Hacking Articles
26.1K subscribers
1.58K photos
165 files
1.14K links
House of Pentester
Download Telegram
πŸ”₯ OSEP Training | Book Your Free Demo

Ready to move beyond basic penetration testing? βš”οΈ

Join Ignite Technologies’ OSEP-focused training and strengthen your advanced offensive security skills through practical labs and real-world attack scenarios.

🎯 What You’ll Learn:
πŸ›‘ Defense Evasion & EDR Concepts
πŸ’» Windows Internals & Payload Development
πŸ” Credential & Token Abuse
🏒 Active Directory Attacks
πŸ”€ Lateral Movement, Pivoting & Tunneling
🌐 Advanced Web & Network Exploitation
πŸ“ Professional Reporting

πŸ‘¨β€πŸ’» Ideal for experienced pentesters, OSCP graduates, and aspiring red team professionals.

πŸŽ“ Ready to level up?

πŸ‘‰ Register: https://forms.gle/bowpX9TGEs41GDG99

πŸ’¬ WhatsApp: https://wa.me/message/HIOPPNENLOX6F1

πŸ“§ info@ignitetechnologies.in

⚠️ Practice only in authorized environments.
πŸ€– AI Penetration Testing Training Program| Book Your Free Demo

AI and LLM applications are creating new security challenges. Do you know how to test them?

πŸ”₯ What You’ll Learn:

🧠 LLM Architecture & Security
πŸ’₯ Prompt Injection & Data Extraction
🎯 OWASP Top 10 for LLMs
πŸ”— Model Context Protocol (MCP) Security
πŸ“š RAG Security
πŸ¦™ Ollama Deployment
πŸ” Model Poisoning & Extraction
🌐 LLM API Exploitation
πŸ›‘ AI Infrastructure Security
πŸ§ͺ Automated AI Pentesting

🎯 Learn to identify, validate, and help secure AI vulnerabilities through practical testing.

πŸ‘¨β€πŸ’» Ideal for pentesters, red teamers, ethical hackers, and AI security professionals.

πŸš€ Ready to explore AI security?

πŸ‘‰ Register: https://forms.gle/bowpX9TGEs41GDG99

πŸ’¬ WhatsApp: https://wa.me/message/HIOPPNENLOX6F1

πŸ“§ info@ignitetechnologies.in

⚠️ Practice only in authorized environments.
❀4
🚨 Google Dorks Cheat Sheet for Pentesters

πŸ”₯ Telegram: https://t.me/hackinarticles
✴️ Twitter: https://x.com/hackinarticles

Google Dorking is a reconnaissance technique used by security researchers and bug bounty hunters to discover sensitive files, login portals, exposed directories, and vulnerabilities indexed by search engines. ()

⚑️ Useful Google Dorks

πŸ”Ž site:target.com
πŸ“‚ intitle:"index of"
🧠 inurl:admin
πŸ“„ filetype:pdf site:target.com
πŸ” intitle:"login"
πŸ“ intext:"username" filetype:log
πŸ—„ filetype:xls "email"
πŸ“‘ inurl:phpinfo.php
🧾 inurl:/proc/self/cwd
πŸ“· inurl:view/index.shtml

🧠 Mindmap:
https://github.com/Ignitetechnologies/Mindmap/tree/main/Google%20Dorks
❀4
GitHub Dorks Cheat Sheet

πŸ”₯ Telegram: https://t.me/hackinarticles
✴️ Twitter: https://x.com/hackinarticles

GitHub Dorking is used by pentesters and bug bounty hunters to discover exposed secrets, API keys, credentials, and sensitive files inside public repositories. Since GitHub code is searchable, misconfigured repositories may unintentionally expose sensitive data.

⚑️ Useful GitHub Dorks

πŸ”‘ password filename:.env
πŸͺͺ api_key language:python
πŸ“„ filename:.env DB_PASSWORD
πŸ” filename:id_rsa
🌐 filename:config.php db_password
πŸ“¦ filename:docker-compose.yml password
🧠 extension:json "api_key"
πŸ“ filename:.git-credentials
πŸ“œ filename:settings.py SECRET_KEY
πŸͺ™ filename:.npmrc _authToken

🧠 Mindmap:
https://github.com/Ignitetechnologies/Mindmap/tree/main/Github%20Dorks
❀1
HTTP Status Code Cheat Sheet

πŸ”₯ Telegram: https://t.me/hackinarticles
✴️ Twitter: https://x.com/hackinarticles

HTTP Status Codes are server responses returned when a client (browser) sends a request to a web server. They indicate whether the request was successful, redirected, or resulted in an error. ()

⚑️ Common HTTP Status Codes

🟒 200 – OK
πŸ“¦ 201 – Created
πŸ” 301 – Moved Permanently
β†ͺ️ 302 – Found (Temporary Redirect)
πŸ“­ 304 – Not Modified
⚠️ 400 – Bad Request
πŸ” 401 – Unauthorized
⛔️ 403 – Forbidden
❌ 404 – Not Found
⏳ 408 – Request Timeout
πŸ’₯ 500 – Internal Server Error
🚧 503 – Service Unavailable

🧠 Mindmap:
https://github.com/Ignitetechnologies/Mindmap/tree/main/HTTP%20Status%20Code
❀1
πŸ€– AI Penetration Testing Training Program| Book Your Free Demo

AI and LLM applications are creating new security challenges. Do you know how to test them?

