STONESEC:

Phil Hagen's FOR572 covers a variety of topics in the field of network forensics. As the course name states ("FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response") also Incident Response as well as Threat Hunting concepts are being presented. A detailed list of all

This is my last post covering notes taken during the OSCP exam preparation. Next time I'll cover different topics and I will also focus on the next certification Certified Red Team Operator ("CRTO"). Password cracking is an essential skill for ethical hackers, as it allows them

Welcome to this blog post about pivoting! Pivoting is an essential skill that every professional penetration tester should master. It involves using compromised systems as a jumping-off point to access other systems on the network. In other words, it's a technique for moving laterally within a network to

Escalating privileges under Windows taught me a lot about the actual Windows architecture. Try follow the mindmap from C0nd4 to successfull elevate your rights like in my previous blog post about Linux privilege escalation: GitHub - C0nd4/OSCP-Priv-Esc: Mind maps / flow charts to help with privilege escalation on the OSCP.

After the initial compromise of a Linux host the escalation of privileges is necessary to get further access or pivot through the network. I made a lot of notes regarding this larger chapter of the OSCP certification. This useful minmap from C0nd4 should be the entrypoint: GitHub - C0nd4/OSCP-Priv-Esc:

Attacking the Windows OS as a former Debian Administrator was quite a new challenge for me. However, it is important to dive into the field of Windows exploitation because it is the most used desktop OS worldwide. The following notes are about my OSCP prep for Windows. metasploit framework # list

This time it's all about stack-based buffer overflow exploitation without any protection mechanisms like ASLR or DEP in place. Note that this methodology dates back to the old version of the OSCP certification. Buffer Overflow General methology mindmap: https://twitter.com/avasdream_/status/1317453876652630018/photo/2 Hints: Bad

Another blog post containing various OSCP preparation notes about web-based attacks. As always don't consider these notes to be a complete chapter about OSCP web attacks. LFI # basic LFI scan wfuzz -c -w ./lfi2.txt --hw 0 http://10.10.10.10/nav.php?page=FUZZ # using php:

This is my first post covering my notes taken during the OSCP preparation. Before continuing my journey of cyber security certifications, I want to store most of my cherry tree into several blog posts. Please don't consider my notes to be a complete ressource for the exam. This