KillChain Compendium: PenTest & Security Handbook

Go to file

Stefan Friese bed4ce36cf bump		2022-12-20 01:06:22 +01:00
Cryptography	update RSA	2022-11-22 00:57:32 +01:00
Enumeration	…
Exfiltration	…
Exploits	bump	2022-12-12 22:41:03 +01:00
Forensics	bump	2022-12-20 01:06:22 +01:00
Hashes	…
Miscellaneous	bump	2022-12-20 01:06:22 +01:00
Open Source Intelligence	…
Persistence	…
Post Exploitation	bump	2022-12-12 20:03:55 +01:00
Reverse Engineering	bump	2022-12-20 01:06:22 +01:00
Reverse Shells	added MongoDB specifics	2022-12-09 00:00:02 +01:00
Steganography	…
README.md	…

README.md

Pentesting

Pentesting Execution Standard Authorized audit of security systems of computers and networks.
Rules of Engagement -- Cheat Sheet and redteam.guide ROEs
- Permissions
- Engagement --> internal/external pentest or adversary emulation of APTs
- Scope --> networks, IPs, exfilration of data, which stage, downtime, DDoS
- Rules
NDA

Campaign

Checklist
vectr.io
Engagement --> Concept of Operations (CONOPS), Resource and Personnel Requirements, Timelines
Operations --> Operators, Known Information, Responsibilities
Mission --> Exact commands to run and execution time of the engagement
Remediation --> Report, Remediation consultation

Methodology

Steps
- Reconnaissance
- Enumeration/Scanning
- Gaining Access
- Privilege Escalation
- Covering Tracks
- Reporting

Reconnaissance

Duck / SearX / metacrawler / google
Wikipedia
Shodan.io
PeopleFinder.com
who.is
sublist3r
hunter.io
builtwith.com
wappalyzer

Enumeration

nmap
nikto
gobuster
dirbuster
metasploit
enum4linux / linpeas / winpeas / linenum

Exploitation

Post Exploitation

Pivoting

Privilege Escalation

Vertically or horizontally

Covering Tracks

Reporting

Includes
- Vulnerabilities
- Criticality
- Description
- Countermeasures
- Finding summary

Frameworks

Testing Webapps

Two methods

Every Page and its functions one by one
Test by stages
- Authorization
- Authentication
- Injection
- Client Side Controls
- Application Logic