# Notes ## Notes - [Welcome!](https://notes.nomanaziz.me/welcome.md) - [Penetration Testing](https://notes.nomanaziz.me/cybersecurity/penetration-testing.md) - [ELearnSecurity](https://notes.nomanaziz.me/cybersecurity/penetration-testing/elearnsecurity.md) - [eJPT](https://notes.nomanaziz.me/cybersecurity/penetration-testing/elearnsecurity/ejpt.md): V1 - [Footprinting & Scanning](https://notes.nomanaziz.me/cybersecurity/penetration-testing/elearnsecurity/ejpt/footprinting-and-scanning.md) - [Port Scanning](https://notes.nomanaziz.me/cybersecurity/penetration-testing/elearnsecurity/ejpt/footprinting-and-scanning/port-scanning.md) - [Mapping Networks](https://notes.nomanaziz.me/cybersecurity/penetration-testing/elearnsecurity/ejpt/footprinting-and-scanning/mapping-networks.md) - [Information Gathering](https://notes.nomanaziz.me/cybersecurity/penetration-testing/elearnsecurity/ejpt/information-gathering.md) - [Subdomain Enumeration](https://notes.nomanaziz.me/cybersecurity/penetration-testing/elearnsecurity/ejpt/information-gathering/subdomain-enumeration.md) - [Network Attacks](https://notes.nomanaziz.me/cybersecurity/penetration-testing/elearnsecurity/ejpt/network-attacks.md) - [Arp Poisoning](https://notes.nomanaziz.me/cybersecurity/penetration-testing/elearnsecurity/ejpt/network-attacks/arp-poisoning.md) - [Null Sessions](https://notes.nomanaziz.me/cybersecurity/penetration-testing/elearnsecurity/ejpt/network-attacks/null-sessions.md) - [Windows Shares](https://notes.nomanaziz.me/cybersecurity/penetration-testing/elearnsecurity/ejpt/network-attacks/windows-shares.md) - [Authentication Cracking](https://notes.nomanaziz.me/cybersecurity/penetration-testing/elearnsecurity/ejpt/network-attacks/authentication-cracking.md) - [Networking](https://notes.nomanaziz.me/cybersecurity/penetration-testing/elearnsecurity/ejpt/networking.md) - [Python Server to Receive Exfiltrated Data](https://notes.nomanaziz.me/cybersecurity/penetration-testing/elearnsecurity/ejpt/networking/python-server-to-receive-exfiltrated-data.md) - [CLI Tool to interact with HTTP/HTTPS](https://notes.nomanaziz.me/cybersecurity/penetration-testing/elearnsecurity/ejpt/networking/cli-tool-to-interact-with-http-https.md) - [Programming](https://notes.nomanaziz.me/cybersecurity/penetration-testing/elearnsecurity/ejpt/programming.md) - [C++ Keylogger](https://notes.nomanaziz.me/cybersecurity/penetration-testing/elearnsecurity/ejpt/programming/c++-keylogger.md) - [C++ Information Stealer](https://notes.nomanaziz.me/cybersecurity/penetration-testing/elearnsecurity/ejpt/programming/c++-information-stealer.md) - [System Attacks](https://notes.nomanaziz.me/cybersecurity/penetration-testing/elearnsecurity/ejpt/system-attacks.md) - [Pivoting](https://notes.nomanaziz.me/cybersecurity/penetration-testing/elearnsecurity/ejpt/system-attacks/pivoting.md) - [Backdoor](https://notes.nomanaziz.me/cybersecurity/penetration-testing/elearnsecurity/ejpt/system-attacks/backdoor.md) - [Vulnerability Assessment](https://notes.nomanaziz.me/cybersecurity/penetration-testing/elearnsecurity/ejpt/vulnerability-assessment.md) - [Web Attacks](https://notes.nomanaziz.me/cybersecurity/penetration-testing/elearnsecurity/ejpt/web-attacks.md) - [SQL Injection](https://notes.nomanaziz.me/cybersecurity/penetration-testing/elearnsecurity/ejpt/web-attacks/sql-injection.md) - [HTTP Verbs](https://notes.nomanaziz.me/cybersecurity/penetration-testing/elearnsecurity/ejpt/web-attacks/http-verbs.md) - [Web Server Fingerprinting](https://notes.nomanaziz.me/cybersecurity/penetration-testing/elearnsecurity/ejpt/web-attacks/web-server-fingerprinting.md) - [PortSwigger](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger.md): Web Security Course - [Cross-origin resource sharing (CORS)](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/cross-origin-resource-sharing-cors.md) - [Access-Control-Allow-Origin response header](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/cross-origin-resource-sharing-cors/access-control-allow-origin-response-header.md) - [Vulnerabilities arising from Misconfigurations](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/cross-origin-resource-sharing-cors/vulnerabilities-arising-from-misconfigurations.md) - [Server-generated ACAO header from client-specified Origin header](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/cross-origin-resource-sharing-cors/vulnerabilities-arising-from-misconfigurations/server-generated-acao-header-from-client-specified-origin-header.md) - [Errors parsing Origin headers](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/cross-origin-resource-sharing-cors/vulnerabilities-arising-from-misconfigurations/errors-parsing-origin-headers.md) - [Whitelisted