Páginas útiles

General Pentesting

LogoIntroducciónCheatsheet
LogoHackTricksHackTricks
LogoPentesting Web checklistPentest Book
LogoGitHub - swisskyrepo/PayloadsAllTheThings: A list of useful payloads and bypass for Web Application Security and Pentest/CTFGitHub

Cloud

LogoHackTricks CloudHackTricks Cloud
LogoAWS Security Checklist

Red Team

LogoWhat is ired.team?Red Teaming Experiments
Red Team Notes
Logosliver-opsec-notes - зимняя тишина

AD

LogoAttacking Active Directory: 0 to 0.9 | zer1t0
LogoActive Directory | HideAndSec
LogoIntroductionCrackMapExec ~ CME WIKI
LogoActive Directory Enumeration: RPCClient - Hacking ArticlesHacking Articles
LogoGitHub - PowerShellMafia/PowerSploit: PowerSploit - A PowerShell Post-Exploitation FrameworkGitHub
LogoBloodHound: Six Degrees of Domain Admin — BloodHound 3.0.3 documentation
LogoCrackMapExec Module Library - InfosecMatterInfosecMatter

Plataformas de aprendizaje

Try Hackme:

o Web Básico https://tryhackme.com/path/outline/web

o Metodología Pentesting: https://tryhackme.com/room/hackermethodology

o basic pentesting https://tryhackme.com/room/basicpentestingjt

o Reversing: https://tryhackme.com/room/reverselfiles

o Máquina tipo CTF: https://tryhackme.com/room/source

o DNS in detail: https://tryhackme.com/room/dnsindetail

o HTTP in detail: https://tryhackme.com/room/httpindetail

o Walking an application: https://tryhackme.com/room/walkinganapplication

o Content Discovery: https://tryhackme.com/room/contentdiscovery

o BurpSuite Basics: https://tryhackme.com/room/burpsuitebasics

o Owasp top 10: https://tryhackme.com/room/owasptop10

o Nmap: https://tryhackme.com/room/rpnmap

o A crash course on various topics in penetration testing: https://tryhackme.com/room/ccpentesting

o máquina sencilla con pasos a seguir: https://tryhackme.com/room/vulnversity

o eternal blue con escalada de privilegios y password cracking: https://tryhackme.com/room/blue

Port Swigger Academy (Academia de solo vulnerabilidades Web)

LogoLearning path | Web Security AcademyWebSecAcademy

Overthewire

LogoOverTheWire: Level Goal

ATENEA

https://atenea.ccn-cert.cni.es/escuela/homeatenea.ccn-cert.cni.es

Videos de Pentesting

· Curso completo de pentesting básico Parte 1 (7 Horas en inglés): https://www.youtube.com/watch?v=3FNYvj2U0HM

· Curso completo de pentesting básico Parte 2 (7 Horas en inglés): https://www.youtube.com/watch?v=sH4JCwjybGs

· Curso de pentesting Web básico (3 Horas en español): https://www.youtube.com/watch?v=roG3r5tNWOU

· Resolución máquina tipo CTF (18 minutos español): https://www.youtube.com/watch?v=pNRsgXzGn9M

· Resolviendo #CTF #MrRobot de #tryhackme (1 Hora y media, español): https://www.youtube.com/watch?v=8qsH2THpQf8

Lecturas Recomendadas:

· https://www.cbtnuggets.com/blog/training/exam-prep/how-to-prepare-for-a-capture-the-flag-hacking-competition

· https://www.hackplayers.com/2015/09/herramientas-y-recursos-para-preparar-en-CTF.html

Noticias a Informativo

LogoCredential Dumping – Active Directory Reversible Encryption - Hacking ArticlesHacking Articles
LogoCTFtime.org / All about CTF (Capture The Flag)CTFtime

Utilidades

CyberChef
Crypto things
LogoNVD - CVSS v3 Calculator
CVSS Generator
LogoGTFOBins
Post Explotation
LogoOnline - Reverse Shell Generator
LogoOffensive Security’s Exploit Database Archive
Exploit Data Base

Metodologías

Owasp

LogoOWASP Web Security Testing Guide | OWASP Foundation

OSSTMM

https://www.isecom.org/OSSTMM.3.pdf

Mitre ATT&CK

LogoMITRE ATT&CK®

DeTT&CT

LogoDeTT&CT : Mapping detection to MITRE ATT&CKNVISO Labs
LogoCWE - Common Weakness Enumeration
LogoCVE - CVE
AnteriorFliper ZeroSiguienteKali Set Up

Última actualización