Smithing

While exploitation and privilege escalation is not the end goal, it is a key element of the attack life cycle and a major determinant in the success of a penetration test.

---

Testlab

• Virtual machines
• Assemblers
• Compilers
• Disassemblers
• Debuggers
• Decompilers
• Exploit development
• Exploitation tools

---

Notes on techniques

• Introduction
• Exploiting vulnerabilities
• Attack infrastructures
• Common shells

Linux

• Introduction
• Reuseful escalation patterns
• Kernel vulnerability exploits
• Exploit sudo misconfigurations
• SUID and SGID exploits
• Exploit capable programs
• Cron jobs exploits
• Path exploits
• NFS exploits
• Shellcode techniques

Windows

• Introduction
• Reuseful escalation patterns
• Harvesting passwords
• Quick misconfiguration wins
• Abusing service misconfigurations
• Abusing dangerous privileges
• Abusing vulnerable software
• Shellcode techniques

---

Coding for better understanding of concepts, and for some hands-on. Malware included.

Coding shells and exploits

• Basic TCP reverse shell
• Execute system commands
• Keylogger
• Backdoor
• Bypasses

---

TryHackMe rooms

• Introduction
• Windows PrivEsc
• Linux PrivEsc
• Steel Mountain
• Alfred
• HackPark
• Game Zone
• Skynet
• The Daily Bugle
• Overpass 2 hacked
• Relevant
• Internal
• Mr Robot

---

Root-me app-script challenges

• Introduction
• Bash: System 1
• sudo: weak configuration
• Bash: System 2
• LaTeX: Input
• Powershell: Command Injection
• Bash: unquoted expression injection
• Perl: Command injection
• Bash: cron
• Python input()
• Python pickle

---