null origin value](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/cross-origin-resource-sharing-cors/vulnerabilities-arising-from-misconfigurations/whitelisted-null-origin-value.md) - [Exploiting XSS via CORS trust relationships](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/cross-origin-resource-sharing-cors/vulnerabilities-arising-from-misconfigurations/exploiting-xss-via-cors-trust-relationships.md) - [Breaking TLS with poorly configured CORS](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/cross-origin-resource-sharing-cors/vulnerabilities-arising-from-misconfigurations/breaking-tls-with-poorly-configured-cors.md) - [Intranets and CORS without credentials](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/cross-origin-resource-sharing-cors/vulnerabilities-arising-from-misconfigurations/intranets-and-cors-without-credentials.md) - [Mitigations](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/cross-origin-resource-sharing-cors/vulnerabilities-arising-from-misconfigurations/mitigations.md) - [Sql Injection](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/sql-injection.md) - [Examining the database](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/sql-injection/examining-the-database.md) - [Retrieving data from other database tables](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/sql-injection/retrieving-data-from-other-database-tables.md) - [Blind SQL injection](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/sql-injection/blind-sql-injection.md) - [Mitigation](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/sql-injection/mitigation.md) - [TryHackMe](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme.md): All Learning Paths - [Main Methodology](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology.md) - [1. Reconnaissance](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/1.-reconnaissance.md) - [Google Dorking](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/1.-reconnaissance/google-dorking.md) - [Metadata Reader/Writer](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/1.-reconnaissance/metadata-reader-writer.md) - [Steghide - Stegnography](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/1.-reconnaissance/steghide-stegnography.md) - [OSINT Framework](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/1.-reconnaissance/osint-framework.md) - [2. Enumeration/Scanning](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/2.-enumeration-scanning.md) - [NFS Enumeration Tools](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/2.-enumeration-scanning/nfs-enumeration-tools.md) - [NMAP - Port Scanning](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/2.-enumeration-scanning/nmap-port-scanning.md) - [Web Enumeration Tools](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/2.-enumeration-scanning/web-enumeration-tools.md) - [SMB Enumeration Tools](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/2.-enumeration-scanning/smb-enumeration-tools.md) - [SMTP Enumeration Tools](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/2.-enumeration-scanning/smtp-enumeration-tools.md) - [Shodan - IOT Search Engine](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/2.-enumeration-scanning/shodan-iot-search-engine.md) - [FTP Enumeration Tools](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/2.-enumeration-scanning/ftp-enumeration-tools.md) - [Wordpress Enumeration Tools](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/2.-enumeration-scanning/wordpress-enumeration-tools.md) - [OWASP ZAP - WebApp Testing](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/2.-enumeration-scanning/owasp-zap-webapp-testing.md) - [BurpSuite - WebApp Testing](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/2.-enumeration-scanning/burpsuite-webapp-testing.md) - [MySQL Enumeration Tools](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/2.-enumeration-scanning/mysql-enumeration-tools.md) - [Wordlists](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/2.-enumeration-scanning/wordlists.md) - [3. Gaining Access / Exploitation](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation.md) - [Buffer Overflow](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/buffer-overflow.md): Stack based buffer overflow - [1. Immunity Debugger](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/buffer-overflow/1.-immunity-debugger.md) - [2. Mona Setup](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/buffer-overflow/2.-mona-setup.md) - [3. Spiking](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/buffer-overflow/3.