Network Scanning

Command line tool nmap and its GUI counterpart zenmap are powerful tools that allow you to do thorough scanning of networks and hosts. From the most basic ping scan, OS and service detection, or...

Vulnerability Assessment

Overview Divided into two areas, one is scanning for known vulns. The other is analyzing the results to determine a path forward Analysis can be broken down further into Descriptive - describes...

Information Gathering

Overview Different test types can differ in how much information we start with Blackbox is the minimal information provided to start such as external IP ranges and domains. Nothing more. Greybox...

Penetration Testing Process

Overview Throughout the entire penetration testing process, detailed notes & screenshots should be consistently captured for the final proof of concept report, and to assist with cleanup....

Introduction

Welcome This hackbook is a WIP source of truth for me as I go for my OSCP certification. My plan here is to document methodology used to exploit the full kill chain, include references to tools...