1. Hacking Infrastructure
- Infra Planification
  Infrastructure Diagram & Requirements
- Infra Configuration
  Attack Server
  C2 Server
  Redirector
  Payload Server
  Phishing Server
2. Reconnaissance and Information Gathering
- OSINT (Open-Source Intelligence)
  Enviroment
  Android Virtualization
  Web Browsers
  Sock Puppets (Covert Accounts)
  All-purpose Advanced Tools
  Search Engines
  People Search Engines
  Websites & Domains
  IP Addresses
  Users & Emails
  Social Media
  Documents
  Images
  Videos & Lives
  Metadata
  Telephone Numbers
  Online Maps
  Virtual Currencies
  Leaks, Breaches, Logs and Ransomware
  Government & Business Records
- Port, Version, Vuln Scanning
  Nmap
  Shodan
  Network Mapping
  Researching Potential Vulnerabilities
  Dark Web Scanning
3. Social Engeniering
4. Exploitation
5. Privesc and Post-explotation
6. Evasion Techniques
- Linux - Evasion Techniques
- Windows - Evasion Techniques
  Detection Mechanisms & Evasion Techniques
  Microsoft Defender Antivirus
  AMSI & UAC Bypasses
  AppLocker and Powershell CLM
  PowerShell Script Block Logging
  MDE (Microsoft Defender for Endpoint)
  Altered scripts & Automations
  Command Reimplementation C#/C
  EDR Killing
7. Tunneling
8. Profesional Reports

Powered by GitBook

On this page

Authentication

Authentication vulnerabilities OAuth 2.0 Authentication Vulnerabilities Access Control

PreviousCMS's: Content Management Systems NextAuthentication vulnerabilities