-spiking.md) - [4. Fuzzing](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/buffer-overflow/4.-fuzzing.md) - [5. Crash Replication & Controlling EIP](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/buffer-overflow/5.-crash-replication-and-controlling-eip.md) - [6. Finding Bad Characters](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/buffer-overflow/6.-finding-bad-characters.md) - [7. Find a Jump Point](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/buffer-overflow/7.-find-a-jump-point.md) - [8. Generate Payload](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/buffer-overflow/8.-generate-payload.md) - [9. Prepend NOPs](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/buffer-overflow/9.-prepend-nops.md) - [10. Final Buffer](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/buffer-overflow/10.-final-buffer.md) - [Cryptography](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/cryptography.md) - [Hash Crack Tools](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/cryptography/hash-crack-tools.md) - [Online Password Cracking Tools](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/cryptography/online-password-cracking-tools.md) - [Encryption](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/cryptography/encryption.md) - [John the Ripper](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/cryptography/john-the-ripper.md) - [Evasion Techniques](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/evasion-techniques.md) - [Shells](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/shells.md) - [Powershell](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/shells/powershell.md) - [Msfvenom](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/shells/msfvenom.md) - [Meterpreter](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/shells/meterpreter.md) - [Metasploit -- multi/handler](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/shells/metasploit-multi-handler.md) - [Netcat](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/shells/netcat.md) - [Socat](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/shells/socat.md) - [Web Applications](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/web-applications.md) - [OWASP Top 10](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/web-applications/owasp-top-10.md) - [File Upload Vulnerabilities](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/web-applications/file-upload-vulnerabilities.md) - [Authentication Vulnerability](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/web-applications/authentication-vulnerability.md) - [XML External Entity (XXE)](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/web-applications/xml-external-entity-xxe.md) - [Cross-Site Scripting (XSS)](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/web-applications/cross-site-scripting-xss.md) - [ZTH: Obscure Web Vulns](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/web-applications/zth-obscure-web-vulns.md) - [Server Side Request Forgery (SSRF)](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/web-applications/server-side-request-forgery-ssrf.md) - [Insecure Direct Object Reference (IDOR)](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/web-applications/insecure-direct-object-reference-idor.md) - [ZTH : Continued](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/web-applications/zth-continued.md) - [File Inclusion Vulnerability](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/web-applications/file-inclusion-vulnerability.md) - [Local File Inclusion (LFI)](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/web-applications/file-inclusion-vulnerability/local-file-inclusion-lfi.md) - [Log Poisoning Attack (LFI to RCE via Log files)](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/web-applications/file-inclusion-vulnerability/log-poisoning-attack-lfi-to-rce-via-log-files.md) - [Windows Applications](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/windows-applications.md) - [Jenkins](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/windows-applications/jenkins.md) - [Windows Active Directory](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/windows-applications/windows-active-directory.md) - [Impacket's secretsdump.py](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/windows-applications/windows-active-directory/impackets-secretsdump.py.md): Retrieve User Account's Synced Password Hashes - [Kerberos](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/windows-applications/windows-active-directory/kerberos.md) - [Enumerating Users with Kerbrute](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/windows-applications/windows-active-directory/kerberos/enumerating-users-with-kerbrute.md) - [Enumerating