# Brinkles Pentesting Notebook ## Brinkles Pentesting Notebook - [Introduction](https://notes.brinkles.wiki/introduction.md) - [My Journey to Pentesting](https://notes.brinkles.wiki/introduction/my-journey-to-pentesting.md) - [Certification Reviews](https://notes.brinkles.wiki/certification-reviews.md) - [OSEP Review](https://notes.brinkles.wiki/certification-reviews/osep-review.md) - [CISSP Review](https://notes.brinkles.wiki/certification-reviews/cissp-review.md) - [OSCP Review](https://notes.brinkles.wiki/certification-reviews/oscp-review.md) - [RTJC Review](https://notes.brinkles.wiki/certification-reviews/rtjc-review.md) - [RTAC Review](https://notes.brinkles.wiki/certification-reviews/rtac-review.md) - [CEH Review](https://notes.brinkles.wiki/certification-reviews/ceh-review.md) - [CRTO Review](https://notes.brinkles.wiki/certification-reviews/crto-review.md) - [PNPT Review](https://notes.brinkles.wiki/certification-reviews/pnpt-review.md) - [eWPT Review](https://notes.brinkles.wiki/certification-reviews/ewpt-review.md) - [eJPTv1 Review](https://notes.brinkles.wiki/certification-reviews/ejptv1-review.md) - [CCNP Security Review](https://notes.brinkles.wiki/certification-reviews/ccnp-security-review.md) - [CCNA Review](https://notes.brinkles.wiki/certification-reviews/ccna-review.md) - [CompTIA Net +, A+ Review](https://notes.brinkles.wiki/certification-reviews/comptia-net-+-a+-review.md) - [C2 and Payloads](https://notes.brinkles.wiki/c2-and-payloads.md) - [Sliver C2](https://notes.brinkles.wiki/c2-and-payloads/sliver-c2.md) - [Cobalt Strike](https://notes.brinkles.wiki/c2-and-payloads/cobalt-strike.md) - [BOFs and Aggressor Scripts](https://notes.brinkles.wiki/c2-and-payloads/cobalt-strike/bofs-and-aggressor-scripts.md) - [Situational Awareness BOF](https://notes.brinkles.wiki/c2-and-payloads/cobalt-strike/bofs-and-aggressor-scripts/situational-awareness-bof.md) - [HOLLOW BOF](https://notes.brinkles.wiki/c2-and-payloads/cobalt-strike/bofs-and-aggressor-scripts/hollow-bof.md) - [DLL\_Version\_Enumeration\_BOF](https://notes.brinkles.wiki/c2-and-payloads/cobalt-strike/bofs-and-aggressor-scripts/dll_version_enumeration_bof.md) - [InlineExecute-Assembly BOF](https://notes.brinkles.wiki/c2-and-payloads/cobalt-strike/bofs-and-aggressor-scripts/inlineexecute-assembly-bof.md) - [BOF.NET](https://notes.brinkles.wiki/c2-and-payloads/cobalt-strike/bofs-and-aggressor-scripts/bof.net.md) - [C2-Tool-Collection BOFs](https://notes.brinkles.wiki/c2-and-payloads/cobalt-strike/bofs-and-aggressor-scripts/c2-tool-collection-bofs.md) - [Inline-Execute-PE](https://notes.brinkles.wiki/c2-and-payloads/cobalt-strike/bofs-and-aggressor-scripts/inline-execute-pe.md) - [Payloads](https://notes.brinkles.wiki/c2-and-payloads/cobalt-strike/payloads.md) - [Tools](https://notes.brinkles.wiki/tools.md) - [Internal Tools](https://notes.brinkles.wiki/tools/internal-tools.md) - [BloodHound](https://notes.brinkles.wiki/tools/internal-tools/bloodhound.md) - [Certi](https://notes.brinkles.wiki/tools/internal-tools/certi.md): Certi.py can be leveraged with any set of credentials (or TGT) on an Active Directory domain to enumerate AD CS information from a remote Linux host. - [Coercer](https://notes.brinkles.wiki/tools/internal-tools/coercer.md) - [CrackMapExec](https://notes.brinkles.wiki/tools/internal-tools/crackmapexec.md) - [DCSync](https://notes.brinkles.wiki/tools/internal-tools/dcsync.md): DCSync is used to verify that the hash found can be easily cracked. The easiest way is through the Beacon in C2. - [DFSCoerce](https://notes.brinkles.wiki/tools/internal-tools/dfscoerce.md) - [DonPAPI](https://notes.brinkles.wiki/tools/internal-tools/donpapi.md) - [WMIEXEC](https://notes.brinkles.wiki/tools/internal-tools/wmiexec.md) - [Kerberoasting](https://notes.brinkles.wiki/tools/internal-tools/kerberoasting.md) - [Lsassy](https://notes.brinkles.wiki/tools/internal-tools/lsassy.md) - [mitm6](https://notes.brinkles.wiki/tools/internal-tools/mitm6.md) - [Pcredz](https://notes.brinkles.wiki/tools/internal-tools/pcredz.md): \*\*\* Monitor SMB (or other cleartext protocols) Traffic for Hashes \*\*\* - [PowerSploit](https://notes.brinkles.wiki/tools/internal-tools/powersploit.md) - [PrivExchange](https://notes.brinkles.wiki/tools/internal-tools/privexchange.md) - [Responder / RunFinger](https://notes.brinkles.wiki/tools/internal-tools/responder-runfinger.md): Load up the Poisoner! - [Rubeus](https://notes.brinkles.wiki/tools/internal-tools/rubeus.md) - [Seatbelt](https://notes.brinkles.wiki/tools/internal-tools/seatbelt.md) - [Seth](https://notes.brinkles.wiki/tools/internal-tools/seth.md) - [Web