Oat's Notes

                     _____           
                    j_____j          
                   /_____/_\         
        o8Oo./     |_(~)_| |         
     ._o8o8o8Oo_.  | )_( | |         
      \========/   |(@_@)| |         
       \______/    |_____|,'     
                                     
         Enjoy your Oats!            

These are some of the InfoSec / Pentesting notes I made during CTFs, HackTheBox and the usual certificates.

I am slowly collecting and cleaning these up for my own use. Maybe they are useful to you as well.

Essentials

• File Transfers
• SSH
• Hashes
• Metasploit Framework
• MSFVenom Cheatsheet
• Reverse Shell One-Liners
• Wordlists
• MySQL
• Shell Upgrades

Network Recon

• Nmap
• HTTP
  • WFuzz
  • Nikto
  • Wordpress and xmlrpc
• SMB
• Email Servers
• DNS
• Other Tools

Misc

• Office Macros

Web Exploitation

• SQL Injections
• SQLMap
• PHP
  • Insecure File Uploads
  • LFI / RFI
• Server-side Template Injections
• Path Traversal
• CSRF
• SSRF
• XSS

Privilege Escalation

• Linux Local Enumeration Checklist

  • Linux Commands
  • Linux Enum Scripts
  • SUDO
  • Cron
  • SUID/SGID
  • Service Exploits
  • NFS

• Windows Local Enumeration Checklist

  • Windows Commands
  • Windows Enum Scripts
  • Service Exploitation
  • Potatoes
  • SeBackupPrivilege
  • SeLoadDriverPrivilege
  • Popular Exploits

Binary Exploitation

• Binary inspect tools
• Basic Buffer Overflows
• Return Oriented Programming (ROP)

Active Directory

• AD Network Recon