Learn to hack - Revision history

Booda: /* General Resources */

2024-04-12T15:52:45Z

General Resources

← Older revision		Revision as of 15:52, 12 April 2024
Line 33:		Line 33:
	* Application Analysis: https://youtu.be/FqnSAa2KmBI		* Application Analysis: https://youtu.be/FqnSAa2KmBI
	* The Bug Hunter's Methodology v4.0: https://youtu.be/p4JgIu1mceI?si=jXcYksd4UqodZDBF		* The Bug Hunter's Methodology v4.0: https://youtu.be/p4JgIu1mceI?si=jXcYksd4UqodZDBF
			* Zseanos Methodology: https://www.bugbountyhunter.com/methodology/zseanos-methodology.pdf

	Practice labs:		Practice labs:
	* https://www.hackthebox.com		* https://www.hackthebox.com

Booda: /* General Resources */

2024-04-12T12:44:37Z

General Resources

← Older revision		Revision as of 12:44, 12 April 2024
Line 15:		Line 15:
	* Translated: [https://web.archive.org/web/20230404175503if_/https://cdn-150.anonfiles.com/satbX2i8z2/75a3be58-1680631481/Conti_playbook_translated.pdf Conti playbook]		* Translated: [https://web.archive.org/web/20230404175503if_/https://cdn-150.anonfiles.com/satbX2i8z2/75a3be58-1680631481/Conti_playbook_translated.pdf Conti playbook]
	* LockBit 3.0 CobaltStrike: [https://web.archive.org/web/20230701141731if_/https://cdn-147.anonfiles.com/s1cbD0z3z3/4536e4f8-1688221595/LockBit-CobaltStrike.pdf LockBit 3.0 Guide]		* LockBit 3.0 CobaltStrike: [https://web.archive.org/web/20230701141731if_/https://cdn-147.anonfiles.com/s1cbD0z3z3/4536e4f8-1688221595/LockBit-CobaltStrike.pdf LockBit 3.0 Guide]
			* Hacking WordPress with [https://github.com/wpscanteam/wpscan WPScan] and [https://docs.metasploit.com/docs/using-metasploit/getting-started/nightly-installers.html Metasploit]: https://www.exploit-db.com/docs/english/45556-wordpress-penetration-testing-using-wpscan-and-metasploit.pdf

	Resources that assume a tech or hacking background:		Resources that assume a tech or hacking background:

Enlacehacktivista at 22:37, 21 November 2023

2023-11-21T22:37:19Z

← Older revision		Revision as of 22:37, 21 November 2023
Line 38:		Line 38:
	* https://lab.pentestit.ru		* https://lab.pentestit.ru
	* https://overthewire.org/wargames		* https://overthewire.org/wargames
			* https://www.vulnhub.com/

	Appsec:		Appsec:

Mxwgn: minor improviments

2023-11-16T19:49:25Z

minor improviments

← Older revision		Revision as of 19:49, 16 November 2023
Line 76:		Line 76:
	==== Recommended Applications ====		==== Recommended Applications ====

	For Jabber/XMPP, make sure to enable OTR or OMEMO encryption. For ~~email~~ use PGP for encryption. For file sharing use onionshare.		For Jabber/XMPP, make sure to enable OTR or OMEMO encryption. For e-mail use PGP for encryption. For file sharing use onionshare.

	For more information on recommended applications, see [[Secure Messaging Applications]]		For more information on recommended applications, see [[Secure Messaging Applications]]
Line 156:		Line 156:

	=== Reverse Engineering ===		=== Reverse Engineering ===
	As was seen by [https://enlacehacktivista.org/index.php?title=Hack_Back!_A_DIY_Guide Phineas Fisher], highly motivated hacktivists who seek to hack their targets by any means necessary should consider ~~0day~~ research and exploit development reverse engineering applications and services that their target may be running to gain an initial foothold and perform post exploitation.		As was seen by [https://enlacehacktivista.org/index.php?title=Hack_Back!_A_DIY_Guide Phineas Fisher], highly motivated hacktivists who seek to hack their targets by any means necessary should consider 0-day research and exploit development, reverse engineering applications and services that their target may be running to gain an initial foothold and perform post exploitation.

	See [[Reverse Engineering]]		See [[Reverse Engineering]]
Line 162:		Line 162:
	== Product-specific Hacking ==		== Product-specific Hacking ==

	=== ~~GSuite~~ ===		=== Google Workspace ===
	https://www.slideshare.net/dafthack/ok-google-how-do-i-red-team-gsuite		https://www.slideshare.net/dafthack/ok-google-how-do-i-red-team-gsuite

Line 169:		Line 169:
	* VMware Workspace ONE Access and Identity Manager RCE via SSTI. [https://attackerkb.com/topics/BDXyTqY1ld/cve-2022-22954/rapid7-analysis CVE-2022-22954:] Unauthenticated server-side template injection. [https://github.com/tunelko/CVE-2022-22954-PoC Mass Exploit]		* VMware Workspace ONE Access and Identity Manager RCE via SSTI. [https://attackerkb.com/topics/BDXyTqY1ld/cve-2022-22954/rapid7-analysis CVE-2022-22954:] Unauthenticated server-side template injection. [https://github.com/tunelko/CVE-2022-22954-PoC Mass Exploit]

	=== ~~RocketChat~~ ===		=== Rocket.Chat ===
	* Account hijacking and RCE as admin: [https://web.archive.org/web/20210805092939/https://edbrsk.dev/content/real-cases/how-I-compromised-300-stores-and-a-spanish-consultancy https://edbrsk.dev/content/real-cases/how-I-compromised-300-stores-and-a-spanish-consultancy]		* Account hijacking and RCE as admin: [https://web.archive.org/web/20210805092939/https://edbrsk.dev/content/real-cases/how-I-compromised-300-stores-and-a-spanish-consultancy https://edbrsk.dev/content/real-cases/how-I-compromised-300-stores-and-a-spanish-consultancy]

