OFFENSIVE SECURITY CHEATSHEET

— Open Source Intelligence (OSINT)
— Web Pentest
— Network
— Shells methods
— Windows Systems
— Linux Systems
— Other Systems
— Passcracking Hash & Files
— Phishing, RedTeam and SE
— Wireless
— Cryptography
— Pwn
— External Resources

https://cheatsheet.haax.fr/

#cheatsheet #pentest #osint #ad

Top 25 Penetration Testing Skills and Competencies (Detailed)

What soft skills and technical competencies does it take to became a professional penetration tester or ethical hacker? In this article we will discuss in detail what are the top 25 areas every pentester should be familiar with and what skills you should focus on if you want to become a professional penetration tester.

https://www.infosecmatter.com/top-25-penetration-testing-skills-and-competencies-detailed/

#pentest #skills

Bug Bounty Helper

https://dorks.faisalahmed.me/

#bugbounty #dorks

#BurpHacksForBounties - Day 23/30

❤️ Productivity Hacks ❤️

#infosec #security #burp

Awesome Extensions : https://github.com/snoopysecurity/awesome-burp-extensions
Awesome Burp Shortcut cheetsheat : https://www.sans.org/posters/burp-suite-cheat-sheet/ by
@ChrisADale

Simple config : https://gist.github.com/jgamblin/104f15a265e2ab007bae19cb37aa606d by
@jgamblin

#BurpHacksForBounties - Day 24/30

This is an amazing writeup which talks about using plugin in Burp that ease the journey for catching IDORs.

Writeup link: https://infosecwriteups.com/leveraging-burp-suite-extension-for-finding-idor-insecure-direct-object-reference-2653f9b89fd4
By
@dhanush

#infosec #appsec #bugbountytips #bugbountytip #bugbounty #security

Elasticsearch ECE 7.13.3 - Anonymous Database Dump

https://www.exploit-db.com/exploits/50152

#elastic #cve

Fantastic Windows Logon types and Where to Find Credentials in Them


https://www.alteredsecurity.com/post/fantastic-windows-logon-types-and-where-to-find-credentials-in-them

#windwows #credential

#BurpHacksForBounties - Day 25/30

Optimizing Burp Suite for better performance, these 4 simple steps and you would notice a big difference in performance.

#infosec #appsec #burp #security #bugbountytips #bugbounty

RemotePotato — Updated version (Cross session activation)

https://github.com/antonioCoco/RemotePotato0

#windows #privesc #lpe #pentest

DevSecCon24 - 2021

Playlist: https://www.youtube.com/playlist?list=PLKWDDWZ_ETtDbTF3Xibc2VagzgHbkoKpA
Source: https://www.devseccon.com/devseccon24-2021/

#devsecops

kube-bench

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
# https://github.com/aquasecurity/kube-bench

#k8s #YAML #KubeBench #KubernetesSecurity #cisSecurity #Kubernetes

#BurpHacksForBounties - Day 26/30

Красное сердцеUnderstand the different intruder attack types in Burp Suite

With visualizations at code level for better understanding.

Code level understanding in follow up thread 👇

#infosec #appsec #security #cybersecurity #bugbounty #bugbountytips