# Hackzzz - The Notebook ## Hackzzz - The Notebook - [Hackzzz](https://hackzzz.gitbook.io/welcome/welcome/readme.md) - [Writeups](https://hackzzz.gitbook.io/welcome/welcome/writeups.md) - [HackTheBox](https://hackzzz.gitbook.io/welcome/welcome/writeups/hackthebox.md) - [Linux](https://hackzzz.gitbook.io/welcome/welcome/writeups/hackthebox/linux.md) - [Lame](https://hackzzz.gitbook.io/welcome/welcome/writeups/hackthebox/linux/lame.md): https://app.hackthebox.com/machines/1 - [Squashed](https://hackzzz.gitbook.io/welcome/welcome/writeups/hackthebox/linux/squashed.md): https://app.hackthebox.com/machines/514 - [Faculty](https://hackzzz.gitbook.io/welcome/welcome/writeups/hackthebox/linux/faculty.md) - [Windows](https://hackzzz.gitbook.io/welcome/welcome/writeups/hackthebox/windows.md) - [Jeeves](https://hackzzz.gitbook.io/welcome/welcome/writeups/hackthebox/windows/jeeves.md): https://app.hackthebox.com/machines/114 - [Bart](https://hackzzz.gitbook.io/welcome/welcome/writeups/hackthebox/windows/bart.md) - [Active](https://hackzzz.gitbook.io/welcome/welcome/writeups/hackthebox/windows/active.md) - [Tally](https://hackzzz.gitbook.io/welcome/welcome/writeups/hackthebox/windows/tally.md) - [Portswigger](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger.md) - [File upload](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/file-upload.md): https://portswigger.net/web-security/file-upload - [Apprentice](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/file-upload/apprentice.md) - [Remote code execution via web shell upload](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/file-upload/apprentice/remote-code-execution-via-web-shell-upload.md): https://portswigger.net/web-security/file-upload/lab-file-upload-remote-code-execution-via-web-shell-upload - [Web shell upload via Content-Type restriction bypass](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/file-upload/apprentice/web-shell-upload-via-content-type-restriction-bypass.md): https://portswigger.net/web-security/file-upload/lab-file-upload-web-shell-upload-via-content-type-restriction-bypass - [SQL Injection](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/sql-injection.md): https://portswigger.net/web-security/sql-injection - [Apprentice](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/sql-injection/apprentice.md) - [SQL injection vulnerability in WHERE clause allowing retrieval of hidden data](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/sql-injection/apprentice/sql-injection-vulnerability-in-where-clause-allowing-retrieval-of-hidden-data.md): https://portswigger.net/web-security/sql-injection/lab-retrieve-hidden-data - [SQL injection vulnerability allowing login bypass](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/sql-injection/apprentice/sql-injection-vulnerability-allowing-login-bypass.md): https://portswigger.net/web-security/sql-injection/lab-login-bypass - [Practioner](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/sql-injection/practioner.md) - [SQL injection UNION attack, determining the number of columns returned by the query](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/sql-injection/practioner/sql-injection-union-attack-determining-the-number-of-columns-returned-by-the-query.md): https://portswigger.net/web-security/sql-injection/union-attacks/lab-determine-number-of-columns - [SQL injection UNION attack, finding a column containing text](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/sql-injection/practioner/sql-injection-union-attack-finding-a-column-containing-text.md): https://portswigger.net/web-security/sql-injection/union-attacks/lab-find-column-containing-text - [SQL injection UNION attack, retrieving data from other tables](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/sql-injection/practioner/sql-injection-union-attack-retrieving-data-from-other-tables.md): https://portswigger.net/web-security/sql-injection/union-attacks/lab-retrieve-data-from-other-tables - [SQL injection UNION attack, retrieving multiple values in a single column](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/sql-injection/practioner/sql-injection-union-attack-retrieving-multiple-values-in-a-single-column.md): https://portswigger.net/web-security/sql-injection/union-attacks/lab-retrieve-multiple-values-in-single-column - [SQL injection attack, querying the database type and version on Oracle](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/sql-injection/practioner/sql-injection-attack-querying-the-database-type-and-version-on-oracle.md): https://portswigger.net/web-security/sql-injection/examining-the-database/lab-querying-database-version-oracle - [SQL injection attack, querying the database type and version on MySQL and Microsoft](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/sql-injection/practioner/sql-injection-attack-querying-the-database-type-and-version-on-mysql-and-microsoft.md): https://portswigger.net/web-security/sql-injection/examining-the-database/lab-querying-database-version-mysql-microsoft - [SQL injection attack, listing the database