Special
Penetration Testing
Course kan waxaad ku baran doontaa qaab kii loo jabin lahaa systems ka, sidoo kale waxaad ku baran doontaa qaabka ...
Show more
- Description
- Curriculum
- Reviews
Introduction
Module-1: Setting up Lab
Module-2: Reconnaissance
-
11
Iisheeg-1: Concept of Reconnaissance -
12
Iisheeg-2: Types Of Reconnaissance
-
13
Iisheeg-3: The Harvester
-
14
Itus-1: Theharvester Walkthrough
-
15
Itus-2: The Censys
-
16
Itus-3: Fingerprint Web Server
-
17
Itus-4: Hunting Emails
-
18
Itus-5: Spiderfoot
-
19
Itus-6: Spiderfoot Walkthrough
-
20
Itus-7: Wafwoof Walkthrough
-
21
Itus-8: Subdomain enumeration Part-1
-
22
Itus-9: Subdomain enumeration Part-2
Module 3: Scanning Networks
-
23
Iisheeg-1: Concept of Nmap
-
24
Iisheeg-2: Nmap States
-
25
Itus-1: Nmap Basic Scanning
-
26
Itus-2: Nmap Scanning Live Hosts
-
27
Itus-3: Nmap OS Discovery
-
28
Itus-4: Nmap Scanning Multiple Host
-
29
Itus-5: Nmap Scanning Exclusive IP
-
30
Itus-6: Nmap Scanning with Host File
-
31
Itus-7: Nmap Bypassing Firewall
-
32
Itus-8: Nmap Scanning Vulnerability
Module-4: Basic System Hacking
-
33
Iisheeg-1: What is System Hacking
-
34
Iisheeg-2: What is Payload and its types
-
35
Iisheeg-3: Concept of Msfvenom
-
36
Itus-1: Mfsvenom Executable Payload
-
37
Iisheeg-4: Concept of Netcat
-
38
Itus-2: Powershell Payload (ps1)
-
39
Itus-3: Hacking Machines using Html Application Payload
-
40
Itus-4: Hacking Machines using Microsoft Installer Payload (MSI)
Module-5: Exploiting Vulnerabilities
-
41
Itus-1: Exploiting Unreallrcd Backdoor Part-1
-
42
Itus-2: Exploiting Unreallrcd Backdoor Part-2
-
43
Itus-3: Exploitation of Rmi-Classloader Part-1
-
44
Itus-4: Exploitation of Rmi-Classloader Part-2
-
45
Itus-5: Exploitation of VSFTP backdoor part-1
-
46
Itus-6: Exploitation of VSFTP backdoor part-2
-
47
Itus-7: Three Way to Scan Eternal Blue Vulnerability
-
48
Itus-8: Exploiting Eternal Blue Part-1
-
49
Itus-9: Exploiting Eternal Blue Part-2
-
50
Itus-10: ProFTPD Mod_Copy Execution Part-1
-
51
Itus-11: ProFTPD Mod_Copy Execution Part-2
-
52
Itus-12: Exploiting Drupal Vulnerability Part-1
-
53
Itus-13: Exploiting Drupal Vulnerability Part-2
-
54
Itus-14: Exploiting Payroll Application
-
55
Itus-15: Apache Unauthenticated File Upload
-
56
Itus-16: Kioptrix Methodology
-
57
Itus-17: Network Scanning Kioptrix
-
58
Itus-18: Kioptrix Enumeration
-
59
Itus-19: Kioptrix Nikto Enumeration
-
60
Itus-20: Kioptrix SMB Auxiliary Scanning
-
61
Itus-21: Exploiting Samba 2.2 Vulnerability Part-1
-
62
Itus-22: Exploiting Samba 2.2 Vulnerability Part-2
Module-6: Privilege Escalation
-
63
Iisheeg-1: What is Privilege Escalation
-
64
Iisheeg-2: Types of Privilege Escalation
-
65
Iisheeg-3: What is User Account Control (UAC)
-
66
Iisheeg-4: How does UAC work
-
67
Itus-1: Windows Escalate UAC Protection Bypass
-
68
Itus-2: Windows Escalate UAC Protection Bypass (In Memory Injection)
-
69
Itus-3: Windows UAC Protection Bypass (Via FodHelper Registry Key)
-
70
Itus-4: Windows Escalate UAC Protection Bypass (Via Eventvwr Registry Key)
-
71
Itus-5: Windows Escalate UAC Protection Bypass (Via COM Handler Hijack)
Module: Wordlist
Module: Directory Bruteforcing
Cracking Passwords
CTF 1: Tomcat Penetration Testing
-
92
Itus-1: Tomcat Penetration Testing Methodology
-
93
Itus-2: Tomcat Host Discovery
- Tool:
netdiscover. Purpose: Identify the target IP address.
- Tool:
-
94
Itus-3: Tomcat Port Scanning and Service Enumeration
- Tool:
nmap. Purpose: Discover open ports and services.
- Tool:
-
95
Itus-4: Tomcat Web Application Vulnerability Scanning
- Tool:
Nikto Purpose: Identify vulnerabilities and default credentials in the web application.
- Tool:
-
96
Itus-5: Tomcat Exploitation
- Tool:
msfvenom,netcat Purpose: Generate a reverse shell payload and establish a connection.
- Tool:
-
97
Itus-6: Tomcat Privilege Escalation
- Tool:
msfvenom,wget,sudo Purpose: Escalate privileges using a Java-based reverse shell.
- Tool:
-
98
Itus-7: Tomcat Flag Capture
- Command Line
- Purpose: Confirm root access and retrieve the flag.
CTF 2: DomDom-1 Penetration Testing
-
99
Itus-1: DomDom-1 Scanning
- Identify running service
- Open Ports (Nmap)
-
100
Itus-2: DomDom-1 Enumeration
- Web Directories (DIRB)
- Vulnerable to RCE (Burp Suite)
-
101
Itus-3: DomDom-1 Exploit
- Upload backdoor (PHP reverse shell)
- Spawn shell (netcat session)
-
102
Itus-4: DomDom-1 Privilege Escalation
- Abusing Capability Permission
- Spawn root shell
CTF 3: Star Wars-1 Penetration Testing
CTF 4: Tomato-1 Penetration Testing
CTF 5: Photographer 1 Penetration Testing
-
111
Itus-1: Photographer 1 Reconnaissance
- Netdiscover to find the machines on our Network
- Nmap to detect open ports
-
112
Itus-2: Photographer 1 Enumeration
- Enumerating sambashare
- Discovering Koken CMS
-
113
Itus-3: Photographer 1 Exploitation
- Authenticating and exploiting Koken CMS using a public exploit
-
114
Itus-4: Photographer 1 Privilege Escalation
- SUID binary set for php7.2
Please, login to leave a review