Booda: /* Attacking Common Services */

2023-10-08T21:09:41Z

Attacking Common Services

← Older revision		Revision as of 21:09, 8 October 2023
Line 89:		Line 89:

	=== Attacking Common Services ===		=== Attacking Common Services ===
	Your targets will likely use many services either externally or internally, this could be SSH, RDP, SMB, etc. It's important to know their common misconfigurations, attack vectors. their attack surface and how to hack these various protocols which may serve as the initial access vector. Here we cover various tools, techniques, common misconfigurations, tips and tricks and we cover both internal and external (publicly accessible) networks.		Your targets will likely use many services either externally or internally, this could be SSH, RDP, SMB, etc. It's important to know their common misconfigurations, attack vectors, their attack surface and how to hack these various protocols which may serve as the initial access vector. Here we cover various tools, techniques, common misconfigurations, tips and tricks and we cover both internal and external (publicly accessible) networks.

	See [[Common Service Attacks]]		See [[Common Service Attacks]]

Booda: /* Initial Access */

2023-09-24T16:33:54Z

Initial Access

← Older revision		Revision as of 16:33, 24 September 2023
Line 83:		Line 83:

	There are many ways to gain [https://attack.mitre.org/tactics/TA0001/ initial access] into a targets network, from phishing, buying credential access, buying infected machines in corporate networks, password spraying, performing a targeted [https://www.ired.team/offensive-security-experiments/offensive-security-cheetsheets penetration test] and spray and pray scanning for vulnerabilities and hacking in. Here we list some resources in these regards.		There are many ways to gain [https://attack.mitre.org/tactics/TA0001/ initial access] into a targets network, from phishing, buying credential access, buying infected machines in corporate networks, password spraying, performing a targeted [https://www.ired.team/offensive-security-experiments/offensive-security-cheetsheets penetration test] and spray and pray scanning for vulnerabilities and hacking in. Here we list some resources in these regards.

			=== Common Initial Access TTPs ===

	For more information on gaining a foothold, see [[Initial Access Tactics, techniques and procedures]]		For more information on gaining a foothold, see [[Initial Access Tactics, techniques and procedures]]

Booda: /* Recommended Reading - The Library */

2023-09-21T15:05:50Z

Booda: /* Recommended Reading - The Library */

2023-09-21T15:05:31Z

Booda: /* Attacking Common Services */

2023-09-21T14:37:15Z

Attacking Common Services

← Older revision		Revision as of 14:37, 21 September 2023
Line 87:		Line 87:

	=== Attacking Common Services ===		=== Attacking Common Services ===
	Your targets will likely use many services either externally or internally, this could be SSH, RDP, SMB, etc. It's important to know their common misconfigurations, attack vectors. their attack surface and how to hack these various protocols which may serve as the initial access vector. Here we cover various tools, techniques, common misconfigurations, tips and tricks and we cover both internal ~~networks~~ and external (publicly accessible).		Your targets will likely use many services either externally or internally, this could be SSH, RDP, SMB, etc. It's important to know their common misconfigurations, attack vectors. their attack surface and how to hack these various protocols which may serve as the initial access vector. Here we cover various tools, techniques, common misconfigurations, tips and tricks and we cover both internal and external (publicly accessible) networks.

	See [[Common Service Attacks]]		See [[Common Service Attacks]]

Booda: /* Attacking Common Services */

2023-09-21T14:36:24Z

Attacking Common Services

← Older revision		Revision as of 14:36, 21 September 2023
Line 87:		Line 87:

	=== Attacking Common Services ===		=== Attacking Common Services ===
			Your targets will likely use many services either externally or internally, this could be SSH, RDP, SMB, etc. It's important to know their common misconfigurations, attack vectors. their attack surface and how to hack these various protocols which may serve as the initial access vector. Here we cover various tools, techniques, common misconfigurations, tips and tricks and we cover both internal networks and external (publicly accessible).

	See [[Common Service Attacks]]		See [[Common Service Attacks]]

← Older revision		Revision as of 15:05, 21 September 2023
Line 57:		Line 57:
	See recommended reading [https://libgen.fun books] that will aid you in your learning. See [[recommended reading in the library]]		See recommended reading [https://libgen.fun books] that will aid you in your learning. See [[recommended reading in the library]]

	* [https://theanarchistlibrary.org/special/index The Anarchist Library:] ([http://libraryqxxiqakubqv3dc2bend2koqsndbwox2johfywcatxie26bsad.onion/special/index Tor])		* [https://theanarchistlibrary.org/special/index The Anarchist Library] ([http://libraryqxxiqakubqv3dc2bend2koqsndbwox2johfywcatxie26bsad.onion/special/index Tor])
	* Phrack: http://phrack.org		* Phrack: http://phrack.org

← Older revision		Revision as of 15:05, 21 September 2023
Line 57:		Line 57:
	See recommended reading [https://libgen.fun books] that will aid you in your learning. See [[recommended reading in the library]]		See recommended reading [https://libgen.fun books] that will aid you in your learning. See [[recommended reading in the library]]

	* [https://theanarchistlibrary.org/special/index The Anarchist Library:] ([http://libraryqxxiqakubqv3dc2bend2koqsndbwox2johfywcatxie26bsad.onion/special/index ~~onion~~])		* [https://theanarchistlibrary.org/special/index The Anarchist Library:] ([http://libraryqxxiqakubqv3dc2bend2koqsndbwox2johfywcatxie26bsad.onion/special/index Tor])
	* Phrack: http://phrack.org		* Phrack: http://phrack.org