Offensive Cybersecurity 4/4

Opening-Offensive Cybersecurity

Introduction to Offensive Security

Introduction to External Tests

Information gathering techniques

Passive Information Gathering

Active Information Gathering

OSINT Tools

Social Engineering

External Tests- מבחן

Network Scanning

File Transfer

ARP and DNS Spoofing

Encryption, Hashes and Cracking

Password Attacks

Mimikatz

Pass The Hash

Internal Tests- מבחן

Information Gathering

Search for Interesting Files

History Search

Automated Enumeration

Service Binary Hijacking

Scheduled Tasks

Windows Privilege Escalation- מבחן

Files and Users Privileges

Information Gathering- Linux Privilege Escalation

User History

Scheduled Tasks- Linux Privilege Escalation

Setuid Binaries

Sudo Enumeration

Passwd File Enumeration

Automated Enumeration-Linux Privilege Escalation

Linux Privilege Escalation-מבחן

Active Directory Authentication (NTLM vs Kerberos)

Manual Information Gathering

SharpHound & BloodHound

Enumerating Domain Shares

Password Attacks

Kerberoasting

Cached AD Credentials

AS-REP Roasting

AD Enumeration- מבחן

Fingerprinting Web Servers

Introduction to Burpsuite and ZAP

Directory / Subdomain Brute Force

Directory Traversal

OS Command Injection

LFI & RFI

XSS

CSRF & SSRF

SQL Injection

XXE

Methodology

מבחן -Web Application Penetration Test