M507 / Awae Preparation
This repository will contain all trainings and tutorials I have done/read to prepare for OSWE / AWAE.
Stars: ✭ 173
Labels
Projects that are alternatives of or similar to Awae Preparation
Penetration Testing Cheat Sheet
Work in progress...
Stars: ✭ 69 (-60.12%)
Mutual labels: offensive-security
Corsme
Cross Origin Resource Sharing MisConfiguration Scanner
Stars: ✭ 118 (-31.79%)
Mutual labels: offensive-security
Reconnoitre
A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.
Stars: ✭ 1,824 (+954.34%)
Mutual labels: offensive-security
Thecollective
The Collective. A repo for a collection of red-team projects found mostly on Github.
Stars: ✭ 85 (-50.87%)
Mutual labels: offensive-security
Oscp Exam Report Template Markdown
📙 Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report
Stars: ✭ 2,066 (+1094.22%)
Mutual labels: offensive-security
Black Widow
GUI based offensive penetration testing tool (Open Source)
Stars: ✭ 124 (-28.32%)
Mutual labels: offensive-security
Invoke Apex
A PowerShell-based toolkit and framework consisting of a collection of techniques and tradecraft for use in red team, post-exploitation, adversary simulation, or other offensive security tasks.
Stars: ✭ 162 (-6.36%)
Mutual labels: offensive-security
Nosqlmap
Automated NoSQL database enumeration and web application exploitation tool.
Stars: ✭ 1,928 (+1014.45%)
Mutual labels: offensive-security
Atomic Red Team Intelligence C2
ARTi-C2 is a post-exploitation framework used to execute Atomic Red Team test cases with rapid payload deployment and execution capabilities via .NET's DLR.
Stars: ✭ 87 (-49.71%)
Mutual labels: offensive-security
Osee
Collection of resources for my preparation to take the OSEE certification.
Stars: ✭ 98 (-43.35%)
Mutual labels: offensive-security
Redteam Tactics And Techniques
Red Teaming Tactics and Techniques
Stars: ✭ 2,190 (+1165.9%)
Mutual labels: offensive-security
Zynix Fusion
zynix-Fusion is a framework that aims to centralize, standardizeand simplify the use of various security tools for pentest professionals.zynix-Fusion (old name: Linux evil toolkit) has few simple commands, one of which is theinit function that allows you to define a target, and thus use all the toolswithout typing anything else.
Stars: ✭ 84 (-51.45%)
Mutual labels: offensive-security
Pwk Oscp Preparation Roadmap
Roadmap for preparing for OSCP, anyone is free to use this, and also feedback and contributions are welcome
Stars: ✭ 142 (-17.92%)
Mutual labels: offensive-security
Rust Windows Shellcode
Windows shellcode development in Rust
Stars: ✭ 67 (-61.27%)
Mutual labels: offensive-security
Defaultcreds Cheat Sheet
One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️
Stars: ✭ 1,949 (+1026.59%)
Mutual labels: offensive-security
Raccoon
A high performance offensive security tool for reconnaissance and vulnerability scanning
Stars: ✭ 2,312 (+1236.42%)
Mutual labels: offensive-security
Offensive Dockerfiles
Offensive tools as Dockerfiles. Lightweight & Ready to go
Stars: ✭ 150 (-13.29%)
Mutual labels: offensive-security
Buffer overflow
Don't let buffer overflows overflow your mind
Stars: ✭ 131 (-24.28%)
Mutual labels: offensive-security
AWAE-Preparation
This repository will contain all trainings and tutorials I have done/read to prepare for OSWE.
Course Syllabus:
https://www.offensive-security.com/documentation/awae-syllabus.pdf
Before AWAE:
I would not recommend taking the course before at least; finishing all SQL and XSS Injection challenges in bWAPP https://sourceforge.net/projects/bwapp/files/bee-box/ and being able to understand and debug different languages like C#, Php, Java, and Javascript.
