IndianZ Logo

About Blog Cheatsheets Defense Links Offense
Offense
Code Audit Exploit Hacking Input Validation Metasploit Methods Nmap OSSTMM Test OWASP Webtest Pentest Physical Pentest Backtrack Pentest SQL Inject

Backtrack Pentest

Offensive-Security Process
1.0 Information Gathering
1.1 Footprinting (DNS, Traceroutes)
1.2 Online Research (Web, Google, Emails)
2.0 Network Enumeration
2.1 Discovery (ICMP, SNMP, NetBIOS, DNS, ARP)
2.2 Filter Detection
2.3 Scanning (Protocols, Ports TCP/UDP)
2.4 Fingerprinting (Services, OS)
2.5 Vulnerability Scanning
2.6 Users (SMTP, NetBIOS)
3.0 Exploitation
3.1 Online Research
3.2 Exploitation Frameworks
3.3 Exploit Development (Fuzzing, Debugging, Shellcoding)
3.4 Password Cracking (OS and Services)
3.5 Spoofing/Routing Attacks
3.6 Web Hacking
3.7 SQL Injection
4.0 Reporting
4.1 Documentation


(download oscp.mm)