SUMMARY.md

Table of contents

• 🏠 /home/sfoffo/.pt-notes
• 🏳️ Contributions
  • 2024 Contributions
    • CVE-2024-42845
    • CVE-2024-41819
    • CVE-2024-41943
    • CVE-2024-50344
• 🍀 Support this Project
• 📂 Active Directory
  • Initial Access
  • Internal Enumeration & Lateral Movement
  • Privilege Escalation to Domain Admin using Known Exploits
  • Domain Trusts
• 🐧 Linux Privilege Escalation
  • Enumerating Attack Vectors
  • Privileged Groups
  • Environment Variables Abuse
  • Capabilities Abuse
  • Programs, Jobs and Services
  • Miscellaneous Techniques
  • Recent CVEs
• 🪟 Windows Privilege Escalation
  • Enumerating Attack Vectors
  • Excessive User Rights Abuse
  • Built-in Groups Abuse
  • File System ACLs
  • Services Hijacking
  • User Account Control (UAC) Bypass
  • Living off the Land
• 🐛 Bug Bounty Hunting
  • Bug Bounty Tools
• 🕸️ Web Applications
  • Web Attacks
    • Cross Site Scripting (XSS)
    • SQL Injection (SQLi)
    • File Upload Vulnerabilities
    • Insecure Direct Object References (IDOR)
    • OS Command Injection
    • Local File Inclusion (LFI)
    • Remote File Inclusion (RFI)
    • XML External Entities (XXE)
    • HTTP Verb Tampering
  • Web Technologies
    • Tomcat
    • CGI Applications
    • WordPress
    • SAP Netweaver
    • Joomla
    • Drupal
    • Gitlab
    • Jenkins
    • Microsoft IIS
    • osTicket
    • PRTG Network Monitor
    • Splunk
  • Fuzzing
• 🔍 Information Gathering
• 📜 Protocols and Services
  • DNS
  • FTP
  • IMAP
  • IPMI
  • MSSQL
  • MySQL
  • NFS
  • Oracle TNS
  • POP3
  • RDP
  • SMB
  • SMTP
  • SNMP
• 👾 Utilities, Scripts and Payloads
  • Shells and Payloads
  • Metasploit Framework
  • File Transfers
  • Pivoting, Tunneling, Port Forwarding
  • Password Attacks