User:Oscpscope/sandbox

The Harvester, From all sources: theharvester -d company -b all DNS zone transfer: host -t axfr domain.name dns-server host -l domain.name dns-server DNS enumeration: dnsenum -o outputfile -f /usr/share/dnsrecon/namelist.txt -o outputfile domain nmap -p 139,445 IP-RANGE nbtscan -r IP-RANGE enum4linux -a HOST
 * Reconnaissance
 * DNS
 * Service Enumeration
 * SMB service enumeration

CheckSec: http://www.trapkit.de/tools/checksec.html lynis: https://cisofy.com/lynis/ LinEnum (http://www.rebootuser.com/?p=1758): https://github.com/rebootuser/LinEnum unix-privesc-check: https://github.com/pentestmonkey/unix-privesc-check LinuxPrivChecker: http://www.securitysift.com/download/linuxprivchecker.py Enum4Linux: https://labs.portcullis.co.uk/tools/enum4linux/ Linux Basic Security Audit script (LBSA): http://wiki.metawerx.net/wiki/LBSA linuxhealthcheck (linoxide): http://downloads.linoxide.com/linuxhealthcheck.sh


 * SNMP
 * Penetration
 * SQLi
 * PHP
 * Generating Shells
 * Custom Shells
 * Compiling
 * Privilege Escalation
 * Maintaining Access
 * Network Shells
 * File Transfer
 * TFTP
 * Windows wget alternative
 * Pivoting
 * Metasploit
 * SSH
 * Misc
 * Useful Commands And Notes
 * Windows
 * Tasks / Services
 * Base64 encoding / decoding
 * Dump passwords
 * Security settings
 * Variables
 * Location of files
 * MySQL
 * General
 * File access