Table of contents

• /home/six2dez/.pentest-book
• Contribute/Donate

Recon

• Public info gathering
• AIO Recon Tools
• Domain Enum
• Subdomain Enum
  • Subdomain Takeover
• Network Scanning
• Host Scanning
• Packet Scanning
• Recon Methodology (WiP)

Enumeration

• Files
• SSL/TLS
• Ports
• Web
  • General Info
  • Web Scanners
  • Quick tricks
  • Header injections
  • Bruteforcing
  • Online hashes cracked
  • Crawl/Fuzz
  • LFI/RFI
  • Upload bypasses
  • SQLi
  • SSRF
  • Open redirects
  • XSS
  • CSP
  • XXE
  • Cookie Padding
  • Webshells
  • CORS
  • CSRF
  • Web Cache Poisoning
  • Broken Links
  • Clickjacking
  • HTTP Request Smuggling
  • Web Sockets
  • CRLF
  • IDOR
  • Web Cache Deception
  • Session fixation
  • Email attacks
  • Pastejacking
  • HTTP Parameter pollution
  • SSTI
  • Prototype Pollution
• Web Services
  • APIs
  • JS
  • ASP.NET
  • JWT
  • GitHub
  • GitLab
  • WAFs
  • Firebird
  • Wordpress
  • WebDav
  • Joomla
  • Jenkins
  • IIS
  • VHosts
  • Firebase
  • OWA
  • OAuth
  • Flask
  • Symfony && Twig
  • Drupal
  • NoSQL & MongoDB
  • PHP
  • RoR (Ruby on Rails)
  • JBoss - Java Deserialization
  • OneLogin - SAML Login
  • Flash SWF
  • Nginx
  • Python
  • Tomcat
  • Adobe AEM
  • Magento
  • SAP
  • 2FA
• Cloud
  • General
  • Cloud Info Gathering
  • AWS
  • Azure
  • GCP
  • Docker && Kubernetes
  • CDN - Comain Fronting

Exploitation

• Payloads
• Reverse Shells
• File transfer

Post Exploitation

• Linux
• Windows
  • AD
    • Kerberos
  • PS tips & tricks

Mobile

• General
• Android
• iOS

Others

• Burp Suite
• VirtualBox
• Code review
• Pentesting Web checklist
• Random
• Useful regex
• Master assessment mindmap
• BugBounty
• jar usage
• Exploiting
• tools everywhere