SPN Accounts with Powershell](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/windows-applications/windows-active-directory/kerberos/enumerating-spn-accounts-with-powershell.md) - [Get SPN Account Ticket with Invoke-Kerberoast](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/windows-applications/windows-active-directory/kerberos/get-spn-account-ticket-with-invoke-kerberoast.md) - [Kerberoasting with Rubeus & Impacket](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/windows-applications/windows-active-directory/kerberos/kerberoasting-with-rubeus-and-impacket.md) - [AS-REP Roasting with Rubeus/GetNPUsers.py](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/windows-applications/windows-active-directory/kerberos/as-rep-roasting-with-rubeus-getnpusers.py.md) - [Pass the Ticket with mimikatz](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/windows-applications/windows-active-directory/kerberos/pass-the-ticket-with-mimikatz.md) - [Golden/Silver Ticket Attacks with mimikatz](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/windows-applications/windows-active-directory/kerberos/golden-silver-ticket-attacks-with-mimikatz.md) - [Kerberos Backdoors with mimikatz](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/windows-applications/windows-active-directory/kerberos/kerberos-backdoors-with-mimikatz.md) - [Harvesting and Brute-Forcing with Rubeus](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/windows-applications/windows-active-directory/kerberos/harvesting-and-brute-forcing-with-rubeus.md) - [Conclusion and Resources](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/windows-applications/windows-active-directory/kerberos/conclusion-and-resources.md) - [4. Post Exploitation](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation.md) - [Privilege Escalation](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/privilege-escalation.md) - [Linux](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/privilege-escalation/linux.md) - [1. Introduction](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/privilege-escalation/linux/1.-introduction.md) - [2. Scripts](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/privilege-escalation/linux/2.-scripts.md) - [3. Kernel Exploits](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/privilege-escalation/linux/3.-kernel-exploits.md) - [4. Service Exploits](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/privilege-escalation/linux/4.-service-exploits.md) - [5. Weak File Permissions](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/privilege-escalation/linux/5.-weak-file-permissions.md) - [6. Sudo](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/privilege-escalation/linux/6.-sudo.md) - [7. Cron jobs](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/privilege-escalation/linux/7.-cron-jobs.md) - [8. SUID/SGID Executable](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/privilege-escalation/linux/8.-suid-sgid-executable.md) - [9. CAP\_SETUID Capabilities Executable](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/privilege-escalation/linux/9.-cap_setuid-capabilities-executable.md) - [10. Passwords & Keys](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/privilege-escalation/linux/10.-passwords-and-keys.md) - [11. NFS](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/privilege-escalation/linux/11.-nfs.md) - [PrivEsc CTF Checklists](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/privilege-escalation/linux/privesc-ctf-checklists.md) - [Windows](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/privilege-escalation/windows.md) - [Token Impersonation](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/privilege-escalation/windows/token-impersonation.md) - [PrivEsc CTF Checklists](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/privilege-escalation/windows/privesc-ctf-checklists.md) - [Permission](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/privilege-escalation/windows/permission.md) - [Scripts](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/privilege-escalation/windows/scripts.md) - [Unquoted Service Path](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/privilege-escalation/windows/unquoted-service-path.md) - [Tools](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/tools.md) - [Meterpreter Modules](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/tools/meterpreter-modules.md) - [Impacket's Psexec](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/tools/impackets-psexec.md): MIcrosoft Remote Connect - [Impacket's