contents on non-Oracle databases](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/sql-injection/practioner/sql-injection-attack-listing-the-database-contents-on-non-oracle-databases.md): https://portswigger.net/web-security/sql-injection/examining-the-database/lab-listing-database-contents-non-oracle - [SQL injection attack, listing the database contents on Oracle](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/sql-injection/practioner/sql-injection-attack-listing-the-database-contents-on-oracle.md): https://portswigger.net/web-security/sql-injection/examining-the-database/lab-listing-database-contents-oracle - [Blind SQL injection with conditional responses](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/sql-injection/practioner/blind-sql-injection-with-conditional-responses.md): https://portswigger.net/web-security/sql-injection/blind/lab-conditional-responses - [Blind SQL injection with time delays](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/sql-injection/practioner/blind-sql-injection-with-time-delays.md): https://portswigger.net/web-security/sql-injection/blind/lab-time-delays - [Blind SQL injection with time delays and information retrieval](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/sql-injection/practioner/blind-sql-injection-with-time-delays-and-information-retrieval.md): https://portswigger.net/web-security/sql-injection/blind/lab-time-delays-info-retrieval - [Information Disclosure](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/information-disclosure.md): https://portswigger.net/web-security/information-disclosure - [Apprentice](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/information-disclosure/apprentice.md) - [Error Messages](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/information-disclosure/apprentice/error-messages.md) - [Filtering a debug page](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/information-disclosure/apprentice/filtering-a-debug-page.md) - [Backup Leakage](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/information-disclosure/apprentice/backup-leakage.md) - [Authentication bypass via information disclosure](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/information-disclosure/apprentice/authentication-bypass-via-information-disclosure.md): https://portswigger.net/web-security/information-disclosure/exploiting/lab-infoleak-authentication-bypass - [Practitioner](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/information-disclosure/practitioner.md) - [Information disclosure in version control history](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/information-disclosure/practitioner/information-disclosure-in-version-control-history.md): https://portswigger.net/web-security/information-disclosure/exploiting/lab-infoleak-in-version-control-history - [Directory Traversal](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/directory-traversal.md): https://portswigger.net/web-security/file-path-traversal - [Apprentice](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/directory-traversal/apprentice.md) - [File path traversal, simple case](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/directory-traversal/apprentice/file-path-traversal-simple-case.md): https://portswigger.net/web-security/file-path-traversal/lab-simple - [Practioner](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/directory-traversal/practioner.md) - [File path traversal, traversal sequences blocked with absolute path bypass](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/directory-traversal/practioner/file-path-traversal-traversal-sequences-blocked-with-absolute-path-bypass.md): https://portswigger.net/web-security/file-path-traversal/lab-absolute-path-bypass - [File path traversal, traversal sequences stripped non-recursively](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/directory-traversal/practioner/file-path-traversal-traversal-sequences-stripped-non-recursively.md): https://portswigger.net/web-security/file-path-traversal/lab-sequences-stripped-non-recursively - [File path traversal, traversal sequences stripped with superfluous URL-decode](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/directory-traversal/practioner/file-path-traversal-traversal-sequences-stripped-with-superfluous-url-decode.md): https://portswigger.net/web-security/file-path-traversal/lab-superfluous-url-decode - [File path traversal, validation of file extension with null byte bypass](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/directory-traversal/practioner/file-path-traversal-validation-of-file-extension-with-null-byte-bypass.md): https://portswigger.net/web-security/file-path-traversal/lab-validate-file-extension-null-byte-bypass - [OS Command Injection](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/os-command-injection.md): https://portswigger.net/web-security/os-command-injection/lab-simple - [Apprentice](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/os-command-injection/apprentice.md) - [OS command injection, simple