Section 13: Port Redirection and Pivoting Section 14: Metasploit Framework Section 15: Antivirus Bypassing Extra Resources Setting up your Pentesting Environment Wargames/Hands-on Challenges Capture the Flag Competitions (CTFs)/Cyber Competitions Bug Bounty Programs Vulnerable Machines Tips to participate in the Proctored OSCP exam Other Resources Conclusion

#OSCP #pentesting #hacking

Trending Blogs

Recently Viewed Blogs

Links