Search for a command to run...
Series
In this series I'm preparing for highly hands on certification - Hack The Box Certified Penetration Testing Specialist.
What is Enumeration? It is one of the most important parts of Penetration Testing process. It is identifying all of the ways we could attack a target. We must do our best in this phase. Long story short - enumeration is collecting as much information...
Transferring files During any penetration testing exercise, it is likely that we will need to transfer files to the remote server. There are few options for this: One method is running a Python HTTP server on our machine and then using wget or cUR...
Privilege Escalation Once we gain initial access to a box, we want to thoroughly enumerate the box to find any potential vulnerabilities we can exploit to achieve a higher privilege level. There are checklists for privilege escalation online. A goo...
Some good note taking options Notepad++ GitBook (has fetures to host a page or make wiki page) Cherrytree Evernote Sublime Text Notion Visual Studio Code It is important to make sure that any client data is only stored locally and not synced...
Organization must have efficient yet effective policy implementation for information security. Risk management process can help: StepExplanation Identifying the RiskIdentifying risks the business is exposed to, such as legal, environmental, ma...
Proof of Concept Proof of Concept (PoC) or Proof of Principle is a project management term. In project management, it serves as proof that a project is feasible in principle. We confirm discovered vulnerabilities. We prepare steps that shows the vu...
