🌐PEH References

• Practical Ethical Hacking - The Complete Course

• TCM Course Resources - Github

  • Practical-Ethical-Hacking-Resources

• PNPT Certification

• Course and FAQs - Discord

Introduction

• Why You Shouldn't Be an Ethical Hacker

Note Keeping

• Notetaking Apps Ranked (Alex Olsen)

• Notion

• Joplin

• GitBook

• Obsidian

• FlameShot - Screenshot tool

• ShareX - Screenshot tool

• GreenShot - Screenshot tool

Networking

• Professor Messer - Seven Second Subnetting - Youtube
• Subnet Guide - TCM
• Networking Fundalmentals - Practical Networking Youtube
• Subnetting Mastery - Practical Networking Youtube
• Network Fundamentals - Network Direction Youtube
• SMB University - Cisco Networking Fundamentals
• guru99 - TCP 3-Way Handshake
• guru99 - OSI Model Layers
• OSI Cyber Attacks - byos.io
• Subnet Calculator - mxtoolbox.com
• CIDR to IPv4 Conversion

Lab Set Up

• VMware Workstation Player
• VMWare Workstation Pro (Free)
• VirtualBox + VirtualBox Extension Pack
• Kali Linux

  • Kali VM Installation - VMware - syselement
  • pimpmykali
• ParrotOS
• TCM Linux-101 - syselement

  • chmod Calculator
  • explainshell.com
• What is a ping sweep (ICMP sweep)?

Python

• Python Documentation
• LearnPython.org
• Python Tutorial - W3Schools
• Python Cheatsheet

  • Automate the Boring Stuff with Python - Book
• Socket Programming in Python (Guide) - RealPython

The Ethical Hacker Methodology

• Phases of Ethical Hacking - InfosecTrain
• Bugcrowd

Information Gathering

• Hunter.io
• Phonebook.cz
• Clearbit Connect
• EmailHippo Email address verifiy
• Email-checker
• HaveIBeenPwned
• breach-parse
• DeHashed.com
• Hashes.com
• Sublist3r
• crt.sh
• amass
• httprobe
• assetfinder
• gowitness
• subjack
• waybackurls
• BuiltWith.com
• Wappalyzer.com
• WhatWeb
• Burp Suite
• Google Search Syntax
• Google Search Operators: The Complete List (44 Advanced Operators)
• Open-Source Intelligence Fundamentals - TCM Security
• sumrecon script - Gr1mmie
• The Bug Hunter's Methodology Full 2-hour Training by Jason Haddix
• Nahamsec Recon Playlist

Scanning & Enumeration

• PEH Course VMs - TCM Security

  • PEH Course Capstone VMs (updated) - TCM Security
• VulnHub
• nmap

  • nikto
  • dirbuster
  • dirb
  • ffuf
• HTTP response codes
• Metasploit

  • Vulnerability & Exploit Database - Rapid7
• How to Enumerate SMB with Enum4linux & Smbclient - Null Byte
• smbclient
• exploit-db

  • searchsploit

Vulnerability Scanning with Nessus

• Nessus
• Nessus Essentials - syselement

Exploitation Basics

• Hacking with Netcat part 2: Bind and reverse shells
• netcat
• Metasploit Unleashed - OffSec

  • Apache mod_ssl < 2.8.7 OpenSSL - Remote Buffer Overflow
• Top 13 Vulnerable Web Applications and Websites for Ethical Hacking Practice | by ByteBusterX | Medium
• Damn Vulnerable Web Application (DVWA)
• Credential stuffing
• Password spraying
• CVE-2017-0144 - MS17-010
• CrackStation - Online Password Hash Cracking

  • hashcat
• GitHub - pentestmonkey/php-reverse-shell
• LinPEAS
• WinPEAS
• pspy
• Reverse Shell Cheat Sheet | pentestmonkey
• fcrackzip
• GTFO Bins
• Pure Groovy/Java Reverse Shell
• Unquoted Service Paths | Red Team Notes
• dnsrecon
• Spawning a TTY Shell | SecWiki
• Linux Privilege Escalation - SUDO and SUID | HackTricks
• Linux Privilege Escalation | TCM Security
• Windows Privilege Escalation for Beginners | TCM Security

Active Directory

• Active Directory Domain Services
• Introduction to Active Directory - HTB Academy
• Compromising Active Directory module - TryHackMe
• PimpmyADLab
• Building a Windows AD lab
• GrouppVM
• How To Setup Red Team And Blue Team Lab 2024 - Part 2 - InfoSec Pat
• LLMNR Poisoning and How to Prevent It - TCM Security

