hacktricks/SUMMARY.md

Table of contents

👾 Welcome!

• HackTricks
• HackTricks Values & faq
• About the author
• Getting Started in Hacking

🤩 Generic Methodologies & Resources

• Basic Forensic Methodology
  • Baseline Monitoring
  • Anti-Forensic Techniques
  • Docker Forensics
  • Linux Forensics
  • Malware Analysis
  • Memory dump analysis
  • Partitions/File Systems/Carving
    • EXT
    • File/Data Carving & Recovery Tools
    • NTFS
  • Pcap Inspection
    • DNSCat pcap analysis
    • USB Keystrokes
    • Wifi Pcap Analysis
    • Wireshark tricks
  • Specific Software/File-Type Tricks
    • Decompile compiled python binaries (exe, elf) - Retreive from .pyc
    • Browser Artifacts
    • Desofuscation vbs (cscript.exe)
    • Local Cloud Storage
    • Office file analysis
    • PDF File analysis
    • PNG tricks
    • Video and Audio file analysis
    • ZIPs tricks
  • Windows Artifacts
    • Windows Processes
    • Interesting Windows Registry Keys

🦅 Reversing & Exploiting

• Reversing Tools & Basic Methods
  • Angr
    • Angr - Examples
  • Z3 - Satisfiability Modulo Theories (SMT)
  • Cheat Engine
  • Blobrunner
• Common API used in Malware
• Word Macros
• Linux Exploiting (Basic) (SPA)
  • Format Strings Template
  • ROP - call sys_execve
  • ROP - Leaking LIBC address
    • ROP - Leaking LIBC template
  • Bypassing Canary & PIE
  • Ret2Lib
  • Fusion
• Exploiting Tools
  • PwnTools
• Windows Exploiting (Basic Guide - OSCP lvl)

🔮 Crypto & Stego

• Cryptographic/Compression Algorithms
  • Unpacking binaries
• Certificates
• Cipher Block Chaining CBC-MAC
• Crypto CTFs Tricks
• Electronic Code Book (ECB)
• Hash Length Extension Attack
• Padding Oracle
• RC4 - Encrypt&Decrypt
• Stego Tricks
• Esoteric languages
• Blockchain & Crypto Currencies

🧐 External Platforms Reviews/Writeups

• BRA.I.NSMASHER Presentation
  • Basic Bruteforcer
  • Basic Captcha Breaker
  • BIM Bruteforcer
  • Hybrid Malware Classifier Part 1
  • ML Basics
    • Feature Engineering
• INE Courses and eLearnSecurity Certifications Reviews

🦂 C2

• Merlin
• Empire
• Salseo
• ICMPsh
• Cobalt Strike

✍ TODO

• Other Big References
• Rust Basics
• More Tools
• MISC
• Pentesting DNS
• Hardware Hacking
  • I2C
  • UART
  • Radio
  • JTAG
  • SPI
• Radio Hacking
  • Pentesting RFID
  • Infrared
  • Sub-GHz RF
  • iButton
  • Flipper Zero
    • FZ - NFC
    • FZ - Sub-GHz
    • FZ - Infrared
    • FZ - iButton
    • FZ - 125kHz RFID
  • Proxmark 3
  • FISSURE - The RF Framework
  • Low-Power Wide Area Network
  • Pentesting BLE - Bluetooth Low Energy
• Burp Suite
• Other Web Tricks
• Interesting HTTP
• Emails Vulnerabilities
• Android Forensics
• TR-069
• 6881/udp - Pentesting BitTorrent
• CTF Write-ups
  • challenge-0521.intigriti.io
  • Try Hack Me
    • hc0n Christmas CTF - 2019
    • Pickle Rick
• 1911 - Pentesting fox
• Online Platforms with API
• Stealing Sensitive Information Disclosure from a Web
• Post Exploitation
• Cookies Policy