Skip to content

filipposmastro/security

BranchesTags
 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2,010 Commits
assets
assets
 
 
physical_access_to_machine
physical_access_to_machine
 
 
styles
styles
 
 
writeups
writeups
 
 
.gitignore
.gitignore
 
 
README.md
README.md
 
 
SUMMARY.md
SUMMARY.md
 
 
active-directory.md
active-directory.md
 
 
active_information_gathering.md
active_information_gathering.md
 
 
arp-spoofing.md
arp-spoofing.md
 
 
attacking_the_user.md
attacking_the_user.md
 
 
automated_vulnerability_scanners.md
automated_vulnerability_scanners.md
 
 
bash-scripting.md
bash-scripting.md
 
 
basics.md
basics.md
 
 
basics_of_linux.md
basics_of_linux.md
 
 
basics_of_windows.md
basics_of_windows.md
 
 
binary_exploitation.md
binary_exploitation.md
 
 
binary_exploitation2.md
binary_exploitation2.md
 
 
broken_authentication_or_session_management.md
broken_authentication_or_session_management.md
 
 
browser_vulnerabilities.md
browser_vulnerabilities.md
 
 
buffer_overflow_bof.md
buffer_overflow_bof.md
 
 
bypass_image_upload.md
bypass_image_upload.md
 
 
bypassing_antivirus.md
bypassing_antivirus.md
 
 
clean_up.md
clean_up.md
 
 
clickjacking.md
clickjacking.md
 
 
cmd.md
cmd.md
 
 
commands.md
commands.md
 
 
common_web-services.md
common_web-services.md
 
 
compiling-windows-exploits.md
compiling-windows-exploits.md
 
 
connections.md
connections.md
 
 
create_shellcode.md
create_shellcode.md
 
 
creating_malicious_files.md
creating_malicious_files.md
 
 
cross-site-scripting.md
cross-site-scripting.md
 
 
cross_site_request_forgery.md
cross_site_request_forgery.md
 
 
dGaQO6Y.png
dGaQO6Y.png
 
 
database.md
database.md
 
 
default_layout_apache_on_different_versiont.md
default_layout_apache_on_different_versiont.md
 
 
dictionary_attacks.md
dictionary_attacks.md
 
 
dns-spoofing.md
dns-spoofing.md
 
 
dns_basics.md
dns_basics.md
 
 
dns_zone_transfer_attack.md
dns_zone_transfer_attack.md
 
 
dom-based-xss.md
dom-based-xss.md
 
 
editing-exploits.md
editing-exploits.md
 
 
email_harvesting.md
email_harvesting.md
 
 
escaping_restricted_shell.md
escaping_restricted_shell.md
 
 
example_of_company_architecture.md
example_of_company_architecture.md
 
 
examplesXSS.md
examplesXSS.md
 
 
exploit-examples_2.md
exploit-examples_2.md
 
 
exploit_examples_and_tutorials.md
exploit_examples_and_tutorials.md
 
 
exploiting.md
exploiting.md
 
 
exploits.md
exploits.md
 
 
exposed_version_control.md
exposed_version_control.md
 
 
failure-to-restrict-url-access.md
failure-to-restrict-url-access.md
 
 
find_subdomains.md
find_subdomains.md
 
 
finding_subdomains.md
finding_subdomains.md
 
 
firewalls.md
firewalls.md
 
 
fss.jpg
fss.jpg
 
 
function1-stackframe.png
function1-stackframe.png
 
 
function1.png
function1.png
 
 
general_tips.md
general_tips.md
 
 
generate_custom_wordlist.md
generate_custom_wordlist.md
 
 
getting_meterpreter_shell.md
getting_meterpreter_shell.md
 
 
google_hacking.md
google_hacking.md
 
 
hashcat.md
hashcat.md
 
 
identify_hash_and_crack_it.md
identify_hash_and_crack_it.md
 
 
identifying-technology-stack.md
identifying-technology-stack.md
 
 
immunity_debugger.md
immunity_debugger.md
 
 
insecure-direct-object-reference-idor.md
insecure-direct-object-reference-idor.md
 
 
java_applet.md
java_applet.md
 
 
lead_to_compromise.md
lead_to_compromise.md
 
 
linux-oneliners.md
linux-oneliners.md
 
 
linux.md
linux.md
 
 
list_of_common_ports.md
list_of_common_ports.md
 
 
littearature.md
littearature.md
 
 
local_file_inclusion.md
local_file_inclusion.md
 
 
loot.md
loot.md
 
 
loot_windows_-_for_credentials_and_other_stuff.md
loot_windows_-_for_credentials_and_other_stuff.md
 
 
main-stackframe.png
main-stackframe.png
 
 
metasploit.md
metasploit.md
 
 
meterpreter.md
meterpreter.md
 
 
modules.md
modules.md
 
 
msfvenom---create-shellcode.md
msfvenom---create-shellcode.md
 
 
netcat.md
netcat.md
 
 
network_traffic.md
network_traffic.md
 
 
networking.md
networking.md
 
 
nosql-injections.md
nosql-injections.md
 
 
online_password_cracking.md
online_password_cracking.md
 
 
oscp.md
oscp.md
 
 
pass_the_hash_-_reusing_hashes.md
pass_the_hash_-_reusing_hashes.md
 
 
passive_information_gatherig.md
passive_information_gatherig.md
 
 
password-cracking.md
password-cracking.md
 
 
payloads.md
payloads.md
 
 
persistence.md
persistence.md
 
 
physical_access_to_machine.md
physical_access_to_machine.md
 
 
pivoting.md
pivoting.md
 
 
pluck-1.md
pluck-1.md
 
 
port_forwarding_and_tunneling.md
port_forwarding_and_tunneling.md
 
 
port_knocking.md
port_knocking.md
 
 
port_scanning.md
port_scanning.md
 
 
post_exploitation.md
post_exploitation.md
 
 

Repository files navigation

IT-Security

My notepad about stuff related to IT-security, and specifically penetration testing. Stuff I have come across that I don't feel like googeling again.

I have used this book to try to write down how some things work, but at the same time I want to use it as a reference book to find commands and things I just can't remember. Therefore I have tried to create a TLDR section in the beginning of some chapters where I have copy-paste ready commands that are useful. And if you want to know more you can continue to read the rest of the chapter. This is my way of making the book a hybrid between the Red Team Field Manual and a standard introduction book to pentesting.

Find practical examples

If you read about a vulnerability that you want to know more about I can really recommend searching for in on HackerOne via google. It is a good way to find real life examples of vulnerabilities.

Here is an example of such a search:

site:hackerone.com sql-injection

Disclaimers

Sometimes the line isn't very clear between the chapters. Some actions might be considered part of the vulnerability analysis-phase, but it could also but considered part of the recon-phase. It is what it is.

These chapters are written sporadically with a lot of stuff missing. I just add stuff wherever whenever. Also, things might not be accurate, I might have misunderstood something or misused a tool. So don't trust me or this book for any accuracy.

About

No description, website, or topics provided.

Resources

Readme
Activity

Stars

10 stars

Watchers

2 watching

Forks

7 forks
Report repository

Releases

No releases published

Packages

No packages published

Languages

  • CSS 100.0%