App Pentesting ](https://notes.brinkles.wiki/tools/web-app-pentesting.md) - [Payload All The Things](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things.md) - [Directory traversal](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/directory-traversal.md) - [Deep Traversal](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/directory-traversal/deep-traversal.md) - [More Directory Traversal Payloads](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/directory-traversal/more-directory-traversal-payloads.md) - [SAML Injection](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/saml-injection.md) - [XXE - XML External Entity](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/xxe-xml-external-entity.md) - [XSS - Cross Site Scripting](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/xss-cross-site-scripting.md) - [XSLT Injection](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/xslt-injection.md) - [XPATH injection](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/xpath-injection.md) - [Upload Insecure Files](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/upload-insecure-files.md) - [SQL injection](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/sql-injection.md) - [MSSQL Injection](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/sql-injection/mssql-injection.md) - [MYSQL Injection](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/sql-injection/mysql-injection.md) - [Oracle SQL Injection](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/sql-injection/oracle-sql-injection.md) - [PostgreSQL injection](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/sql-injection/postgresql-injection.md) - [SQLite Injection](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/sql-injection/sqlite-injection.md) - [Server Side Templates Injections](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/server-side-templates-injections.md) - [Server-Side Request Forgery](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/server-side-request-forgery.md) - [Payloads Included in Server-Side Request Forgery](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/server-side-request-forgery/payloads-included-in-server-side-request-forgery.md) - [Request Smuggling](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/request-smuggling.md) - [OAuth](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/oauth.md) - [NoSQL injection](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/nosql-injection.md) - [LDAP injection](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/ldap-injection.md) - [Kubernetes](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/kubernetes.md) - [JSON Web Token](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/json-web-token.md) - [HTTP Parameter Pollution](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/http-parameter-pollution.md) - [GraphQL injection](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/graphql-injection.md) - [CORS Misconfiguration](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/cors-misconfiguration.md) - [CRLF](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/crlf.md) - [Cross-Site Request Forgery](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/cross-site-request-forgery.md) - [CSV Injection (Formula Injection)](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/csv-injection-formula-injection.md) - [File Inclusion](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/file-inclusion.md) - [PHPINFOlfi.py](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/file-inclusion/phpinfolfi.py.md) - [uploadlfi.py](https://notes.brinkles.wiki/tools/web-app-pentesting/payload-all-the-things/file-inclusion/uploadlfi.py.md) - [Network Security](https://notes.brinkles.wiki/network-security.md) - [DMVPN GRE NHRP IPsec Profiles](https://notes.brinkles.wiki/network-security/dmvpn-gre-nhrp-ipsec-profiles.md) - [Flex VPNs](https://notes.brinkles.wiki/network-security/flex-vpns.md) - [GET VPN with Key Server](https://notes.brinkles.wiki/network-security/get-vpn-with-key-server.md) - [IKE Site to Site w/ IPSec](https://notes.brinkles.wiki/network-security/ike-site-to-site-w-ipsec.md) - [Point to Point GRE over IPSec](https://notes.brinkles.wiki/network-security/point-to-point-gre-over-ipsec.md) - [Remote Access VPN](https://notes.brinkles.wiki/network-security/remote-access-vpn.md) - [Helpful Cisco Firewall CLI Commands](https://notes.brinkles.wiki/network-security/helpful-cisco-firewall-cli-commands.md)