  • LLMNR | Pentest Everything - viperone.gitbook.io
  • Responder
• SMB Relay Attacks and How to Prevent Them - TCM Security

  • ntlmrelayx.py
• mitm6 - compromising IPv4 networks via IPv6 - Fox-IT

  • mitm6
• How to Hack Through a Pass-Back Attack: MFP Hacking Guide+

  • PRET
  • Printer Security Testing Cheat Sheet - Hacking Printers
  • Praeda
• ldapdomaindump
• BloodHound

  • PlumHound
• PingCastle
• Forest Druid
• Purple Knight
• crackmapexec

  • CrackMapExec Cheat Sheet 2024 (Commands & Examples) - Stationx
• netexec
• secretsdump.py
• HTB: Cicada | 0xdf hacks stuff
• Kerberoasting - CrowdStrike

  • Kerberoast | HackTricks
  • Kerberoasting | Red Team Notes
  • GetUserSPNs.py
• Token Impersonation | Pentest Everything

  • Fun with Incognito - Metasploit Unleashed
• Forced Authentication | Red Team Notes
• Finding Passwords in SYSVOL & Exploiting Group Policy Preferences – Active Directory Security

  • MS14-025: Vulnerability in Group Policy Preferences could allow elevation of privilege: May 13, 2014 - Microsoft Support
  • Exploiting-GPP-AKA-MS14_025-vulnerability
  • GPP attacks | Internal Pentest
• mimikatz
• Kerberos Golden Ticket Attack Explained - StationX

  • Golden Ticket Attack Explained | Semperis Identity Attack Catalog
  • Golden Ticket Attack Explained - MITRE ATT&CK T1558.001
  • rycon.hu - mimikatz's Golden Ticket
• Zerologon

  • ZeroLogon testing script
  • dirkjanm/CVE-2020-1472: PoC for Zerologon
  • What Is Zerologon? | Trend Micro (US)
• PrintNightmare Exposes Windows Servers to RCE | Huntress

  • Playing with PrintNightmare | 0xdf hacks stuff
  • cube0x0/CVE-2021-1675: C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527
  • calebstewart/CVE-2021-1675: Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)
• AD Case Study #1 - You Spent How Much on Security? - TCM Security
• AD Case Study #2 - #Pentest Tales #002: Digging Deep - TCM Security

Post Exploitation

• proxychains
• sshuttle
• chisel

Web Application

• Alex Olsen - AppSecExplained

  • AppSecExplained
• Burp Suite documentation - PortSwigger
• Web Security Academy - PortSwigger
• OWASP Top Ten
• Webhook.site - Test, transform and automate Web requests and emails
• SQL injection cheat sheet | Web Security Academy

  • SQL Injection | OWASP Foundation
• Cross-Site Scripting (XSS) Cheat Sheet - 2024 Edition | Web Security Academy

  • What is cross-site scripting (XSS) and how to prevent it? | Web Security Academy
  • Cross Site Scripting (XSS) | OWASP Foundation
  • alert() is dead, long live print() | PortSwigger Research
  • The Modern JavaScript Tutorial
• PayloadsAllTheThings - Command Injection

  • What is OS command injection, and how to prevent it? | Web Security Academy
  • Command Injection | OWASP Foundation
  • Command injection | AppSecExplained
  • Reverse Shell Cheat Sheet - Internal All The Things
• PayloadsAllTheThings - Upload Insecure Files

  • File uploads | Web Security Academy
  • Insecure file upload | AppSecExplained
  • List of file signatures (Magic bytes) - Wikipedia
• Authentication | AppSecExplained

  • Authentication vulnerabilities | Web Security Academy
• PayloadsAllTheThings - XXE Injection

  • What is XXE (XML external entity) injection? | Web Security Academy
  • XXE (XML external entity) injection | AppSecExplained
• PayloadsAllTheThings - Insecure Direct Object References

  • Insecure direct object references (IDOR) | Web Security Academy

Wireless Penetration Testing

• Pentesting Wifi - HackTricks
• ricardojoserf/wifi-pentesting-guide
• Offensive Security Tool: WEF (WiFi Exploitation Framework) | Black Hat Ethical Hacking
• D3Ext/WEF: Wi-Fi Exploitation Framework

  • Curso Gratis de Hacking Wifi | D3Ext
• Best Kali Linux Compatible USB Adapters 2024 – WirelesSHack
• OpenWrt & WiFi Exploitation | syselement's Blog
• aircrack-ng Usage
• airmon-ng
• airodump-ng

Legal Documents and Report Writing

• Sample pentest report provided by TCM Security

  • Writing a Pentest Report - TCM video

---