Knowledge Base
Nearly every business had a straightforward obligation to pentest their network, internal and external, with potentially an application if they had. Find below the accurate resources to get it done.
- Application Penetration Testing
- AWS Pentesting
- DevOps Security
- Encryption
- Network Penetration Testing
- Pentesting Fundamentals
- Windows Hardening
Application Penetration Testing
- Cross-domain Referer Leakage
- Pentesting Basic Authentication
- Username Enumeration
- iOS Frida Objection Pentesting Cheat Sheet
- URL Redirection – Attack and Defense
- Jailbreaking iOS 13 with unc0ver
- X-Runtime Header Timing Attacks
- wkhtmltopdf File Inclusion Vulnerability
- API Mass Assignment Vulnerability
- Web Server TRACE Enabled
AWS Pentesting
- HTTP Request Smuggling (AWS)
- Create an AWS Read-Only Access Token
- ScoutSuite Quickstart
- Protecting S3 buckets using IAM and KMS
- Misconfigured S3 Bucket
- S3 Storage Does Not Require Authentication
DevOps Security
Encryption
- SSH Weak Key Exchange Algorithms Enabled
- SSH Weak MAC Algorithms Enabled
- TLS 1.0 Initialization Vector Implementation Information Disclosure Vulnerability
- OpenSSL ‘ChangeCipherSpec’ (CCS) MiTM Vulnerability
- Null Ciphers Supported
- ‘Export Ciphers’ Enabled
Network Penetration Testing
- F5 BIG-IP Cookie Remote Information Disclosure
- DNS Server Dynamic Update Record Injection
- rlogin Service Enabled
- Unauthenticated MongoDB – Attack and Defense
- SNMP ‘GETBULK’ Denial of Service
- Responder / MultiRelay Pentesting Cheatsheet
- NTP Mode 6 Vulnerabilities
- Cisco Information Disclosure (CVE-2014-3398 – CSCuq65542)
- SSH Tunneling for Pentesters
- .NET Handler Enumeration
- TLS_FALLBACK_SCSV Not Supported
- PHP Easter Eggs Enabled
- MySQL Multiple Vulnerabilities
- Debian Predictable Random Number Generator Weakness
- Cisco IKE Fragmentation Vulnerability
Pentesting Fundamentals
- GET vs POST
- Cache Controls Explained
- Cookie Security Attributes
- Essential Wireshark Skills for Pentesting
- Testing Cookie Based Session Management