00x00 Syllabus
Getting Help
00x01 Introduction
-
Introduction
-
Intro Video (7:18)
-
What is "Ethical" hacking"?
-
How to engage a target?
-
How to engage a target? (3:53)
-
@Ch1R0n1n: What it means to be an Ethical Hacker.pdf
-
@Ch1R0n1n: What it means to be an Ethical Hacker.pptx
-
@Ch1R0n1n: What is an Ethical Hacker? (13:28)
-
QUIZ: How ethical are you?
-
Assignment: Describe the deliverables of a pentest in your own words
-
Assignment: Let's fuzz hackxpert.com
00x02- Networking and Web application basics
-
Web fundamentals Video (7:30)
-
Web fundamentals
-
Assignment: Web
-
Transferring files (3:08)
-
Downloading files
-
Fundamentals - Fuzzing.mp4 (2:49)
-
Fuzzing
-
Assignment: Let's fuzz hackxpert.com
-
Networking fundamentals
-
Assignment: Networking
-
Quiz: 00x02 Fundamentals
-
Realistic assignment: Fuzz our pentesting assignment
-
SOLUTION: Realistic assignment: Fuzz our pentesting assignment
00x03 - Tools
00x04 Passive information gathering
00x05 Getting a foothold
-
Getting a foothold (3:47)
-
@Ch1R0n1n: Directory Busting Walkthrough.mp4 (17:38)
-
@Ch1R0n1n: Directory Busting.ppt
-
@TheXSSRat: Directory_brute_forcing.pdf
-
@Ch1R0n1n: Working with Exploits.mp4 (12:18)
-
@Ch1R0n1n: Working with Exploits.ppt
-
SMB enum
-
@Ch1R0n1n: SMB Enumeration.mp4 (21:35)
-
@Ch1R0n1n: SMB Enumeration.ppt
-
FTP Enumeration.MP4 (23:31)
-
FTP Enumeration
-
FTP Enumeration.ppt
-
SNMP enum
-
NFS enum
-
Telnet enum
-
SSH enum
-
Enumeration cheat sheet
-
Getting a foothold- The puzzle pieces fall in place - Video (12:29)
-
Getting a foothold- The puzzle pieces fall in place
-
Quiz: 0x05 Enum
-
Assignment: - Foothold
-
Assignment: - Foothold - Solutions
00x006 Privilege escalation
-
Linux priv-esc (33:16)
-
Linux priv esc PPTX
-
Linux priv esc Article
-
Linux priv esc Ex 1 MP4 (12:04)
-
Linux priv esc Ex 2 MP4 (20:52)
-
Quiz: Privilege escalation [Linux]
-
Windows Priv Esc MP4 (66:43)
-
Windows_Privilege_Escalation.pdf
-
Windows priv esc Article
-
Assignment: 00x06 Reading the doctor's hidden files
-
Assignment: Linux priv esc
00x07 Vulnerability scanning
00x08 Buffer overflows
00x09 Burp Suite (Large section)
-
Intro (0:35)
-
Dashboard + live and passive scans (16:33)
-
Burp Suite Dashboard.pdf
-
03 Target tab.mp4 (4:48)
-
Target tab
-
Proxy tab (10:11)
-
Burp suite Proxy .pdf
-
05 Intruder.mp4 (9:58)
-
Intruder
-
06 Repeater.mp4 (5:00)
-
Repeater
-
07 Sequencer.mp4 (3:46)
-
Sequencer
-
08 Decoder.mp4 (2:57)
-
Decoder
-
09 comparer.mp4 (1:48)
-
Comparer
-
10 Market place (Plugins) + more.mp4 (2:53)
-
Burp Suite Extender
-
Burp collaborator
-
Burp Authorize
-
Burp Match and replace
-
Burp Suite Content discovery
-
Burp suite Top 5 Professional extensions
-
Testing mobile applications with burp suite
-
Burp suite How to use burp to look for SQLi
-
Quiz : Burpsuite
-
Exercises
-
ASSIGNMENT: Get to know burp suite community edition
-
00x09 ASSIGNMENT - SOLUTION: Let's engage with burp suite free
00x10-00 Introduction to JWT hacking
00x10-01 Open redirects
00x10-02 CSRF
00x10-03 Broken Acces Control
00x10-04 IDOR
00x10-05 Business Logic Laws
00x10-6 XXE
00x10-07 Template Injection
00x10-08 XSS
00x10-09 Insecure deserilisation
00x10-10 Captcha bypass
00x10-11 SSRF
00x10 Command Injection
00x10 SQLi
-
