# wiki.hackerlab.cz

## wiki.hackerlab.cz

- [About me](https://hackerlab.gitbook.io/wiki.hackerlab.cz/master.md): Petr's daily pentest notes and cheat sheets.
- [Vulnerability Assessment](https://hackerlab.gitbook.io/wiki.hackerlab.cz/vulnerability-assessment.md): Companion scripts to vulnerability scanner
- [CLOUD PENTESTING](https://hackerlab.gitbook.io/wiki.hackerlab.cz/cloud-pentesting.md): Cloud pentest cheat sheets and tools
- [AWS](https://hackerlab.gitbook.io/wiki.hackerlab.cz/cloud-pentesting/aws.md)
- [GCP](https://hackerlab.gitbook.io/wiki.hackerlab.cz/cloud-pentesting/gcp.md)
- [Microsoft Azure](https://hackerlab.gitbook.io/wiki.hackerlab.cz/cloud-pentesting/microsoft-azure.md)
- [Labs](https://hackerlab.gitbook.io/wiki.hackerlab.cz/cloud-pentesting/labs.md)
- [REST API - Bypasses and Privilege Escalations](https://hackerlab.gitbook.io/wiki.hackerlab.cz/rest-api-bypasses-and-privilege-escalations.md): REST API security testing
- [Python Virtual Environment (VENV)](https://hackerlab.gitbook.io/wiki.hackerlab.cz/python-virtual-environment-venv.md): Solve your python packages and library dependencies without collisions
- [OSINT & Information Gathering](https://hackerlab.gitbook.io/wiki.hackerlab.cz/osint-and-information-gathering.md)
- [File Upload](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/file-upload.md): Working on it ...
- [JavaScript .maps](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/javascript-.maps.md)
- [SSRF](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/ssrf.md): Server Side Request Forgery (SSRF)
- [LDAP Injection](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/ldap-injection.md): LDAP injection payloads for testing
- [Django ORM Exploitation](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/django-orm-exploitation.md)
- [HTTP Request Smuggling](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/http-request-smuggling.md): Bypass, XSS and more
- [Server Side Template Injection (SSTI)](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/server-side-template-injection-ssti.md)
- [Insecure Deserialization](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/insecure-deserialization.md): Manual and gadget chain manipulation
- [Brute force](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/brute-force.md)
- [Shell Fu - Oneliners](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/shell-fu-oneliners.md): Simple linux commands to make the work done faster
- [CORS](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/cors.md): Cross-Origin Resource Sharing (CORS) pentest notes
- [Special Chars & NULL Bytes](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/special-chars-and-null-bytes.md): Control/special characterswith null bytes - payloads for your pentest
- [XSS](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/xss.md): Cross-Site Scripting (XSS) payloads
- [XXE](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/xxe.md): XML External Entity attacks
- [Nuclei](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/nuclei.md): Nuclei automates the detection of vulnerabilities in IT systems (web apps, cloud infrastructure, networks, etc.).
- [SQL Injection](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/sql-injection.md): SQL payloads for your pentest
- [Blind SQL Injection](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/blind-sql-injection.md): Observe differences within HTTP response in terms of headers, content or bytes
- [SQLmap](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/sqlmap.md): Automate SQL Injections
- [NoSQL Injection](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/nosql-injection.md): NoSQL injection payloads for your pentest
- [CRLF Injection](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/crlf-injection.md): A Carriage Return Line Feed (CRLF) payloads for your pentest
- [Input Validation - Fuzz1](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/input-validation-fuzz1.md): Quick testing payloads for input validation and data processing
- [HTTP Headers - X-Forwarded](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/http-headers-x-forwarded.md): HTTP headers to bypass load balancers/WAFs/Applogic
- [Log4j](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/log4j.md): Java payloads for log4j vulnerability testing
- [Enumeration with Wordlists](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/enumeration-with-wordlists.md): Wordlists for assets, usernames and passwords for your pentest
- [Bug Bounty - Web Recon](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/recon-web.md): Web recon playbook for single asset
- [HTTP Proxy Override](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/http-proxy-override.md): Set up a HTTP proxy forwarding for your app. Usually with combination of Burp Suite web proxy.