case](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/os-command-injection/apprentice/os-command-injection-simple-case.md): https://portswigger.net/web-security/os-command-injection/lab-simple - [Practioner](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/os-command-injection/practioner.md) - [Blind OS command injection with time delays](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/os-command-injection/practioner/blind-os-command-injection-with-time-delays.md): https://portswigger.net/web-security/os-command-injection/lab-blind-time-delays - [Blind OS command injection with output redirection](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/os-command-injection/practioner/blind-os-command-injection-with-output-redirection.md): https://portswigger.net/web-security/os-command-injection/lab-blind-output-redirection - [Broken Authentication](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/broken-authentication.md): https://portswigger.net/web-security/authentication - [Apprentice](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/broken-authentication/apprentice.md) - [Username enumeration via different responses](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/broken-authentication/apprentice/username-enumeration-via-different-responses.md): https://portswigger.net/web-security/authentication/password-based/lab-username-enumeration-via-different-responses - [2FA simple bypass](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/broken-authentication/apprentice/2fa-simple-bypass.md): https://portswigger.net/web-security/authentication/multi-factor/lab-2fa-simple-bypass - [Password reset broken logic](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/broken-authentication/apprentice/password-reset-broken-logic.md): https://portswigger.net/web-security/authentication/other-mechanisms/lab-password-reset-broken-logic - [Access Control](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/access-control.md): https://portswigger.net/web-security/access-control - [Apprentice](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/access-control/apprentice.md) - [Unprotected admin functionality](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/access-control/apprentice/unprotected-admin-functionality.md) - [Unprotected admin functionality with unpredictable URL](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/access-control/apprentice/unprotected-admin-functionality-with-unpredictable-url.md): https://portswigger.net/web-security/access-control/lab-user-role-controlled-by-request-parameter - [User role controlled by request parameter](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/access-control/apprentice/user-role-controlled-by-request-parameter.md): https://portswigger.net/web-security/access-control/lab-user-role-controlled-by-request-parameter - [User role can be modified in user profile](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/access-control/apprentice/user-role-can-be-modified-in-user-profile.md): https://portswigger.net/web-security/access-control/lab-user-role-can-be-modified-in-user-profile - [User ID controlled by request parameter](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/access-control/apprentice/user-id-controlled-by-request-parameter.md): https://portswigger.net/web-security/access-control/lab-user-id-controlled-by-request-parameter - [User ID controlled by request parameter, with unpredictable user IDs](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/access-control/apprentice/user-id-controlled-by-request-parameter-with-unpredictable-user-ids.md): https://portswigger.net/web-security/access-control/lab-user-id-controlled-by-request-parameter-with-unpredictable-user-ids - [User ID controlled by request parameter with data leakage in redirect](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/access-control/apprentice/user-id-controlled-by-request-parameter-with-data-leakage-in-redirect.md): https://portswigger.net/web-security/access-control/lab-user-id-controlled-by-request-parameter-with-data-leakage-in-redirect - [User ID controlled by request parameter with password disclosure](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/access-control/apprentice/user-id-controlled-by-request-parameter-with-password-disclosure.md): https://portswigger.net/web-security/access-control/lab-user-id-controlled-by-request-parameter-with-password-disclosure - [Insecure Direct Object References (IDOR)](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/access-control/apprentice/insecure-direct-object-references-idor.md): https://portswigger.net/web-security/access-control/lab-insecure-direct-object-references - [External Entity Injection](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/external-entity-injection.md): https://portswigger.net/web-security/xxe - [Apprentice](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/external-entity-injection/apprentice.md) - [TryHackme](https://hackzzz.gitbook.io/welcome/welcome/writeups/tryhackme.md) - [Linux](https://hackzzz.gitbook.io/welcome/welcome/writeups/tryhackme/linux.md) - [Windows](https://hackzzz.gitbook.io/welcome/welcome/writeups/tryhackme/windows.md) - [Crocc