# d4Rk's 1337 h4x0r guide

## d4Rk's 1337 h4x0r guide

- [Introduction](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/readme.md)
- [Recon](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/reconnaissance/01-reconnaissance.md)
- [OSINT](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/reconnaissance/02-osint.md)
- [Network discovery](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/enumeration/01-network-discovery.md)
- [Port scanning](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/enumeration/02-port-scanning.md)
- [Webserver scanning](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/enumeration/03-webserver-scanning.md)
- [Exploit detection](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/enumeration/04-exploit-detection.md)
- [Fuzzing](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/enumeration/05-fuzzing.md)
- [Process monitoring](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/enumeration/06-process-monitoring.md)
- [Shells](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/shells.md)
- [Shells](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/shells/01-shells.md)
- [TTY](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/shells/02-tty.md)
- [Passwords](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/passwords.md)
- [Hashcat](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/passwords/01-hashcat.md)
- [John the Ripper (JTR)](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/passwords/02-john-the-ripper.md)
- [Hydra](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/passwords/03-hydra.md)
- [Passwords & credentials](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/passwords/04-passwords-credentials.md)
- [Web](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/web.md)
- [SQL injection (SQLi)](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/web/sql-injection.md)
- [Cross site scripting (XSS)](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/web/cross-site-scripting.md)
- [File inclusions (LFI, RFI)](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/web/file-inclusions.md)
- [Directory traversal](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/web/directory-traversal.md)
- [Cross site request forgery (CSRF)](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/web/cross-site-request-forgery.md)
- [XML external entity (XXE)](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/web/xml-external-entity-injection.md)
- [Cross origin resource sharing (CORS)](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/web/cross-origin-resource-sharing.md)
- [Server-side request forgery (SSRF)](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/web/server-side-request-forgery.md)
- [Server-side template injection (SSTI)](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/web/server-side-template-injection.md)
- [Access control vulnerabilities](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/web/access-control.md)
- [Authentication vulnerabilities](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/web/authentication.md)
- [JWT attacks](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/web/jwt-attacks.md)
- [File uploads](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/web/file-uploads.md)
- [Host header attacks](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/web/host-header-attacks.md)
- [Clickjacking](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/web/clickjacking.md)
- [Logic flaws](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/web/logic-flaws.md)
- [OS command injection](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/web/os-command-injection.md)
- [HTTP Request smuggling](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/web/http-request-smuggling.md)
- [Insecure deserialization](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/web/insecure-deserialization.md)
- [DOM-based](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/web/dom-based.md)
- [WebSockets](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/web/websockets.md)
- [Web cache poisoning](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/web/web-cache-poisoning.md)
- [Buffer overflow](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/buffer-overflow.md)
- [General](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/buffer-overflow/01-general.md)
- [Linux](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/buffer-overflow/02-linux.md)
- [Windows](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/buffer-overflow/03-windows.md)
- [Misc](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/misc.md)
- [Evasion](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/misc/01-evasion.md)
- [SQSH](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/misc/02-sqsh.md)
- [Linux](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/privilege-escalation/linux.md)
- [Overview](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/privilege-escalation/linux/01-overview.md)
- [Windows](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/privilege-escalation/windows.md)
- [Overview](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/privilege-escalation/windows/01-overview.md)
- [Mimikatz](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/privilege-escalation/windows/02-mimikatz.md)
- [PowerSploit](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/privilege-escalation/windows/03-power-sploit.md)
- [Juicy Potato, Rotten Potato (NG)](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/privilege-escalation/windows/04-juicy-potato-rotten-potato.md)
- [JAWS](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/privilege-escalation/windows/05-jaws.md)
- [Empire](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/privilege-escalation/windows/06-empire.md)
- [SILENTTRINITY](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/privilege-escalation/windows/07-silenttrinity.md)
- [Loot](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/post-exploitation/01-loot.md)