mssqlclient.py](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/tools/impackets-mssqlclient.py.md) - [Firefox Decryptor](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/tools/firefox-decryptor.md) - [Socat - Reverse TCP Tunnel](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/tools/socat-reverse-tcp-tunnel.md) - [Windows Active Directory](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/windows-active-directory.md) - [Enumeration with Powerview](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/windows-active-directory/enumeration-with-powerview.md) - [Enumeration with Bloodhound (GUI)](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/windows-active-directory/enumeration-with-bloodhound-gui.md) - [Dumping Hashes with mimikatz](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/windows-active-directory/dumping-hashes-with-mimikatz.md) - [Golden Ticket Attacks with mimikatz](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/windows-active-directory/golden-ticket-attacks-with-mimikatz.md) - [Enumeration with Server Manager](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/windows-active-directory/enumeration-with-server-manager.md) - [Maintaining Access](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/windows-active-directory/maintaining-access.md) - [Additional Resources](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/windows-active-directory/additional-resources.md) - [5. Covering Tracks](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/5.-covering-tracks.md) - [6. Reporting](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/6.-reporting.md) - [Networking Concepts](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/networking-concepts.md) - [SSH Reverse Tunnels](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/networking-concepts/ssh-reverse-tunnels.md) - [Scripting](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/scripting.md) - [Curl](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/scripting/curl.md) - [Powershell](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/scripting/powershell.md) - [Basic Powershell Commands](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/scripting/powershell/basic-powershell-commands.md) - [Enumeration](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/scripting/powershell/enumeration.md) - [Web Extensions](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/web-extensions.md) - [Shodan](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/web-extensions/shodan.md) - [Wappalyzer](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/web-extensions/wappalyzer.md) - [Miscellaneous](https://notes.nomanaziz.me/cybersecurity/penetration-testing/miscellaneous.md) - [SMTP Enumeration](https://notes.nomanaziz.me/cybersecurity/penetration-testing/miscellaneous/smtp-enumeration.md) - [Nmap Advanced Scanning](https://notes.nomanaziz.me/cybersecurity/penetration-testing/miscellaneous/nmap-advanced-scanning.md) - [Persistence via Meterpreter](https://notes.nomanaziz.me/cybersecurity/penetration-testing/miscellaneous/persistence-via-meterpreter.md) - [DNS Enumeration](https://notes.nomanaziz.me/cybersecurity/penetration-testing/miscellaneous/dns-enumeration.md) - [NetBIOS & SMB](https://notes.nomanaziz.me/cybersecurity/penetration-testing/miscellaneous/netbios-and-smb.md) - [DHCP Starvation](https://notes.nomanaziz.me/cybersecurity/penetration-testing/miscellaneous/dhcp-starvation.md) - [Packet Manipulation](https://notes.nomanaziz.me/cybersecurity/penetration-testing/miscellaneous/packet-manipulation.md) - [Hash Cracking](https://notes.nomanaziz.me/cybersecurity/penetration-testing/miscellaneous/hash-cracking.md) - [MITM](https://notes.nomanaziz.me/cybersecurity/penetration-testing/miscellaneous/mitm.md) - [Msfvenom Payload in APK (Manual Embedding)](https://notes.nomanaziz.me/cybersecurity/penetration-testing/miscellaneous/msfvenom-payload-in-apk-manual-embedding.md) - [Blue Teaming](https://notes.nomanaziz.me/cybersecurity/blue-teaming.md) - [Digital Forensics & Incidence Response](https://notes.nomanaziz.me/cybersecurity/blue-teaming/digital-forensics-and-incidence-response.md) - [Memory Acquisition with LIME](https://notes.nomanaziz.me/cybersecurity/blue-teaming/digital-forensics-and-incidence-response/memory-acquisition-with-lime.md) - [Disk Analysis with Autopsy](https://notes.nomanaziz.me/cybersecurity/blue-teaming/digital-forensics-and-incidence-response/disk-analysis-with-autopsy.md) - [Data and Memory Collection with FireEye Redline](https://notes.nomanaziz.me/cybersecurity/blue-teaming/digital-forensics-and-incidence-response/data-and-memory-collection-with-fireeye-redline.md) - [Memory Forensice with