UNDERCODE COMMUNITY

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑11 WEEKS NETWORK HACKING/CRACKING LESSONS :/Created & uploaded to git

T O P I C S :

Week 1 Lessons:
Setting Up A Penetration Testing Environment - This will focus on setting up a lab environment, specifically VMWare, Kali Linux, and our lab VMs. The lesson will briefly introduce important aspects of each set up (e.g. Snapshots in VMWare, the Kali Linux toolset, etc.) with the intention to build upon those aspects in later lessons.

How to Keep Notes Effectively - This lesson will cover the importance of note taking from a pentester standpoint. The lesson will introduce the Kali Linux built-in note-taking application, KeepNote, and discuss how to take notes effectively. Taking notes during a penetration test is incredibly important as it allows a pentester reference points when writing their final report, discussing timelines with their team or manager, or even discussing specifics of a pentest with a client.

Week 2 & 3 Lessons:
Introductory Python - Similar to Linux, we will spend some time learning basic Python scripting, which will be essential to our future endeavors as penetration testers.

Week 4 Lessons:

The Art of Reconnaissance - This lesson will discuss reconnaissance in depth and cover common tools used in the process. Some of the tools that will be covered are the OSINT Framework, SET, theHarvester, Bluto, Google Dorks, and Shodan. More tools will likely be added as the lesson is written.

Week 5 Lesson:

Week 6 Lesson:
Enumeration for the win - The intent of this lesson is to provide an overview of basic enumeration tactics and then dive deep into specific tools used for common ports found in penetration testing. For example, if we find port 80 open on a scan (HTTP), we will likely want to know what service is running and enumerate that service for potential exploits at a high level.

Week 7 Lesson:
Gaining a Shell with Metasploit - This lesson will cover how to use Metasploit to gain shell access to a vulnerable machine. This builds upon the introductory Metasploit from section 8 as we move from the auxiliary/scanning portion of Metasploit to the exploit portion. This lesson is important as Metasploit is a common tool in nearly every penetration testers toolkit, especially at the beginner level.

Compiling Exploits - This lesson will add to exploitation learned in section 9, except that the exploitation is now done manually, without Metasploit. This will teach the reader how to safely download exploits from the web, generate shellcode, compile the exploit if necessary, and execute it against a vulnerable machine.

Week 8, 9, and 10 (Internal Pentesting):
Hello Enumeration, My Old Friend - This lesson will cover post-exploitation enumeration.

Active Directory Exploitation - This lesson focuses on the recognition of vulnerabilities and exploitation tactics in an internal Active Directory environment. Attacks that will be introduced include: LLMNR poisoning/hash cracking, SMB hash relaying, pass the hash, token impersonation, kerberoasting, GPP/c-password attacks, and PowerShell attacks. More attacks will likely be added as the lesson is written, but the most common have been provided.

Week 11 Lessons:
Maintaining Access / Pivoting / Cleanup - This lesson will discuss methods of maintaining access on a network, pivoting into other networks, and how to properly clean up as you exit a network.

«Start» :
https://github.com/hmaverickadams/Beginner-Network-Pentesting
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

GitHub

GitHub - hmaverickadams/Beginner-Network-Pentesting: Notes for Beginner Network Pentesting Course

Notes for Beginner Network Pentesting Course. Contribute to hmaverickadams/Beginner-Network-Pentesting development by creating an account on GitHub.

299 views09:55

UNDERCODE COMMUNITY

Forwarded from DailyCVE

🔵Oppia is an online learning platform showing a new bug:

https://dailycve.com/oppia-online-learning-platform-showing-new-bug

Dailycve

Oppia is an online learning platform showing a new bug | CVE

Description:

Oppia is an open application framework for learning that allows everyone to build and upload immersive games (called 'explorations') quickly. These exercises mimic a one-on-one interaction with a teacher, enabling learners to learn and gaining…

162 views10:55

UNDERCODE COMMUNITY

Forwarded from UNDERCODE NEWS

Four ransomware attacks in two years targeted the town of Cornelia, USA.
#Malwares

149 views10:55

MORE DETAILS

UNDERCODE COMMUNITY

Forwarded from UNDERCODE NEWS

FBI warns, "Swating with Internet of Things equipment is over"
#CyberAttacks

135 views10:55

179 views10:56

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Simple random DNS, HTTP/S internet traffic noise generator:

🄸🄽🅂🅃🄰🄻🄻🄸🅂🄰🅃🄸🄾🄽 & 🅁🅄🄽 :

Install requests if you do not have it already installed, using pip:

2) pip install requests

1) git clone https://github.com/1tayH/noisy.git
Navigate into the noisy directory

3)cd noisy

4) Run the script

python noisy.py --config config.json
The program can accept a number of command line arguments:

$ python noisy.py --help

5) usage: noisy.py [-h] [--log -l] --config -c [--timeout -t]

optional arguments:
-h, --help show this help message and exit
--log -l logging level
--config -c config file
--timeout -t for how long the crawler should be running, in seconds
only the config file argument is required.

Output
$ docker run -it noisy --config config.json --log debug
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

GitHub

GitHub - 1tayH/noisy: Simple random DNS, HTTP/S internet traffic noise generator

Simple random DNS, HTTP/S internet traffic noise generator - 1tayH/noisy

205 views10:56

UNDERCODE COMMUNITY

Forwarded from UNDERCODE NEWS

Samsung launches over 9 Oled screens for Notebook computers.
#Technologies

129 views11:57

MORE DETAILS

UNDERCODE COMMUNITY

T.me/UndercodeTesting

197 views11:58