Week 1 & Week 2 Notes

LOLBINS

(Living off the Land binaries)

LOLBINS URL

• Memorize 10-15
• These are binaries already on the machine
• Executables that are normal already ready to be run and used for a multitude of things
• Can be used to download files and create alternate data streams

---

• net.exe
  • manage services, create/delete accounts, list network sessions and share
• net.exe
  • command executed when you execute net.exe
• net user theUsername thePassword /add

---

SCOPE

• The scope of a pen test is the range of what you can do what systems can you test how far can you go. If you go outside of scope you break contract and that is illegal

Point of Contacts

• You will have a point of contact who will regulate what things can be tested and what cannot be tested I think

Time Range

• How much time do you have for this Pen test how far can you go with the time you have what can you find

TTP

• Tactics Techniques and Procedures used for ethical hacking

RAT

• Remote Access Trojan