Xanderux/Pentest-notes

Pentest-notes

Exploitation

Living off the land

• Linux : GTFOBins
• Windows : LOLBAS

Paper courses

• Transcribed video lessons of HackerOne to pdf's

Recon

• Recon Like A Boss by @dirtycoder0124

XSS

• Bypassing XSS Detection-Mechanisms

Malwares

• Malware Analysis, University of Cincinnati

Learning Platforms

Online

XSS

• The unescape() room: dynamically generates levels
• XSS Challenges

General

• Bug bounty notes : Learn to hack with community-created challenges
• Hack The Box : Penetration Testing Labs

Offline

SQLi

• SQLi platform : vulnerable WEB application in order to understand SQL injections basics

General

• Damn Vulnerable Web Application (DVWA) docker run --rm -it -p 80:80 vulnerables/web-dvwa
• OWASP Juice Shop docker run --rm -p 3000:3000 bkimminich/juice-shop

Certifications

OSCP

Report

• Thunderson's Journey To The OSCP

Training

• Prepare to OSCP
• OSCP-like Vulnhub VMs by @NetSecFocus
• OSCP-like Vulnhub VMs by @abatchy

Youtube

• STÖK (Bug bounty, vlogs...)