Notes created for preparation of EJPTv2

• Information Gathering and Enumeration

  • Passive
  • Active
  • SMB
  • FTP
  • SSH
  • HTTP
  • SQL
  • SMTP
  • Nessus

• Metasploit

  • Information Enumeration Modules
  • Vulnerability Scanning

• Host-Based Attacks - Windows

  • Webdav
  • SMB
  • RDP
  • WinRM
  • Privilege Escalation
  • File System Vulnerabilities
  • Credential Dumping

• Host-Based Attacks - Linux

  • HTTP
  • FTP
  • SSH
  • SAMBA
  • Privilege Escalation
  • Password Cracking

• Network-Based Attacks

• Exploitation - Windows

  • WinRM
  • SSH
  • FTP
  • Web Delivery
  • SMB
  • HTTP
  • MySQL

• Exploitation - Linux

  • FTP
  • HTTP
  • SAMBA
  • SSH
  • SMTP
  • PHP
  • MySQL

• Post-Exploitation - Windows

  • Enumeration
  • Privilege Escalation
  • Persistence
  • Hash-dumping-cracking
  • Clearing Tracks
  • Keylogger

• Post-Exploitation - Linux

  • Enumeration
  • Privilege Escalation
  • Persistence
  • Hash-dumping-cracking
  • Clearing Tracks
  • Upgrade Shell

• Post-Exploitation - Miscellaneous

  • Transfer Files
  • Pivoting

• Web Application Pentesting

  • Directory Enumeration
  • SQL Injection
  • XSS
  • HTTP login
  • WMAP