Crew](https://hackzzz.gitbook.io/welcome/welcome/writeups/tryhackme/windows/crocc-crew.md): https://tryhackme.com/room/crocccrew - [Enterprise](https://hackzzz.gitbook.io/welcome/welcome/writeups/tryhackme/windows/enterprise.md) - [Five stages of Ethical Hacking](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/five-stages-of-ethical-hacking.md) - [OSINT](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/osint.md): Open-Source Intelligence - [Information Gathering Methodologies](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/osint/information-gathering-methodologies.md) - [Information Gathering](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/osint/information-gathering-methodologies/information-gathering.md): Gathering information about a Company/Website - [OSINT Employee's](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/osint/information-gathering-methodologies/osint-employees.md): Making reconnaisannce to employees in the company - [Automate OSINT techniques](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/osint/information-gathering-methodologies/automate-osint-techniques.md) - [Discovering Email Address](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/osint/discovering-email-address.md) - [Breach Credentials](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/osint/breach-credentials.md) - [Reverse Image Searching](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/osint/reverse-image-searching.md) - [Hunting Usernames & Accounts](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/osint/hunting-usernames-and-accounts.md) - [Searching People](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/osint/searching-people.md) - [Phone Numbers](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/osint/phone-numbers.md) - [Google Dorks](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/osint/google-dorks.md) - [Search Engines](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/osint/search-engines.md) - [Default Passwords](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/osint/default-passwords.md) - [Aircraft Tracking](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/osint/aircraft-tracking.md) - [Car OSINT](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/osint/car-osint.md) - [Wi-Fi OSINT](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/osint/wi-fi-osint.md) - [Network Pentesting](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/network-pentesting.md): https://book.hacktricks.xyz/generic-methodologies-and-resources/pentesting-network - [Host Discovery](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/network-pentesting/host-discovery.md) - [Scanning Hosts](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/network-pentesting/scanning-hosts.md) - [Sniffing](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/network-pentesting/sniffing.md) - [Spoofing](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/network-pentesting/spoofing.md) - [DNS spoofing + apache2](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/network-pentesting/dns-spoofing-+-apache2.md) - [Firewall/IDS Evasion](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/network-pentesting/firewall-ids-evasion.md) - [Printer Hacking](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/network-pentesting/printer-hacking.md) - [IoT Pentesting](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/network-pentesting/iot-pentesting.md) - [Windows and Active Directory](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory.md) - [Windows Basic Commands](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/windows-basic-commands.md): Windows commands you need to know - [Network Command's](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/windows-basic-commands/network-commands.md) - [Tasks](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/windows-basic-commands/tasks.md) - [Computer Slow Command's](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/windows-basic-commands/computer-slow-commands.md) - [Bypass Windows Admin Prompt](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/windows-basic-commands/bypass-windows-admin-prompt.md) - [Active Directory](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/active-directory.md) - [AD Enumeration](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/active-directory/ad-enumeration.md) - [Man-In-The-Middle Attacks](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/active-directory/man-in-the-middle-attacks.md) - [SMB Relay](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/active-directory/man-in-the-middle-attacks/smb-relay.md) - [LLMNR Poisoning](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/active-directory/man-in-the-middle-attacks/llmnr-poisoning.md) - [Zerologon (2020-1472)](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/active-directory/zerologon-2020-1472.md) - [Password