SUMMARY.md

Table of contents

🏴‍☠️ Welcome!

• 🔮 P4n1cBook
• 🚨 Licence and Disclaimer
• ⚡ About Author
• 📚 Bookmarks

Fundamentals

• Basic Commands
  • Linux
  • Git
• 🌐 Network Protocols
  • ICMP
  • SSH
  • Telnet
  • DNS
  • FTP
  • HTTP/HTTPS
  • SMB
  • SNMP
  • SMTP
  • NFS
  • IPP
  • WinRM
  • LLMNR
• Databases
  • MySQL
  • NoSQL
• Web APIs
  • GraphQL
• Shells/TTYs
• 💾 Regex
• Dorks
• Python Essentials
• Cryptography
• Steganography
• Reverse Engineering
• Tools
  • curl
  • Netcat
  • tcpdump
  • Nmap
  • ffuf
  • Gobuster
  • feroxbuster
  • SQLmap
  • 🦈 Wireshark
  • Metasploit
  • GoWitness
  • Crunch
  • NetExec
  • JohnTheRipper
  • impacket

Web Exploitation

• Recon
• Main Techniques
  • SSRF
  • Eval Injection
  • Template Manipulation
  • Path Traversal
  • Prototype Pollution
  • XXE
  • Deserialization
  • Log Poisoning
  • Command Injection
  • SQLi
  • Arbitrary File Upload
  • SSTI
  • LFI
  • XSS
  • IDOR
  • SSRF
• Web Servers
  • Apache
  • Nginx
• Web Services
  • HashiCorp Vault
  • Laravel
  • Express
  • Magento
  • Tiny File Manager
  • Joomla
  • CMS Made Simple
  • Werkzeug
  • 🌵 Cacti
  • Tomcat
  • Zabbix
  • OpenNetAdmin
  • Wordpress
  • Java-based web application
    • Struts
    • .WAR
    • JDWP
  • ImageMagick
• Reporting

Cloud Exploitation

• Kubernetes
• Azure
• AWS

Post Exploitation

• File Transfer
• Credential Dumping
  • Thunderbird
• Pivoting/Lateral Movement
• Persistence
• Linux Privilege Escalation
  • Hijacks
  • Jailbreaks
  • Binary Exploitation - Linux
  • Kernel Exploits
  • Buffer Overflow - Linux
  • Escaping Docker
• Windows Privilege Scalation

Wireless Exploitation

• NFC
• Bluetooth
• Wifi

Gadgets

• Flipper Zero
• Raspberry Pi

Archive

• 💥 CVE Vault
  • CVE-2024-3094
  • CVE-2024-28741
  • CVE-2024-27620
  • CVE-2024-21762
  • CVE-2023-6200
  • CVE-2023-46604
  • CVE-2023-42942
  • CVE-2023-3824
  • CVE-2023-22515
  • CVE-2022-46169
  • CVE-2022-44268
  • CVE-2022-31214
  • CVE-2022-25237
  • CVE-2022-24855
  • CVE-2022-21699
  • CVE-2022-20229
  • CVE-2022-4510

MITRE ATT&CK Framework

• CWE-200 Information Exposure