- [Pivoting](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/post-exploitation/02-pivoting.md)
- [Standalone Tools](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/post-exploitation/03-tools.md)
- [TCP](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/tcp.md)
- [TCP 21: FTP](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/tcp/tcp-21-ftp.md)
- [TCP 22: SSH](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/tcp/tcp-22-ssh.md)
- [TCP 23: Telnet](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/tcp/tcp-23-telnet.md)
- [TCP 25, 587: SMTP](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/tcp/tcp-25-587-smtp.md)
- [TCP 53: DNS](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/tcp/tcp-53-dns.md)
- [TCP 80, 443: HTTP(S)](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/tcp/tcp-80-443-http.md)
- [TCP 88: Kerberos](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/tcp/tcp-88-kerberos.md)
- [TCP 110, 995: POP3(S)](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/tcp/tcp-110-995-pop3.md)
- [TCP 111: rpcbind](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/tcp/tcp-111-rpcbind.md)
- [TCP 135: MSRPC](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/tcp/tcp-135-msrpc.md)
- [TCP 139, 445: NetBIOS, SMB](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/tcp/tcp-139-445-netbios-smb.md)
- [TCP 143, 993: IMAP(S)](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/tcp/tcp-143-993-imap.md)
- [TCP 389, 636, 3268, 3269: LDAP](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/tcp/tcp-389-636-3268-3269-ldap.md)
- [TCP 1433, UDP 1434: MSSQL Server](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/tcp/tcp-1433-udp-1434-mssql-server.md)
- [TCP 2049: NFS](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/tcp/tcp-2049-nfs.md)
- [TCP 3306: MySQL](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/tcp/tcp-3306-mysql.md)
- [TCP 3389: RDP](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/tcp/tcp-3389-rdp.md)
- [TCP 5985: WinRM](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/tcp/tcp-5985-winrm.md)
- [TCP 6379: Redis](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/tcp/tcp-6379-redis.md)
- [TCP 27017: MongoDB](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/tcp/tcp-27017-mongodb.md)
- [UDP](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/udp.md)
- [UDP 137, 138, TCP 139: NetBIOS](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/udp/udp-137-138-tcp-139-netbios.md)
- [UDP 161: SNMP](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/udp/udp-161-snmp.md)
- [Misc](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/misc.md)
- [Active Directoy](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/misc/active-directoy.md)
- [Apache Tomcat](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/misc/apache-tomcat.md)
- [Drupal](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/misc/drupal.md)
- [H2 Databases](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/misc/h2-databases.md)
- [IIS](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/misc/iis.md)
- [IPsec](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/misc/ipsec.md)
- [IRC](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/misc/irc.md)
- [Java Applets](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/misc/java-applets.md)
- [Java RMI](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/misc/java-rmi.md)
- [Jenkins](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/misc/jenkins.md)
- [Joomla](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/misc/joomla.md)
- [Oracle](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/misc/oracle.md)
- [PHP](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/misc/php.md)
- [SharePoint](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/misc/sharepoint.md)
- [WordPress](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/services/misc/wordpress.md)
- [Overview](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/file-transfer/01-overview.md)
- [Wget](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/file-transfer/02-wget.md)
- [Pure-FTPd](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/file-transfer/03-pure-ftpd.md)
- [TFTP](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/file-transfer/04-tftp.md)
- [VBScript: Wget clone](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/file-transfer/05-vbscript-wget-clone.md)
- [Bash](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/misc/bash.md)
- [Burp Suite](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/misc/burp-suite.md)
- [Crypto](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/misc/crypto.md)
- [Ebowla](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/misc/ebowla.md)
- [Firefox extensions](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/misc/firefox-extensions.md)
- [Impacket](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/misc/impacket.md)
- [Memory forensics](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/misc/memory-forensics.md)
- [Metasploit Framework (MSF)](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/misc/metasploit-framework.md)
- [MITM](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/misc/mitm.md)
- [Msfvenom](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/misc/msfvenom.md)
- [Pass the Hash (PTH)](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/misc/pass-the-hash.md)
- [PowerShell](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/misc/powershell.md)
- [PowerShell on Linux](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/misc/powershell-linux.md)
- [Wireshark](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/misc/wireshark.md)
- [Wordlists and dictionaries](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/misc/wordlists-dictionaries.md)
- [Platforms](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/bug-bounty/01-platforms.md)
- [Tools](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/bug-bounty/02-tools.md)