Difference between revisions of "Main Page"
Jump to navigation
Jump to search
m |
(→CVEs) |
||
(13 intermediate revisions by the same user not shown) | |||
Line 1: | Line 1: | ||
− | <strong> | + | <strong>SecWiki is currently part of my personal notebook. If your a user, your free to consume the information and add to it too! Sharing is caring at the end of the day.</strong> |
Consult the [https://www.mediawiki.org/wiki/Special:MyLanguage/Help:Contents User's Guide] for information on using the wiki software. | Consult the [https://www.mediawiki.org/wiki/Special:MyLanguage/Help:Contents User's Guide] for information on using the wiki software. | ||
+ | |||
+ | == PenTest Runbooks == | ||
+ | * [[OS-INT on Users]] | ||
+ | * [[OS-INT on Infrastructure]] | ||
+ | * [[Unauthenticated Network Enumeration]] | ||
+ | * [[Unauthenticated Target Host Enumeration]] | ||
+ | * [[Post Exploitation - Enumeration Windows]] | ||
+ | * [[Post Exploitation - Enumeration Linux]] | ||
+ | * [[Post Exploitation - Enumeration Active Directory]] | ||
+ | * [[External - Password Spray via Burp Suite]] | ||
+ | * [[Windows Network - Unauthenticated to Domain User via responder/LLMNR]] | ||
+ | * [[Windows Network - Unauthenticated to Domain User via local admin pass the hash]] | ||
+ | * [[Windows Network - Unauthenticated to Domain User via password spray]] | ||
+ | * [[Windows Network - Domain User to Domain Admin via SPNs]] | ||
+ | * [[Wireless Network Attacks]] | ||
+ | * [[Generating Username and Password Lists]] | ||
+ | * [[Cracking Hashes]] | ||
+ | |||
+ | == Windows Commands == | ||
+ | [[PowerShell Code Blocks]] | ||
== Linux Commands == | == Linux Commands == | ||
− | [[wget]] | + | [[smbclient]] - Access SMB / Samba shares from Linux <br> |
+ | [[wget]] - Command line file download | ||
+ | |||
+ | == PenTesting Tools A-Z == | ||
+ | *[[hashcat]] | ||
+ | *[[Nessus]] | ||
+ | *[[nmap]] | ||
+ | *[[responder]] | ||
+ | |||
+ | == Windows Remediation and Security Hardening == | ||
+ | * [[Disable NetBIOS on the DHCP server]] | ||
+ | |||
+ | == Software Releases, Version Numbers and Builds == | ||
+ | === Windows === | ||
+ | * [[Windows Build Numbers]] | ||
+ | === Linux === | ||
+ | * [[SLES (SUSE Linux Enterprise Server) Kernel Versions]] <br> | ||
+ | === Networking === | ||
+ | * None | ||
+ | === Applications === | ||
+ | * MS SQL Server [https://sqlserverbuilds.blogspot.com/] | ||
+ | * SharePoint 2013 [https://www.toddklindt.com/blog/Lists/Posts/Post.aspx?ID=346] | ||
+ | * SharePoint 2016 [https://social.technet.microsoft.com/wiki/contents/articles/34002.sharepoint-2016-build-numbers.aspx] | ||
+ | |||
+ | == CVEs == | ||
+ | *[[CVE-2019-0708]] - BlueKeep<br> | ||
+ | *[[]] - Tmp<br> | ||
+ | *[[]] - Tmp<br> | ||
+ | *[[]] - Tmp<br> | ||
+ | *[[]] - Tmp<br> | ||
+ | *[[]] - Tmp<br> | ||
+ | *[[]] - Tmp<br> | ||
+ | *[[]] - Tmp<br> | ||
+ | *[[]] - Tmp<br> | ||
+ | *[[]] - Tmp<br> | ||
== Other == | == Other == | ||
[[MS17-010]] <br> | [[MS17-010]] <br> | ||
− | |||
Activate | Activate |
Latest revision as of 09:56, 8 September 2019
SecWiki is currently part of my personal notebook. If your a user, your free to consume the information and add to it too! Sharing is caring at the end of the day.
Consult the User's Guide for information on using the wiki software.
Contents
PenTest Runbooks
- OS-INT on Users
- OS-INT on Infrastructure
- Unauthenticated Network Enumeration
- Unauthenticated Target Host Enumeration
- Post Exploitation - Enumeration Windows
- Post Exploitation - Enumeration Linux
- Post Exploitation - Enumeration Active Directory
- External - Password Spray via Burp Suite
- Windows Network - Unauthenticated to Domain User via responder/LLMNR
- Windows Network - Unauthenticated to Domain User via local admin pass the hash
- Windows Network - Unauthenticated to Domain User via password spray
- Windows Network - Domain User to Domain Admin via SPNs
- Wireless Network Attacks
- Generating Username and Password Lists
- Cracking Hashes
Windows Commands
Linux Commands
smbclient - Access SMB / Samba shares from Linux
wget - Command line file download
PenTesting Tools A-Z
Windows Remediation and Security Hardening
Software Releases, Version Numbers and Builds
Windows
Linux
Networking
- None
Applications
CVEs
- CVE-2019-0708 - BlueKeep
- [[]] - Tmp
- [[]] - Tmp
- [[]] - Tmp
- [[]] - Tmp
- [[]] - Tmp
- [[]] - Tmp
- [[]] - Tmp
- [[]] - Tmp
- [[]] - Tmp
Other
Activate https://www.mediawiki.org/wiki/Extension:SyntaxHighlight#Installation
SUSE Enterprise Linux PAM - lockout https://unix.stackexchange.com/questions/78182/how-to-lock-users-after-5-unsuccessful-login-tries