Cracking](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/active-directory/password-cracking.md) - [Kerberoasting](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/active-directory/kerberoasting.md) - [Kerbrute](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/active-directory/kerberoasting/kerbrute.md) - [ASREP Roasting](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/active-directory/kerberoasting/asrep-roasting.md) - [Post-Compromise Enumeration](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/active-directory/post-compromise-enumeration.md) - [Powerview](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/active-directory/post-compromise-enumeration/powerview.md) - [Bloodhound](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/active-directory/post-compromise-enumeration/bloodhound.md) - [Installing & Setting Up](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/active-directory/post-compromise-enumeration/bloodhound/installing-and-setting-up.md) - [SharpHound](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/active-directory/post-compromise-enumeration/bloodhound/sharphound.md) - [Using BloodHound](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/active-directory/post-compromise-enumeration/bloodhound/using-bloodhound.md) - [Post-Compromise attacks](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/active-directory/post-compromise-attacks.md) - [Privilege Escalation](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/active-directory/post-compromise-attacks/privilege-escalation.md) - [Token Impersonation](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/active-directory/post-compromise-attacks/privilege-escalation/token-impersonation.md) - [Print Nightmare (CVE-2021-1675)](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/active-directory/post-compromise-attacks/privilege-escalation/print-nightmare-cve-2021-1675.md) - [Pass Attacks](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/active-directory/post-compromise-attacks/pass-attacks.md) - [Pass the Hash](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/active-directory/post-compromise-attacks/pass-attacks/pass-the-hash.md) - [Pass the Password](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/active-directory/post-compromise-attacks/pass-attacks/pass-the-password.md) - [GPP cPassword Attack](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/active-directory/post-compromise-attacks/pass-attacks/gpp-cpassword-attack.md) - [Mimikatz](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/active-directory/post-compromise-attacks/mimikatz.md) - [Golden Ticket Attack](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/active-directory/post-compromise-attacks/mimikatz/golden-ticket-attack.md) - [Dumping hashes (secretsdump)](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/active-directory/post-compromise-attacks/dumping-hashes-secretsdump.md) - [Windows Privilege Escalation](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/windows-privilege-escalation.md) - [Unquoted Path Service](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/windows-privilege-escalation/unquoted-path-service.md) - [Abusing the Golden Privileges](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/windows-privilege-escalation/abusing-the-golden-privileges.md) - [Print Spoofer](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/windows-privilege-escalation/print-spoofer.md) - [Print-Nightmare](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/windows-privilege-escalation/print-nightmare.md) - [Rogue Potato](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/windows-and-active-directory/windows-privilege-escalation/rogue-potato.md) - [Social Engineering](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/social-engineering.md) - [Windows Malware](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/social-engineering/windows-malware.md) - [Generating Undetectable backdoors](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/social-engineering/windows-malware/generating-undetectable-backdoors.md) - [Bypassing Anti-Virus by modifying Hex Value](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/social-engineering/windows-malware/bypassing-anti-virus-by-modifying-hex-value.md) - [Creating Trojans](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/social-engineering/windows-malware/creating-trojans.md) - [Embedding malicious files in Images or PDF](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/social-engineering/windows-malware/creating-trojans/embedding-malicious-files-in-images-or-pdf.md) - [Changing Trojans Icon](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/social-engineering/windows-malware/creating-trojans/changing-trojans-icon.md) - [Spoofing file extensions](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/social-engineering/windows-malware/creating-trojans/spoofing-file-extensions.md) - [Microsoft Office Trojans](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/social-engineering/windows-malware/creating-trojans/microsoft-office-trojans.md) - [Word