-
Cross-Site Scripting:
-
Session Hijacking
-
Persistent Cross-Site Scripting
-
Cross-Site Request Forgery
-
XSS and MySQL
-
Bypassing File Upload Restrictions:
- https://www.exploit-db.com/docs/english/45074-file-upload-restrictions-bypass.pdf
- http://www.securityidiots.com/Web-Pentest/hacking-website-by-shell-uploading.html
- https://www.owasp.org/index.php/Unrestricted_File_Upload
- Popcorn machine from HackTheBox
- Vault machine from HackTheBox
-
PHP Type Juggling:
- https://www.owasp.org/images/6/6b/PHPMagicTricks-TypeJuggling.pdf
- https://medium.com/@Q2hpY2tlblB3bnk/php-type-juggling-c34a10630b10
- https://foxglovesecurity.com/2017/02/07/type-juggling-and-php-object-injection-and-sqli-oh-my/
- https://www.netsparker.com/blog/web-security/php-type-juggling-vulnerabilities/
- http://turbochaos.blogspot.com/2013/08/exploiting-exotic-bugs-php-type-juggling.html
- https://www.netsparker.com/blog/web-security/type-juggling-authentication-bypass-cms-made-simple/
- https://www.php.net/manual/en/types.comparisons.php
- https://github.com/spaze/hashes
- https://www.whitehatsec.com/blog/magic-hashes/
- Falafel machine from HackTheBox
-
Deserialization:
- https://cheatsheetseries.owasp.org/cheatsheets/Deserialization_Cheat_Sheet.html
- https://www.blackhat.com/docs/us-17/thursday/us-17-Munoz-Friday-The-13th-Json-Attacks.pdf
- https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Deserialization_Cheat_Sheet.md
- https://2017.zeronights.org/wp-content/uploads/materials/ZN17_Aleksei%20Tiurin_Deserialization%20vulnerabilities.pdf
- https://www.exploit-db.com/docs/english/44756-deserialization-vulnerability.pdf
- https://www.blackhat.com/docs/us-17/thursday/us-17-Munoz-Friday-The-13th-Json-Attacks.pdf
-
.NET Deserialization:
-
Java Deserialization:
- https://www.n00py.io/2017/11/exploiting-blind-java-deserialization-with-burp-and-ysoserial/
- https://www.owasp.org/images/7/71/GOD16-Deserialization.pdf
- https://github.com/frohoff/ysoserial
- https://github.com/GrrrDog/Java-Deserialization-Cheat-Sheet/blob/master/README.md
- https://diablohorn.com/2017/09/09/understanding-practicing-java-deserialization-exploits/
-
JavaScript Injection:
-
NodeJS:
- https://maikthulhu.github.io/2019-05-17-remote-debugging-node-vscode/
- https://github.com/ajinabraham/Node.Js-Security-Course
- https://www.acunetix.com/blog/web-security-zone/deserialization-vulnerabilities-attacking-deserialization-in-js/
- https://www.yeahhub.com/nodejs-deserialization-attack-detailed-tutorial-2018/
- Celestial machine from HackTheBox
-
SQLi:
-
PostgreSQL
- http://pentestmonkey.net/cheat-sheet/sql-injection/postgres-sql-injection-cheat-sheet
- http://www.leidecker.info/pgshell/Having_Fun_With_PostgreSQL.txt
- https://www.exploit-db.com/papers/13084
- http://www.postgresqltutorial.com/postgresql-string-functions/
- https://www.linuxtopia.org/online_books/database_guides/Practical_PostgreSQL_database/c7547_002.htm
- https://www.infigo.hr/files/INFIGO-TD-2009-04_PostgreSQL_injection_ENG.pdf
- https://dotcppfile.wordpress.com/2014/07/12/blind-postgresql-sql-injection-tutorial/
-
Long Readings:
- Use of Deserialization in .NET Framework Methods and Classes. https://www.nccgroup.trust/globalassets/our-research/uk/images/whitepaper-new.pdf
- https://www.blackhat.com/docs/us-17/thursday/us-17-Munoz-Friday-The-13th-JSON-Attacks-wp.pdf
Before The Exam:
The Web Application Hacker's Handbook is your friend. The negative part of AWAE course is that they did not include enough methodologies for vulnerability discovery, thus, I strongly recommend reading Chapter 21 from The Web Application Hacker's Handbook , and be comfortable debugging C#, Java, Php, and Javascript, using Burp Suite, dnSpy, JD-GUI, Visual Studio, and writing custom PoC in at least one language :).
Note that the project description data, including the texts, logos, images, and/or trademarks,
for each open source project belongs to its rightful owner.
If you wish to add or remove any projects, please contact us at [email protected].