- [CSV Injection](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/csv-injection.md)
- [Windows Forbidden File Names](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/windows-forbidden-file-names.md)
- [Path Traversal](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/directory-traversal.md): Path traversal attacks
- [OS Command Injection](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/os-command-injection.md): cheat sheet
- [Open Redirect](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/open-redirect.md): cheat sheet
- [JWT Tool](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/jwt-tool.md): JWT tool kit, JWT token
- [Burp Extensions - TokenJAR & ATOR](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/burp-extensions-tokenjar-and-ator.md): Burp extensions that help you deal with JWT access tokens.
- [Upload RCE](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/upload-rce.md)
- [GUID and UUIDs](https://hackerlab.gitbook.io/wiki.hackerlab.cz/web-pentesting/guid-and-uuids.md)
- [Git - Repo and Tools](https://hackerlab.gitbook.io/wiki.hackerlab.cz/toolset/git-repo-and-tools.md): Git tips
- [Docker for Pentesters](https://hackerlab.gitbook.io/wiki.hackerlab.cz/toolset/docker-for-pentesters.md): Container virtualization with docker
- [PostgreSQL](https://hackerlab.gitbook.io/wiki.hackerlab.cz/infra-pentesting/postgresql.md): PostgreSQL pen test tips
- [Active Directory (AD)](https://hackerlab.gitbook.io/wiki.hackerlab.cz/infra-pentesting/active-directory-ad-initial-attacks.md): Articles and Sites
- [Vulnerable Machines (labs)](https://hackerlab.gitbook.io/wiki.hackerlab.cz/infra-pentesting/active-directory-ad-initial-attacks/vulnerable-machines-labs.md)
- [Pass the hash](https://hackerlab.gitbook.io/wiki.hackerlab.cz/infra-pentesting/active-directory-ad-initial-attacks/pass-the-hash.md): What you can do with NTLM hash
- [Azure Active Directory](https://hackerlab.gitbook.io/wiki.hackerlab.cz/infra-pentesting/active-directory-ad-initial-attacks/azure-active-directory.md)
- [Password Cracking](https://hackerlab.gitbook.io/wiki.hackerlab.cz/infra-pentesting/active-directory-ad-initial-attacks/password-cracking.md): Infra password cracking - Build your own wordlist that fits
- [Domain Enumeration](https://hackerlab.gitbook.io/wiki.hackerlab.cz/infra-pentesting/active-directory-ad-initial-attacks/domain-enumeration.md)
- [LLMNR Poisoning with Responder](https://hackerlab.gitbook.io/wiki.hackerlab.cz/infra-pentesting/active-directory-ad-initial-attacks/lmnr-poisoning-with-responder.md): Link-Local Multicast Name Resolution - Respond to a service with a username and password hash
- [HTB Forest](https://hackerlab.gitbook.io/wiki.hackerlab.cz/infra-pentesting/active-directory-ad-initial-attacks/htb-forest.md): Hack the box notes
- [LDAP](https://hackerlab.gitbook.io/wiki.hackerlab.cz/infra-pentesting/active-directory-ad-initial-attacks/ldap.md): LDAP enumeration in Active Directory environments
- [WinRM](https://hackerlab.gitbook.io/wiki.hackerlab.cz/infra-pentesting/active-directory-ad-initial-attacks/winrm.md): HTTP remote interface tcp/5985
- [SMB & RPC Enumeration](https://hackerlab.gitbook.io/wiki.hackerlab.cz/infra-pentesting/active-directory-ad-initial-attacks/smb-and-rpc-enumeration.md)