Volatility](https://notes.nomanaziz.me/cybersecurity/blue-teaming/digital-forensics-and-incidence-response/memory-forensice-with-volatility.md) - [Intrusion Detection](https://notes.nomanaziz.me/cybersecurity/blue-teaming/intrusion-detection.md) - [Intrusion Detection Systems (IDS)](https://notes.nomanaziz.me/cybersecurity/blue-teaming/intrusion-detection/intrusion-detection-systems-ids.md) - [Threat Monitoring with Security Information & Event Management (SIEM)](https://notes.nomanaziz.me/cybersecurity/blue-teaming/intrusion-detection/threat-monitoring-with-security-information-and-event-management-siem.md) - [Security Event Monitoring](https://notes.nomanaziz.me/cybersecurity/blue-teaming/intrusion-detection/security-event-monitoring.md) - [Host Based Intrusion Detection System (HIDS) - OSSEC](https://notes.nomanaziz.me/cybersecurity/blue-teaming/intrusion-detection/host-based-intrusion-detection-system-hids-ossec.md) - [Miscellaneous](https://notes.nomanaziz.me/cybersecurity/blue-teaming/miscellaneous.md) - [Docker Image Security Analysis with Trivy](https://notes.nomanaziz.me/cybersecurity/blue-teaming/miscellaneous/docker-image-security-analysis-with-trivy.md): This process allows us to detect vulnerabiites in docker images before deploying or running them. - [Infrastructure as a Code (IaC)](https://notes.nomanaziz.me/devops/infrastructure-as-a-code-iac.md) - [Ansible](https://notes.nomanaziz.me/devops/infrastructure-as-a-code-iac/ansible.md) - [1. Playbooks](https://notes.nomanaziz.me/devops/infrastructure-as-a-code-iac/ansible/1.-playbooks.md) - [2. Modules](https://notes.nomanaziz.me/devops/infrastructure-as-a-code-iac/ansible/2.-modules.md) - [3. Inventory](https://notes.nomanaziz.me/devops/infrastructure-as-a-code-iac/ansible/3.-inventory.md) - [4. Roles](https://notes.nomanaziz.me/devops/infrastructure-as-a-code-iac/ansible/4.-roles.md) - [5. Ansible Tower](https://notes.nomanaziz.me/devops/infrastructure-as-a-code-iac/ansible/5.-ansible-tower.md) - [Terraform](https://notes.nomanaziz.me/devops/infrastructure-as-a-code-iac/terraform.md): Learned from https://www.youtube.com/@DevOpsDirective - [1. Overview](https://notes.nomanaziz.me/devops/infrastructure-as-a-code-iac/terraform/1.-overview.md) - [2. Modify Resources](https://notes.nomanaziz.me/devops/infrastructure-as-a-code-iac/terraform/2.-modify-resources.md) - [3. Delete Resources](https://notes.nomanaziz.me/devops/infrastructure-as-a-code-iac/terraform/3.-delete-resources.md) - [4. Reference Resources](https://notes.nomanaziz.me/devops/infrastructure-as-a-code-iac/terraform/4.-reference-resources.md) - [5. Terraform Files](https://notes.nomanaziz.me/devops/infrastructure-as-a-code-iac/terraform/5.-terraform-files.md) - [6. Terraform State Commands](https://notes.nomanaziz.me/devops/infrastructure-as-a-code-iac/terraform/6.-terraform-state-commands.md) - [7. Terraform Output](https://notes.nomanaziz.me/devops/infrastructure-as-a-code-iac/terraform/7.-terraform-output.md) - [8. Target Resources](https://notes.nomanaziz.me/devops/infrastructure-as-a-code-iac/terraform/8.-target-resources.md) - [9. Terraform Variables](https://notes.nomanaziz.me/devops/infrastructure-as-a-code-iac/terraform/9.-terraform-variables.md) - [10. Expressions + Functions](https://notes.nomanaziz.me/devops/infrastructure-as-a-code-iac/terraform/10.-expressions-+-functions.md) - [11. Meta-Arguments](https://notes.nomanaziz.me/devops/infrastructure-as-a-code-iac/terraform/11.-meta-arguments.md) - [12. Modules](https://notes.nomanaziz.me/devops/infrastructure-as-a-code-iac/terraform/12.-modules.md) - [13. Managing Multiple Environments](https://notes.nomanaziz.me/devops/infrastructure-as-a-code-iac/terraform/13.-managing-multiple-environments.md) - [14. Testing Terraform Code](https://notes.nomanaziz.me/devops/infrastructure-as-a-code-iac/terraform/14.-testing-terraform-code.md) - [15. Final Thoughts](https://notes.nomanaziz.me/devops/infrastructure-as-a-code-iac/terraform/15.-final-thoughts.md) - [Orchestration](https://notes.nomanaziz.me/devops/orchestration.md) - [Kubernetes](https://notes.nomanaziz.me/devops/orchestration/kubernetes.md): Learned from https://www.youtube.com/c/techworldwithnana youtube channel - [1. Main K8s Components](https://notes.nomanaziz.me/devops/orchestration/kubernetes/1.-main-k8s-components.md) - [2. K8s Architecture](https://notes.nomanaziz.me/devops/orchestration/kubernetes/2.-k8s-architecture.md) - [3. Minikube & Kubectl](https://notes.nomanaziz.me/devops/orchestration/kubernetes/3.-minikube-and-kubectl.md) - [4. YAML Configuration File](https://notes.nomanaziz.me/devops/orchestration/kubernetes/4.