13 entries
Penetration Testing
Reconnaissance: Passive vs Active & the Attack Surface
BeginnerPenetration TestingChapter 1
Penetration Testing
Passive Recon: WHOIS, DNS Enumeration & Certificate Transparency
BeginnerPenetration TestingChapter 2
Penetration Testing
OSINT Foundations: Discipline, OPSEC & Sock-Puppet Accounts
BeginnerPenetration TestingChapter 3
Penetration Testing
Google Dorking & Search-Engine Recon for Hackers
IntermediatePenetration TestingChapter 4
Penetration Testing
Subdomain Enumeration: Amass, Subfinder, Sublist3r & Assetfinder
IntermediatePenetration TestingChapter 5
Penetration Testing
OSINT Frameworks: theHarvester, Recon-ng, SpiderFoot & Maltego
IntermediatePenetration TestingChapter 6
Penetration Testing
Username, Email & Account OSINT: Sherlock, Maigret & Holehe
IntermediatePenetration TestingChapter 7
Penetration Testing
Breach Data, Credential Leaks & Dark-Web OSINT
IntermediatePenetration TestingChapter 8
Penetration Testing
Shodan, Censys & Internet-Wide Asset Discovery
AdvancedPenetration TestingChapter 9
Penetration Testing
Active Recon & Tech Fingerprinting: httpx, whatweb & Wappalyzer
AdvancedPenetration TestingChapter 10
Penetration Testing
Image, Geolocation & Metadata OSINT: ExifTool, Reverse Image & GEOINT
AdvancedPenetration TestingChapter 11
Penetration Testing
Corporate, People & Social-Media OSINT for Red Teams
AdvancedPenetration TestingChapter 12
Penetration Testing
Automating Recon: Building an End-to-End OSINT & Attack-Surface Pipeline
AdvancedPenetration TestingChapter 13