πŸ”₯ What You’ll Learn:

🧠 LLM Architecture & Security
πŸ’₯ Prompt Injection & Data Extraction
🎯 OWASP Top 10 for LLMs
πŸ”— Model Context Protocol (MCP) Security
πŸ“š RAG Security
πŸ¦™ Ollama Deployment
πŸ” Model Poisoning & Extraction
🌐 LLM API Exploitation
πŸ›‘ AI Infrastructure Security
πŸ§ͺ Automated AI Pentesting

🎯 Learn to identify, validate, and help secure AI vulnerabilities through practical testing.

πŸ‘¨β€πŸ’» Ideal for pentesters, red teamers, ethical hackers, and AI security professionals.

πŸš€ Ready to explore AI security?

πŸ‘‰ Register: https://forms.gle/bowpX9TGEs41GDG99

πŸ’¬ WhatsApp: https://wa.me/message/HIOPPNENLOX6F1

πŸ“§ info@ignitetechnologies.in

⚠️ Practice only in authorized environments.
πŸ”₯ OSEP Training | Book Your Free Demo

Ready to move beyond basic penetration testing? βš”οΈ

Join Ignite Technologies’ OSEP-focused training and strengthen your advanced offensive security skills through practical labs and real-world attack scenarios.

🎯 What You’ll Learn:
πŸ›‘ Defense Evasion & EDR Concepts
πŸ’» Windows Internals & Payload Development
πŸ” Credential & Token Abuse
🏒 Active Directory Attacks
πŸ”€ Lateral Movement, Pivoting & Tunneling
🌐 Advanced Web & Network Exploitation
πŸ“ Professional Reporting

πŸ‘¨β€πŸ’» Ideal for experienced pentesters, OSCP graduates, and aspiring red team professionals.

πŸŽ“ Ready to level up?

πŸ‘‰ Register: https://forms.gle/bowpX9TGEs41GDG99

πŸ’¬ WhatsApp: https://wa.me/message/HIOPPNENLOX6F1

πŸ“§ info@ignitetechnologies.in

⚠️ Practice only in authorized environments.
❀5
Mimikatz Cheat Sheet for Pentesters

πŸ”₯ Telegram: https://t.me/hackinarticles
✴️ Twitter: https://x.com/hackinarticles

Mimikatz is a well-known post-exploitation tool used to extract plaintext passwords, NTLM hashes, Kerberos tickets, and other credentials from Windows systems. It is widely used in Active Directory attacks, credential dumping, and privilege escalation. ()

⚑️ Useful Mimikatz Commands

πŸ” privilege::debug
πŸ”‘ token::elevate
🧠 sekurlsa::logonpasswords
πŸ“¦ sekurlsa::wdigest
πŸ“œ lsadump::sam
πŸ‘€ lsadump::lsa
πŸ”„ lsadump::dcsync
🎟 kerberos::list
πŸ‘‘ kerberos::golden
πŸ“‚ dpapi::cred

🧠 Mindmap:
https://github.com/Ignitetechnologies/Mindmap/tree/main/Mimikatz
❀3
ISO Security Controls Cheat Sheet

πŸ”₯ Telegram: https://t.me/hackinarticles
✴️ Twitter: https://x.com/hackinarticles

ISO 27001 Controls are security measures used to protect information assets and manage risks within an organization’s Information Security Management System (ISMS). The latest ISO 27001:2022 version contains 93 controls grouped into different security categories. ()

⚑️ Key ISO Security Control Domains

πŸ“œ Information Security Policies
🏒 Organization of Information Security
πŸ‘₯ Human Resource Security
πŸ“¦ Asset Management
πŸ” Access Control
πŸ”‘ Cryptography
🏒 Physical & Environmental Security
βš™οΈ Operations Security
πŸ“‘ Communications Security
πŸ’» System Acquisition & Development
🀝 Supplier Relationships
🚨 Incident Management
πŸ”„ Business Continuity Security
πŸ“‘ Compliance

🧠 Mindmap:
https://github.com/Ignitetechnologies/Mindmap/tree/main/ISO%20Control
❀3
Digital Forensics Tools Mindmap

πŸ”₯ Telegram: https://t.me/hackinarticles
✴️ Twitter: https://x.com/hackinarticles

Digital Forensics focuses on collecting, analyzing, and preserving digital evidence from computers, networks, and mobile devices during security investigations. These tools help investigators recover deleted data, analyze disk images, and identify attacker activity. ()

⚑️ Common Digital Forensics Tools

🧰 Autopsy
πŸ” The Sleuth Kit
πŸ’Ύ FTK Imager
πŸ•΅οΈ EnCase
πŸ“Š Volatility
πŸ“‘ Wireshark
πŸ“± Cellebrite UFED
πŸ“‚ Bulk Extractor
🧬 X-Ways Forensics
🧠 Magnet AXIOM

🧠 Mindmap:
https://github.com/Ignitetechnologies/Mindmap/tree/main/Forensics
❀3
πŸ”₯ OSEP Training | Book Your Free Demo

Ready to move beyond basic penetration testing? βš”οΈ

Join Ignite Technologies’ OSEP-focused training and strengthen your advanced offensive security skills through practical labs and real-world attack scenarios.