0-intro (2:11)
-
1-what-are-sqli (2:59)
-
2-detecting-sqli (5:13)
-
3-types-of-sqli (10:26)
-
4-boolean-based-sqli (6:47)
-
5-sqlmap (3:19)
-
6-references-amp-exercises (3:50)
-
Slides.pdf
-
1-portswigger-simple-login-bypass (2:59)
-
2-union-based-sqli-to-rce (9:00)
-
3-mssql-injection-to-rce (7:47)
-
4-waf-bypasses (1:57)
-
5-sqli-waf-bypass (17:02)
-
6-sqli-xss-and-xxe-all-in-one-payload (20:39)
00x10-11 (Admin) login pages
00x11-1 Broad scope web application methodology - General methodology
00x11-2 Broad scope web application methodology - Manual Hacking
00x11-3 Broad scope web application methodology - Vulnerability scanning
00x11-4 Broad scope web application methodology - Practical Methodology
-
Creating_our_list_of_su20creating20our20list20of20subdomains.pdf
-
Processing_Our_List_Of_S20processing20our20list20of20subdomain.pdf
-
Subdomain_flyov20subdomain20flyover.pdf
-
Exploiting_open_p20exploiting20open20ports.pdf
-
Vulnerability_scanni20vulnerability20scanning.pdf
-
Vulnerability_testing_stra20vulnerability20testing20strategy.pdf
00x11-5 Broad scope web application methodology - Extra's
-
Analyzing_javascript_files.pdf
-
What_the_ffuf_.pdf
-
Nuclei template cheat sheet
-
vulnerability scanning
-
Nuclei scanning
-
Running_your_scripts_on_a_VPS.pdf
-
Broad Scope Methodology.png
-
Directory_brute_forcing.pdf
-
quickly-identify-a-target-from-a-list-of-thousands-of-dns-records-multi-domain-r (3:18)
-
exploit-db-examples (3:15)
-
List_of_to20list20of20tools.pdf
-
you-are-probably-doing-directory-brute-forcing-wrong-here-s-why (5:43)
-
Quiz: Creating nuclei templates
00x12 API Testing
-
Postman - Theory (17:06)
-
API hacking with postman Part 1 - getting the basics down (20:57)
-
API hacking with postman Part 2 - importing the API description (3:33)
-
API hacking with postman Part 3 Pre-request scripts, tests and console (11:01)
-
API hacking with postman Part 4 - Getting dirty with data sources (8:03)
-
REST-API_goat_project.pdf
-
postman lab - Tiredful API.pdf
-
API Broken Access Control Through Replacing HTTP Method (5:14)
-
API hacking by Chaining postman into burp suite (8:15)
00x12 OWASP API top 10
-
API0 2019 What is an API?
-
API1 2019 Broken Object Level Authorization
-
API2 2019 Broken User Authentication
-
API3 2019 Excessive Data Exposure
-
API4 2019 Lack of rate limiting
-
API5 2019 Broken Function Level Authorization
-
API6 2019 Mass Assignment
-
API7 2019 Security Misconfiguration
-
API8 2019 Injection
-
API9 2019 Improper Assets Management
-
API top 10 - 0 through 3 (28:57)
-
OWASP API TOP 10 - 4 to 7 (31:47)
-
API8-2019 Injection (9:41)
-
API9-2019 improper asset management (7:16)
-
OWASP API top 10 - 10 insufficient logging and monitoring (1:31)
00x13 Mobile hacking
-
OWASP M1.2016 improper platform usage (5:24)
-
OWASP M2.2016 - insecure data storage (1:28)
-
OWASP M3.2016 Insecure communication (2:07)
-
OWASP M4.2016 Insecure authentication (3:38)
-
OWASP M5 Insufficient cryptography (2:22)
-
OWASP M6. Insecure authorization (3:07)
-
OWASP M7. bad code quality (5:35)
-
OWASP M8. Code tampering (2:36)
-
OWASP M9 Reverse engineering (2:33)
-
OWASP M10. Extranous functionality (1:56)
00x13 Mobile hacking - Setting up Android Lab
00x16 Password attacks
Extras
French Translation