- [SMB Relay](https://hackerlab.gitbook.io/wiki.hackerlab.cz/infra-pentesting/active-directory-ad-initial-attacks/smb-relay.md): SMB Relay through Impacket Responder and NTLMNrelayx
- [Impacket](https://hackerlab.gitbook.io/wiki.hackerlab.cz/infra-pentesting/active-directory-ad-initial-attacks/impacket.md)
- [Bloodhound](https://hackerlab.gitbook.io/wiki.hackerlab.cz/infra-pentesting/active-directory-ad-initial-attacks/bloodhound.md)
- [OWA Exchange Server 2019](https://hackerlab.gitbook.io/wiki.hackerlab.cz/infra-pentesting/active-directory-ad-initial-attacks/owa-exchange-server-2019.md): Exchange Server 2019
- [Active Directory Web Services (ADWS)](https://hackerlab.gitbook.io/wiki.hackerlab.cz/infra-pentesting/active-directory-ad-initial-attacks/active-directory-web-services-adws.md): SharpADWS
- [Active Directory Attacks](https://hackerlab.gitbook.io/wiki.hackerlab.cz/infra-pentesting/active-directory-ad-initial-attacks/active-directory-attacks.md)
- [Mail Server Attacks](https://hackerlab.gitbook.io/wiki.hackerlab.cz/infra-pentesting/mail-server-attacks.md)
- [NFS Enumeration](https://hackerlab.gitbook.io/wiki.hackerlab.cz/infra-pentesting/nfs-enumeration.md)
- [Windows PostExploitation](https://hackerlab.gitbook.io/wiki.hackerlab.cz/infra-pentesting/windows-postexploitation.md): when you already have initial foothold
- [Windows Enumeration](https://hackerlab.gitbook.io/wiki.hackerlab.cz/infra-pentesting/windows-postexploitation/windows-enumeration.md): Manual and automated scripts for windows enumeration
- [Powershell Payloads](https://hackerlab.gitbook.io/wiki.hackerlab.cz/infra-pentesting/windows-postexploitation/powershell-payloads.md): Reverse shells and enumeration scripts
- [Add RDP Account & Ride on Meterpreter](https://hackerlab.gitbook.io/wiki.hackerlab.cz/infra-pentesting/windows-postexploitation/add-rdp-account-and-ride-on-meterpreter.md): with initial foothold
- [Dump File Analysis](https://hackerlab.gitbook.io/wiki.hackerlab.cz/infra-pentesting/dump-file-analysis.md): Enumeration of memory dumps
- [Security Projects](https://hackerlab.gitbook.io/wiki.hackerlab.cz/pentest-projects-for-review/github.md): Personal and community projects you should know.
- [Kali Linux - Alpha card AWUS 1900 (VirtualBox)](https://hackerlab.gitbook.io/wiki.hackerlab.cz/wifi-pentesting/kali-linux-alpha-card-awus-1900.md): Make your AWUS 1900 Alpha card work in Kali
- [Active Card & Monitor Mode](https://hackerlab.gitbook.io/wiki.hackerlab.cz/wifi-pentesting/monitor-mode.md): Set your WiFi card into monitor mode with airmon-ng
- [Aircrack-ng Suite](https://hackerlab.gitbook.io/wiki.hackerlab.cz/wifi-pentesting/aircrack-ng.md): Setup monitor mode, dump and replay specific frames, and crack it, that's aircrack-ng suite.
- [Certs](https://hackerlab.gitbook.io/wiki.hackerlab.cz/certs.md)
- [Burp Suite Certified Practitioner](https://hackerlab.gitbook.io/wiki.hackerlab.cz/certs/burp-suite-certified-practitioner.md): Tips & tricks, a long journey
- [Network Manager](https://hackerlab.gitbook.io/wiki.hackerlab.cz/linux/network-manager.md): Connection Manager in Kali, Ubuntu and Debian
- [The Hacker Playbook 3](https://hackerlab.gitbook.io/wiki.hackerlab.cz/books/the-hacker-playbook-3-cheat-sheet.md): A famous hacking book from Peter Kim