🎯 What You’ll Learn:
πŸ›‘ Defense Evasion & EDR Concepts
πŸ’» Windows Internals & Payload Development
πŸ” Credential & Token Abuse
🏒 Active Directory Attacks
πŸ”€ Lateral Movement, Pivoting & Tunneling
🌐 Advanced Web & Network Exploitation
πŸ“ Professional Reporting

πŸ‘¨β€πŸ’» Ideal for experienced pentesters, OSCP graduates, and aspiring red team professionals.

πŸŽ“ Ready to level up?

πŸ‘‰ Register: https://forms.gle/bowpX9TGEs41GDG99

πŸ’¬ WhatsApp: https://wa.me/message/HIOPPNENLOX6F1

πŸ“§ info@ignitetechnologies.in

⚠️ Practice only in authorized environments.
❀2
πŸ€– AI Penetration Testing Training Program| Book Your Free Demo

AI and LLM applications are creating new security challenges. Do you know how to test them?

πŸ”₯ What You’ll Learn:

🧠 LLM Architecture & Security
πŸ’₯ Prompt Injection & Data Extraction
🎯 OWASP Top 10 for LLMs
πŸ”— Model Context Protocol (MCP) Security
πŸ“š RAG Security
πŸ¦™ Ollama Deployment
πŸ” Model Poisoning & Extraction
🌐 LLM API Exploitation
πŸ›‘ AI Infrastructure Security
πŸ§ͺ Automated AI Pentesting

🎯 Learn to identify, validate, and help secure AI vulnerabilities through practical testing.

πŸ‘¨β€πŸ’» Ideal for pentesters, red teamers, ethical hackers, and AI security professionals.

πŸš€ Ready to explore AI security?

πŸ‘‰ Register: https://forms.gle/bowpX9TGEs41GDG99

πŸ’¬ WhatsApp: https://wa.me/message/HIOPPNENLOX6F1

πŸ“§ info@ignitetechnologies.in

⚠️ Practice only in authorized environments.
❀6😁1
πŸ‘3
πŸ‘1
πŸ€– AI Penetration Testing Training Program| Book Your Free Demo

AI and LLM applications are creating new security challenges. Do you know how to test them?

πŸ”₯ What You’ll Learn:

🧠 LLM Architecture & Security
πŸ’₯ Prompt Injection & Data Extraction
🎯 OWASP Top 10 for LLMs
πŸ”— Model Context Protocol (MCP) Security
πŸ“š RAG Security
πŸ¦™ Ollama Deployment
πŸ” Model Poisoning & Extraction
🌐 LLM API Exploitation
πŸ›‘ AI Infrastructure Security
πŸ§ͺ Automated AI Pentesting

🎯 Learn to identify, validate, and help secure AI vulnerabilities through practical testing.

πŸ‘¨β€πŸ’» Ideal for pentesters, red teamers, ethical hackers, and AI security professionals.

πŸš€ Ready to explore AI security?

πŸ‘‰ Register: https://forms.gle/bowpX9TGEs41GDG99

πŸ’¬ WhatsApp: https://wa.me/message/HIOPPNENLOX6F1

πŸ“§ info@ignitetechnologies.in

⚠️ Practice only in authorized environments.
πŸ”₯ OSCP-Focused Training β€” Ignite Technologies

Build your practical skills through:

πŸ”Ž Enumeration & Reconnaissance
πŸ’» Web & Network Exploitation
πŸ” Privilege Escalation
πŸ–₯ Active Directory Pentesting
πŸ”΄ Post-Exploitation & Pivoting
🧩 Real CTFs & Practical Labs
🎯 OSCP-Focused Methodology
πŸ“ Exam-Oriented Practice & Troubleshooting

The objective is simple:

Don't just prepare to pass the exam.
Prepare to handle the problems the exam throws at you.

If you're preparing for OSCP, identify your weak areas and strengthen them through hands-on practice.

πŸ”— Explore the OSCP-Focused Program:
https://www.ignitetechnologies.in/ctf-advanced.php

πŸ“… LIMITED SEATS β€” ADMISSIONS CLOSING SOON

πŸ“ Want to attend a FREE Demo Session?
Register here:
https://forms.gle/bowpX9TGEs41GDG99

πŸ’¬ WhatsApp:
https://wa.me/message/HIOPPNENLOX6F1

πŸ“§ Email:
info@ignitetechnologies.in

πŸ’¬ Preparing for OSCP? Comment β€œOSCP” or DM us and our team will guide you.
❀5