Table of contents Notes Notes PHP Stuff Login Forms XSS payloads tomcat stuff a bit forensics linux binary time stamps common methodology nmap file read bypass TLS restriction openssh lower version Active Directory LFI Privesc shells sqli windows php server executing .gif files transfer files over rsync windows windows-common File Transfer SMB stuff to try Kernel XP SMB share autorun stuff Powershell Potatoes privesc smbserver.py php file upload mysql non-interactive Metasploit windows machines DEVEL bounty Forest Heist Intelligence blackfield buff FUSE BankRobber pgpractice shenzi Linux privesc more shell rbash breakout Disk group wildcard stuff smtp postfix common searches python3 reverse shell boxes Beep cronos previse blunder static