-yaml-configuration-file.md) - [5. K8s Namespaces](https://notes.nomanaziz.me/devops/orchestration/kubernetes/5.-k8s-namespaces.md) - [6. K8s Ingress](https://notes.nomanaziz.me/devops/orchestration/kubernetes/6.-k8s-ingress.md) - [7. Helm - Package Manager of K8s](https://notes.nomanaziz.me/devops/orchestration/kubernetes/7.-helm-package-manager-of-k8s.md) - [8. K8 Volumes](https://notes.nomanaziz.me/devops/orchestration/kubernetes/8.-k8-volumes.md) - [9. K8 StatefulSet](https://notes.nomanaziz.me/devops/orchestration/kubernetes/9.-k8-statefulset.md) - [10. K8 Services](https://notes.nomanaziz.me/devops/orchestration/kubernetes/10.-k8-services.md) - [Blockchain](https://notes.nomanaziz.me/development/blockchain.md) - [FreeCodeCamp Course](https://notes.nomanaziz.me/development/blockchain/freecodecamp-course.md): Blockchain, Solidity, and Full Stack Web3 Development with JavaScript - [1. Introduction](https://notes.nomanaziz.me/development/blockchain/freecodecamp-course/1.-introduction.md) - [2. Solidity Basics](https://notes.nomanaziz.me/development/blockchain/freecodecamp-course/2.-solidity-basics.md) - [3. Storage Factory](https://notes.nomanaziz.me/development/blockchain/freecodecamp-course/3.-storage-factory.md) - [4. Fund Me](https://notes.nomanaziz.me/development/blockchain/freecodecamp-course/4.-fund-me.md) - [5. Ethers.js](https://notes.nomanaziz.me/development/blockchain/freecodecamp-course/5.-ethers.js.md) - [6. Hardhat](https://notes.nomanaziz.me/development/blockchain/freecodecamp-course/6.-hardhat.md) - [7. Hardhat | Fund Me](https://notes.nomanaziz.me/development/blockchain/freecodecamp-course/7.-hardhat-or-fund-me.md) - [8. Contract Lottery | Raffle](https://notes.nomanaziz.me/development/blockchain/freecodecamp-course/8.-contract-lottery-or-raffle.md) - [9. IPFS](https://notes.nomanaziz.me/development/blockchain/freecodecamp-course/9.-ipfs.md) - [10. ERC20s](https://notes.nomanaziz.me/development/blockchain/freecodecamp-course/10.-erc20s.md) - [11. DeFi & Aave](https://notes.nomanaziz.me/development/blockchain/freecodecamp-course/11.-defi-and-aave.md) - [12. NFTs | Encoding](https://notes.nomanaziz.me/development/blockchain/freecodecamp-course/12.-nfts-or-encoding.md) - [13. Reentrancy Attack](https://notes.nomanaziz.me/development/blockchain/freecodecamp-course/13.-reentrancy-attack.md) - [Backend](https://notes.nomanaziz.me/development/backend.md) - [NodeJs](https://notes.nomanaziz.me/development/backend/nodejs.md) - [Introduction](https://notes.nomanaziz.me/development/backend/nodejs/introduction.md) - [Additional Concepts](https://notes.nomanaziz.me/development/backend/nodejs/additional-concepts.md) - [ExpressJs](https://notes.nomanaziz.me/development/backend/nodejs/expressjs.md) - [Database](https://notes.nomanaziz.me/development/database.md) - [SQL](https://notes.nomanaziz.me/development/database/sql.md) - [Basics](https://notes.nomanaziz.me/development/database/sql/basics.md): Course : https://www.postgresqltutorial.com | Exercises : https://pgexercises.com - [1. Querying Data](https://notes.nomanaziz.me/development/database/sql/basics/1.-querying-data.md) - [2. Filtering Data](https://notes.nomanaziz.me/development/database/sql/basics/2.-filtering-data.md) - [3. Joining Multiple Tables](https://notes.nomanaziz.me/development/database/sql/basics/3.-joining-multiple-tables.md) - [4. Grouping Data](https://notes.nomanaziz.me/development/database/sql/basics/4.-grouping-data.md) - [5. Set Operations](https://notes.nomanaziz.me/development/database/sql/basics/5.-set-operations.md) - [6. Grouping Sets, Cube, and Rollup](https://notes.nomanaziz.me/development/database/sql/basics/6.-grouping-sets-cube-and-rollup.md) - [7. Subquery](https://notes.nomanaziz.me/development/database/sql/basics/7.-subquery.md) - [8. Common Table Expressions](https://notes.nomanaziz.me/development/database/sql/basics/8.-common-table-expressions.md) - [9. Modifying Data](https://notes.nomanaziz.me/development/database/sql/basics/9.-modifying-data.md) - [10. Transactions](https://notes.nomanaziz.me/development/database/sql/basics/10.-transactions.md) - [11. Import & Export Data](https://notes.nomanaziz.me/development/database/sql/basics/11.-import-and-export-data.md) - [12. Managing Tables](https://notes.nomanaziz.me/development/database/sql/basics/12.-managing-tables.md) - [Testing](https://notes.nomanaziz.me/development/testing.md) - [Test Driven Development (TDD)](https://notes.nomanaziz.me/development/testing/test-driven-development-tdd.md): Source : https://www.youtube.com/@Fireship - [Jest js](https://notes.nomanaziz.me/development/testing/jest-js.md) - [Cypress js](https://notes.nomanaziz.me/development/testing/cypress-js.md)