Penetration Tester | Ethical Hacker

Penetration Testing

Active Directory • Vulnerability Assessment Network Enumeration with Nmap Database Emumeration and Exploitation Service Enumeration and Exploitation • FTP • SMB • NFS • DNS • SMTP • IMAP / POP3 • SNMP • MySQL • Apache • nginx • SSH • LDAP / Kerboros • WinRM Web-Application Enumeration and Exploitation • Wordpress • Joomla • Drupal • Tomcat / Tomcat CGI • Jenkins • Splunk • PRTG Network Monitor • Git / Gitlab • ColdFusion Web-Pentesting • XSS • IDOR • SQLI • Command Injection • File Upload Attacks • File Inclusion (LFI & RFI) • Session Hijacking • Authentication Bypasses • XXE Active Directory Enumeration & Exploitation • LLMNR/NBT-NS Poisoning • Password Spraying • Kerberoasting • Access Control List (ACL) Abuse • DCSync Attacks • Attacking Cross Domain Forest Trust Attacks (Child > Parent) • Bloodhound • LDAP / Kerboros Enumeration & Exploitation Tools & Scripting: • Burp Suite Pro (Intruder, Repeater, Collaborator/ etc • Zap Proxy • Gobuster / ffuf / dirsearch / Feroxbuster • Nikto / Nuclei • sqlmap • metasploit / exploitdb / searchsploit / Mythic / Costum C2’s • LinPEAS / WinPEAS / pspy / etc • Kali Linux / BlackArch • Hydra / John The Ripper / Hashcat • PowerVIew / SharpView • Bloodhound / Sharphound • Kerbrute • Impacked Suite • Responder / Inveigh • Rpcclient • CrackMapExec (CME/NXC) • Rubeus • Ldapsearch / Windapsearch • Smbclient / smbmap • EvilWinRM Post-Exploitation (Windows / Linux) • Credential Dumping (Mimikatz, LaZagne, secretsdump) • Lateral Movement (PsExec, WMI, RDP, SSH Keys, SQL Linked Servers) • Privilege Escalation (Kernel Exploits, Misconfiguration) • Persistence (Scheduled Tasks, Registry, Services) • Tunneling & Pivoting (chisel, plink, SSH tunnels,LigoloNG) • Docker Escape