Privilege Escalation Once we gain initial access to a box, we want to thoroughly enumerate the box to find any potential vulnerabilities we can exploit to achieve a higher privilege level. There are checklists for privilege escalation online. A goo...
Some good note taking options Notepad++ GitBook (has fetures to host a page or make wiki page) Cherrytree Evernote Sublime Text Notion Visual Studio Code It is important to make sure that any client data is only stored locally and not synced...
Organization must have efficient yet effective policy implementation for information security. Risk management process can help: StepExplanation Identifying the RiskIdentifying risks the business is exposed to, such as legal, environmental, ma...
Proof of Concept Proof of Concept (PoC) or Proof of Principle is a project management term. In project management, it serves as proof that a project is feasible in principle. We confirm discovered vulnerabilities. We prepare steps that shows the vu...
After pre-engagement phase is completed, information gathering begins. It’s a phase where we gather all available information about the company. This is the phase which we return to multiple times. OSINT Open source intelligence is a great way to gat...
It’s a stage where we prepare for the actual pentesting. It’s a place to ask questions. As many as you can. It’s also a stage where we communicate with our client. We ask what needs does he have. After that we make a Kick-Off meeting. To start any of...
