Penetration Testing

Checklist

1. βš™οΈ Pre-engagement

Create a directory

└── Penetration-Testing
    β”‚
      β”œβ”€β”€ Pre-Engagement
      β”‚       └── ...
    β”œβ”€β”€ Network-Pentesting
      β”‚       β”œβ”€β”€ Linux
      β”‚       β”‚   β”œβ”€β”€ Information-Gathering
      β”‚       β”‚   β”‚   └── ...
      β”‚       β”‚   β”œβ”€β”€ Vulnerability-Assessment
    β”‚       β”‚   β”‚   └── ...
    β”‚       β”‚   └── ...
    β”‚       β”‚       └── ...
    β”‚       β”œβ”€β”€ Windows
    β”‚       β”‚   β”œβ”€β”€ Information-Gathering
    β”‚       β”‚   β”‚   └── ...
    β”‚       β”‚   └── ...
    β”‚       └── ...
    β”œβ”€β”€ WebApp-Pentesting
    β”‚       └── ...
    β”œβ”€β”€ Social-Engineering
    β”‚       └── ...
    β”œβ”€β”€ .......
    β”‚       └── ...
    β”œβ”€β”€ Reporting
    β”‚   └── ...
    └── Results
        └── ...


1. Open a `.qmd` document for taking notes with [Neovim](cheatsheets/nvim.qmd)
2. Start to record terminal activity with [script](cheatsheets/script.qmd) command
using the format  `<date>-<start time>-<name>.log`

### [[ping]] target
> Low-overhead method of reaching the target to get a response.

## 2. πŸ“  Network-Pentesting

### [[linux]]

### Information Gathering
#### Network Enumaration
1. Scan pour dΓ©terminer quels **ports** sont _ouverts_ avec [[nmap]]

### Windows

## 3. 🌐 WebApp-Pentesting


### Directory Tree

https://academy.hackthebox.com/module/87/section/880
```sh
/
└── Penetration-Testing
    β”‚
    β”œβ”€β”€ Pre-Engagement
    β”‚       └── ...
  β”œβ”€β”€ Network-Pentesting
    β”‚       β”œβ”€β”€ Linux
    β”‚       β”‚   β”œβ”€β”€ Information-Gathering
    β”‚       β”‚   └── ...
    β”‚       β”‚   β”œβ”€β”€ Vulnerability-Assessment
  β”‚       β”‚   β”‚   └── ...
  β”‚       β”‚   β”œβ”€β”€ Exploitation
  β”‚       β”‚   β”‚   └── ...
  β”‚       β”‚   β”œβ”€β”€ Post-Exploitation
  β”‚       β”‚   β”‚   └── ...
  β”‚       β”‚   └── ...
  β”‚       β”œβ”€β”€ Windows
  β”‚       β”‚   β”œβ”€β”€ Information-Gathering
  β”‚       β”‚   β”‚   └── ...
  β”‚       β”‚   └── ...
  β”‚       └── ...
  β”œβ”€β”€ WebApp-Pentesting
    β”‚       └── ...
  β”œβ”€β”€ Social-Engineering
    β”‚       └── ...
  β”œβ”€β”€ .......
    β”‚       └── ...
  β”œβ”€β”€ Reporting
  β”‚   └── ...
    └── Results
        └── ...

https://academy.hackthebox.com/module/77/section/766

Projects/
└── Acme Company
    β”œβ”€β”€ EPT
    β”‚   β”œβ”€β”€ evidence
    β”‚   β”‚   β”œβ”€β”€ credentials
    β”‚   β”‚   β”œβ”€β”€ data
    β”‚   β”‚   └── screenshots
    β”‚   β”œβ”€β”€ logs
    β”‚   β”œβ”€β”€ scans
    β”‚   β”œβ”€β”€ scope
    β”‚   └── tools
    └── IPT
        β”œβ”€β”€ evidence
        β”‚   β”œβ”€β”€ credentials
        β”‚   β”œβ”€β”€ data
        β”‚   └── screenshots
        β”œβ”€β”€ logs
        β”œβ”€β”€ scans
        β”œβ”€β”€ scope
        └── tools