Hi everyone!

Here is a compilation of all the useful links. This post will continue to be updated so stay tuned!

Access SQL server

• Sqsh access MS SQL server (Linux)

Active Directory

• Attackive Directory Walkthrough (TryHackMe)
• HackTheBox – Forest Write-up
• HackTheBox – Resolute Write-up

Binary files (Static)

• Static binaries by Andrew-d

Encoding

• x64 alphanumeric shellcode encoding

File transfer (Command-line tools)

• BITSAdmin (Windows)
• cURL (Unix/Unix-liked) (Prints out content of the file)
• FTP
• SCP
• TFTP (All OS. Exist on Windows XP too!)
• wget (Unix/Unix-liked)

Heap Feng Shui

• Conference slides from Blackhat Europe 2007

LDAP

• LDAP injection cheatsheet by Hacktricks

Password dump in OS

• Fgdump (Windows XP and above)

Partitioning

• Paritioning for Linux in Virtualbox
• Fix slow boot after partitioning (Linux)

Privilege Escalation

• Compilation of Windows Privilege Escalation cheatsheet
• Docker privilege escalation (Linux)
• Enivornmental variables abused (Linux)
• JuicyPotato (Windows)
• PrintSpoofer (Windows)
• Privilege Escalation Abusing Tokens by Hacktricks
• Shared library misconfiguration
• Win XP SP0/SP1 PE via upnphost and SSDPSRV

Programming

• Setup remote debugging for Visual Studio

Public exploits

• Eternal Blue (Win XP) (Non-metasploit)
• Eternal Blue (Win 7/8) (Non-metasploit)
  • Usage

Return-oriented programming (ROP)

• ROPgadget tool
• ROP tutorial by Hacktricks (GNU/Linux)
• ROP tutorial by Shakuganz (GNU/Linux)

Reverse shell

• Antivirus evasion
• Msfvenom reverse shell
• Reverse shell cheatsheet by Pentestmonkey (Bash/Perl/Python/PHP/Ruby/Netcat/Java/xterm)
• Simple Unix/Unix-liked reverse shell and troubleshoot

SQL injection

• General SQL injection by HackTricks
• MS SQL create new admin users
• MS SQL injection by PentestMonkey
• SQL Injection for Orcale database

SSH

• Cracking encrypted SSH private key for password

Telenet alternative

• PSexec (Windows. Useful to switch accounts via CMD too)

Time To Live (TTL) values

• List of TTL values based on OS

Tunneling

• Ngrok (Tunnel public server to private network)

WAF bypass

• AWS WAF bypass (SQL injection example)

Web shell

• ASP shell

Windows Sysinternal Suite

• Procmon’s operation list

XML External Entities (XXE)

• XXE tutorial by Hacktricks