Please enable JavaScript.

Coggle requires JavaScript to display documents.

Offensive Security Advancement Track (OSAT), Metasploit Deep Dive, AL NAFI…

- - - - 4.7.19 Testing for Server-Side Request Forgery
        
        4.7.18 Testing for Server-side Template Injection
        
        4.7.17 Testing for Host Header Injection
        
        4.7.16 Testing for HTTP Incoming Requests
        
        4.7.15 Testing for HTTP Splitting Smuggling
        
        4.7.14 Testing for Incubated Vulnerability
        
        4.7.13 Testing for Format String Injection
        
        4.7.12 Testing for Command Injection
        
        4.7.11.2 Testing for Remote File Inclusion
        
        4.7.11.1 Testing for Local File Inclusion
        
        4.7.11 Testing for Code Injection
        
        4.7.10 Testing for IMAP SMTP Injection
        
        4.7.9 Testing for XPath Injection
        
        4.7.8 Testing for SSI Injection
        
        4.7.7 Testing for XML Injection
        
        4.7.6 Testing for LDAP Injection
        
        4.7.5.8 Testing for Client-side
        
        4.7.5.7 Testing for ORM Injection
        
        4.7.5.6 Testing for NoSQL Injection
        
        4.7.5.5 Testing for MS Access
        
        4.7.5.4 Testing PostgreSQL
        
        4.7.5.3 Testing for SQL Server
        
        4.7.5.2 Testing for MySQL
        
        4.7.5.1 Testing for Oracle
        
        4.7.5 Testing for SQL Injection
        
        4.7.4 Testing for HTTP Parameter Pollution
        
        4.7.3 Testing for HTTP Verb Tampering
        
        4.7.2 Testing for Stored Cross Site Scripting
        
        4.7.1 Testing for Reflected Cross Site Scripting
    - - 4.6.9 Testing for Session Hijacking
        
        4.6.8 Testing for Session Puzzling
        
        4.6.7 Testing Session Timeout
        
        4.6.6 Testing for Logout Functionality
        
        4.6.5 Testing for Cross Site Request Forgery
        
        4.6.4 Testing for Exposed Session Variables
        
        4.6.3 Testing for Session Fixation
        
        4.6.2 Testing for Cookies Attributes
        
        4.6.1 Testing for Session Management Schema
    - - 4.5.4 Testing for Insecure Direct Object References
        
        4.5.3 Testing for Privilege Escalation
        
        4.5.2 Testing for Bypassing Authorization Schema
        
        4.5.1 Testing Directory Traversal File Include
    - - 4.4.10 Testing for Weaker Authentication in Alternative Channel
        
        4.4.9 Testing for Weak Password Change or Reset Functionalities
        
        4.4.8 Testing for Weak Security Question Answer
        
        4.4.7 Testing for Weak Password Policy
        
        4.4.6 Testing for Browser Cache Weaknesses
        
        4.4.5 Testing for Vulnerable Remember Password
        
        4.4.4 Testing for Bypassing Authentication Schema
        
        4.4.3 Testing for Weak Lock Out Mechanism
        
        4.4.2 Testing for Default Credentials
        
        4.4.1 Testing for Credentials Transported over an Encrypted Channel
    - - 4.3.5 Testing for Weak or Unenforced Username Policy
        
        4.3.4 Testing for Account Enumeration and Guessable User Account
        
        4.3.3 Test Account Provisioning Process
        
        4.3.2 Test User Registration Process
        
        4.3 Identity Management Testing
    - - 4.2.2 Test Application Platform Configuration
        
        4.2.6 Test HTTP Methods
        
        4.2.10 Test for Subdomain Takeover
        
        4.2.10 Test for Subdomain Takeover
    - - 2
        
        4.1.10 Map Application Architecture
        
        4.1.8 Fingerprint Web Application Framework
        
        4.1.6 Identify Application Entry Points
        
        4.1.3 Review Webserver Metafiles for Information Leakage
    - - 4.1.1 Conduct Search Engine Discovery Reconnaissance for Information Leakage
  - - - Installation of BloodHound
      - SCP-SSH SharpHound
      - AD(Active Directory) Collection With
      - Analyzing Gathered Data With BloodHound Per-Bulit Queries
      - 4 episodes
      - Active Directory & Bloodhound
      - Dump Hashes and Crack With JTR
      - Crack Hashes With Hashcat
      - 2 episodes
      - Hash Cracking With JTR & HashCat
      - Beak Multiple Service Passwords With Hydra
      - 1 episodes
      - Crack With Hydra
      - Introduction to Empire Framwork
      - Privesc
      - Mimikatz
      - Collection
      - Situational Awareness
      - Persistence
      - Target Exploitation With Empire-Framework
      - 7 episodes
      - Empire-Framework
      - Metasploit Post Exploitation
      - Exploit RCE on Windows Server 2008 With Metasploit
      - Exploit RCE on Windows XP With Metasploit
      - Exploit Windows Server 2003 With Metasploit
      - Scan Target and Find Exploit Using Metasploit
      - Introduction to Metasploit
      - 6 episodes
      - Metasploit
      - Use Nessus to Perform Scan and Find Vulner
      - Generate a Reports after Perform a Scan
      - 2 episodes
      - Nessus Vulnerability Scanner
      - Port Scanning Using Netcat
      - Use Netcat to Move Files From One System to Another Syste
      - Banner Grabbing Using Netcat
      - Netcat Reverse Shell
      - 4 episodes
      - Netcat
      - Nmap Scripting Engine
      - 1 episodes
      - Nmap Scripting Engine
      - OS-Fingerprinting With Nmap
      - 1 episodes
      - OS Fingerprinting With Nmap
      - Scan Subnet With Masscan
      - 1 episodes
      - Scan SubNet With Masscan & Discove Open Ports
      - Generate Report in Recon-NG
      - Recon-NG Keys
      - Recon-ng Modules
      - Recon-ng Marketplace and Modules
      - Deep Dive into Recon-NG
      - Introduction to Recon-NG
      - 6 episodes
      - Information Gathering With Recon-NG
      - SNMP Pentesting
      - SNMP Pentesting
  - - - Shodan a Search Engine
      - Harverster
      - Hijacking
      - XSS Stored
      - Command Execution
      - FTP Login
      - Sherlock
      - CrackThe Hash With HashCat
      - Flan Scan
      - Subdomain Enumration
      - Tool You Need To Enumrate DNS
      - DNS
      - Burp Intruder Deep Dive
      - VA BurpSuite
      - Authenticated Scan With Bur
      - Intercept Request Useing Burp Proxy
      - Play Around With Burpsuite
      - Vulnerblity Assessment ZAP
      - Firewall Detection
      - Firewall_Evesion
      - Network Mapper