Macros](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/social-engineering/windows-malware/creating-trojans/microsoft-office-trojans/word-macros.md) - [OS X Malware](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/social-engineering/os-x-malware.md) - [Using Msfvenom](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/social-engineering/os-x-malware/using-msfvenom.md) - [Linux Malware](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/social-engineering/linux-malware.md) - [Simple Backdoors](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/social-engineering/linux-malware/simple-backdoors.md) - [Embedding Evil Code in a Legitimate Linux Package](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/social-engineering/linux-malware/embedding-evil-code-in-a-legitimate-linux-package.md) - [Backdooring An APK](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/social-engineering/linux-malware/backdooring-an-apk.md) - [Spying Software](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/social-engineering/spying-software.md) - [Delivery methods](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/social-engineering/delivery-methods.md) - [Gophish](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/social-engineering/delivery-methods/gophish.md): https://github.com/gophish/gophish - [Spoofing Emails](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/social-engineering/delivery-methods/spoofing-emails.md) - [Setting Your Own SMTP server](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/social-engineering/delivery-methods/spoofing-emails/setting-your-own-smtp-server.md) - [Creating Fake Login Website](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/social-engineering/delivery-methods/creating-fake-login-website.md) - [Manipulating URL's](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/social-engineering/delivery-methods/manipulating-urls.md) - [Make attacks outside the network](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/social-engineering/make-attacks-outside-the-network.md) - [Ngrok](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/social-engineering/make-attacks-outside-the-network/ngrok.md) - [Social Engineering by Cristopher hadnagy](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/social-engineering/social-engineering-by-cristopher-hadnagy.md): These are notes from Social Engineering by Christopher Hadnagy - [Web Pentesting](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/web-pentesting.md) - [Web Basics](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/web-pentesting/web-basics.md) - [Information Gathering - Some One-liners](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/web-pentesting/information-gathering-some-one-liners.md) - [File Upload](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/web-pentesting/file-upload.md) - [Code Execution](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/web-pentesting/code-execution.md) - [Local File Inclusion](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/web-pentesting/local-file-inclusion.md) - [SQL Injection](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/web-pentesting/sql-injection.md) - [XSS (Corss-site scripting)](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/web-pentesting/xss-corss-site-scripting.md) - [CSRF (Cross-site requests forgery)](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/web-pentesting/csrf-cross-site-requests-forgery.md) - [Discovering Vulnerabilities using OWASP ZAP](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/web-pentesting/discovering-vulnerabilities-using-owasp-zap.md) - [CMS](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/web-pentesting/cms.md) - [Wpscan](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/web-pentesting/cms/wpscan.md): WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. - [Wireless Pentesting](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/wireless-pentesting.md): A page for documenting Wi-Fi commands, hacking, tools and basic concepts. - [Wi-Fi Network Fundamentals](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/wireless-pentesting/wi-fi-network-fundamentals.md) - [Basic Terminologies and Concepts](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/wireless-pentesting/wi-fi-network-fundamentals/basic-terminologies-and-concepts.md) - [De-authentication](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/wireless-pentesting/de-authentication.md) - [Disassociation Packets](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/wireless-pentesting/disassociation-packets.md) - [Beacon Flooding](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/wireless-pentesting/beacon-flooding.md) - [Authentication Denial-Of-Service](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/wireless-pentesting/authentication-denial-of-service.md) - [SSID Probing and Bruteforcing](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/wireless-pentesting/ssid-probing-and-bruteforcing.md) - [EAPOL Start and Logoff Packet Injection](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/wireless-pentesting/eapol-start-and-logoff-packet-injection.md) - [Attacks for IEEE 802.11s mesh networks](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/wireless-pentesting/attacks-for-ieee-802.11s-mesh-networks.md) - [WIDS Confusion](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/wireless-pentesting/wids-confusion.md) - [WEP](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/wireless-pentesting/wep.md) - [Caffe-Latte](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/wireless-pentesting/wep/caffe-latte.md) - [WPA/WPA2 - PSK](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/wireless-pentesting/wpa-wpa2-psk.md) - [Handshake Capture](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/wireless-pentesting/wpa-wpa2-psk/handshake-capture.md) - [WPA Cracking](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/wireless-pentesting/wpa-wpa2-psk/wpa-cracking.md) - [Resources](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/wireless-pentesting/wpa-wpa2-psk/resources.md) - [Evil Twin Attacks](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/wireless-pentesting/evil-twin-attacks.md) - [WifiPumpkin3](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/wireless-pentesting/evil-twin-attacks/wifipumpkin3.md): https://github.com/P0cL4bs/wifipumpkin3 - [Creating a fake access point](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/wireless-pentesting/evil-twin-attacks/wifipumpkin3/creating-a-fake-access-point.md) - [Using captive portal attack](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/wireless-pentesting/evil-twin-attacks/wifipumpkin3/using-captive-portal-attack.md) - [Pulp scripts](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/wireless-pentesting/evil-twin-attacks/wifipumpkin3/pulp-scripts.md) - [Wifi Hacking Using Windows CMD](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/wireless-pentesting/wifi-hacking-using-windows-cmd.md) - [Binary Explotation](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/binary-explotation.md) - [Assembly for Reverse Engineering](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/binary-explotation/assembly-for-reverse-engineering.md) - [Reversing](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/binary-explotation/reversing.md) - [Pivoting & Port-forwarding](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/pivoting-and-port-forwarding.md) - [Chisel](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/pivoting-and-port-forwarding/chisel.md) - [SSH](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/pivoting-and-port-forwarding/ssh.md) - [Socat](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/pivoting-and-port-forwarding/socat.md) - [plink](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/pivoting-and-port-forwarding/plink.md) - [sshuttle](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/pivoting-and-port-forwarding/sshuttle.md) - [Pivoting Bash Scripts](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/pivoting-and-port-forwarding/pivoting-bash-scripts.md) - [Mobile Application Pentesting](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/mobile-application-pentesting.md) - [Android Hacking Methodology](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/mobile-application-pentesting/android-hacking-methodology.md) - [Arduino](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/arduino.md) - [External Pentesting](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/external-pentesting.md) - [Proxmark3](https://hackzzz.gitbook.io/welcome/gadgets/proxmark3.md) - [Attacking MIFARE Classic 1KB](https://hackzzz.gitbook.io/welcome/gadgets/proxmark3/attacking-mifare-classic-1kb.md) - [SDR Hacking](https://hackzzz.gitbook.io/welcome/gadgets/sdr-hacking.md) - [Hardware](https://hackzzz.gitbook.io/welcome/gadgets/sdr-hacking/hardware.md) - [Using RTL-SDR](https://hackzzz.gitbook.io/welcome/gadgets/sdr-hacking/using-rtl-sdr.md) - [DragonOS](https://hackzzz.gitbook.io/welcome/gadgets/sdr-hacking/dragonos.md) - [WI-FI Pineapple](https://hackzzz.gitbook.io/welcome/gadgets/wi-fi-pineapple.md) - [Evil Portals](https://hackzzz.gitbook.io/welcome/gadgets/wi-fi-pineapple/evil-portals.md) - [Extras](https://hackzzz.gitbook.io/welcome/resources/extras.md) - [Drone Hacking](https://hackzzz.gitbook.io/welcome/resources/extras/drone-hacking.md) - [Password Cracking with Rules and Munging](https://hackzzz.gitbook.io/welcome/resources/extras/password-cracking-with-rules-and-munging.md) - [Game Hacking](https://hackzzz.gitbook.io/welcome/resources/extras/game-hacking.md) - [Carding](https://hackzzz.gitbook.io/welcome/resources/extras/carding.md): These notes were made just for educational purposes only. I do not exhort anybody to recreate this type of illegal activities. This is just to learn a little bit more about credit card fraud. - [Metasploit](https://hackzzz.gitbook.io/welcome/resources/metasploit.md) - [Metasploit Modules](https://hackzzz.gitbook.io/welcome/resources/metasploit/metasploit-modules.md) - [rc Personal Config (.bashrc && .zshrc)](https://hackzzz.gitbook.io/welcome/resources/rc-personal-config-.bashrc-and-and-.zshrc.md)