> For the complete documentation index, see [llms.txt](https://davin-hong3.gitbook.io/d/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://davin-hong3.gitbook.io/d/walkthroughs/cybersecurity-concepts.md). # Cybersecurity Concepts All credits to TJNull --> https\://www\.netsecfocus.com/oscp/2021/05/06/The\_Journey\_to\_Try\_Harder-\_TJnull-s\_Preparation\_Guide\_for\_PEN-200\_PWK\_OSCP\_2.0.html#section-1-general-course-information ## Chapters to study * [x] [Section 1: General Course Information](https://www.netsecfocus.com/oscp/2021/05/06/The_Journey_to_Try_Harder-_TJnull-s_Preparation_Guide_for_PEN-200_PWK_OSCP_2.0.html#section-1-general-course-information) Get comfortable taking notes of EVERYTHING, screenshots, scans, outputs --> Onenote, Obsidian Use exam reporting templetes by WhoisFlynn & Julio's repo of public pentest report samples * [x] [Section 2: Getting Comfortable with Kali Linux](https://www.netsecfocus.com/oscp/2021/05/06/The_Journey_to_Try_Harder-_TJnull-s_Preparation_Guide_for_PEN-200_PWK_OSCP_2.0.html#section-2-getting-comfortable-with-kali-linux) Mainly kali documentation reads, troubleshooting, installing * [ ] [Section 3: Linux Command Line Kung-Fu](https://www.netsecfocus.com/oscp/2021/05/06/The_Journey_to_Try_Harder-_TJnull-s_Preparation_Guide_for_PEN-200_PWK_OSCP_2.0.html#section-3-linux-command-line-kung-fu) Over the wire Bandit, Hackrank linux shell, Cmdchallenge * [ ] [Section 4: Essential Tools in Kali](https://www.netsecfocus.com/oscp/2021/05/06/The_Journey_to_Try_Harder-_TJnull-s_Preparation_Guide_for_PEN-200_PWK_OSCP_2.0.html#section-4-essential-tools-in-kali) - Ncat - swiss army knife used EVERYDAY\*\* - Socat - Powercat - windows version of netcat, The script can be downloaded onto a Windows target to transfer files, return a shell, or create payloads that we can call back from our target. - TCPDump: Command line base Network Analysis Tool. Very useful and good to know if you are on a system that does not have a GUI. Here is a good cheat sheet I used for tcpdump when I needed to troubleshoot my exploits: 1. Daniel Miessler TCPDump Guide: - Powershell Scripting (underthewire.tech) - Wireshark Training GUI based Network Analysis tool. There a lot of free PCAP samples online that you can use to understand how Wireshark works. Be careful with downloading some of these PCAP files because they may have malware in them; make sure you read where the PCAP is from before playing :D PCAP Samples: * Netresec: * Malware Traffic Analysis: * Packettotal (Just like virustotal but for PCAP Analysis): - [ ] [Section 5: Getting Started with Bash Scripting](https://www.netsecfocus.com/oscp/2021/05/06/The_Journey_to_Try_Harder-_TJnull-s_Preparation_Guide_for_PEN-200_PWK_OSCP_2.0.html#section-5-getting-started-with-bash-scripting) The bash Guide: A good guide to get you into the bash scripting Resources to learn more about Bash Scripting: Tutorials Point: (Use hackerrank to practice) * [ ] [Section 6: Passive Reconnaissance](https://www.netsecfocus.com/oscp/2021/05/06/The_Journey_to_Try_Harder-_TJnull-s_Preparation_Guide_for_PEN-200_PWK_OSCP_2.0.html#section-6-passive-reconnaissance) * [ ] [Section 7: Active Reconnaissance](https://www.netsecfocus.com/oscp/2021/05/06/The_Journey_to_Try_Harder-_TJnull-s_Preparation_Guide_for_PEN-200_PWK_OSCP_2.0.html#section-7-active-reconnaissance) * [ ] [Section 8: Vulnerability Scanning](https://www.netsecfocus.com/oscp/2021/05/06/The_Journey_to_Try_Harder-_TJnull-s_Preparation_Guide_for_PEN-200_PWK_OSCP_2.0.html#section-8-vulnerability-scanning) * [ ] [Section 9: Web Application Attacks](https://www.netsecfocus.com/oscp/2021/05/06/The_Journey_to_Try_Harder-_TJnull-s_Preparation_Guide_for_PEN-200_PWK_OSCP_2.0.html#section-9-web-application-attacks) * [ ] [Section 10: Buffer Overflows for Windows and Linux](https://www.netsecfocus.com/oscp/2021/05/06/The_Journey_to_Try_Harder-_TJnull-s_Preparation_Guide_for_PEN-200_PWK_OSCP_2.0.html#section-10-buffer-overflows-for-windows-and-linux) * [ ] [Section 11: Client-Side Attacks](https://www.netsecfocus.com/oscp/2021/05/06/The_Journey_to_Try_Harder-_TJnull-s_Preparation_Guide_for_PEN-200_PWK_OSCP_2.0.html#section-11-client-side-attacks) * [ ] [Section 12: Working with Public Exploits](https://www.netsecfocus.com/oscp/2021/05/06/The_Journey_to_Try_Harder-_TJnull-s_Preparation_Guide_for_PEN-200_PWK_OSCP_2.0.html#section-12-handling-public-exploits) * [ ] [Section 13: Transferring Files to your target](https://www.netsecfocus.com/oscp/2021/05/06/The_Journey_to_Try_Harder-_TJnull-s_Preparation_Guide_for_PEN-200_PWK_OSCP_2.0.html#section-13-transferring-files-to-your-target) * [ ] [Section 14: Antivirus Bypassing](https://www.netsecfocus.com/oscp/2021/05/06/The_Journey_to_Try_Harder-_TJnull-s_Preparation_Guide_for_PEN-200_PWK_OSCP_2.0.html#section-14-antivirus-bypassing) * [ ] [Section 15: Privilege Escalation](https://www.netsecfocus.com/oscp/2021/05/06/The_Journey_to_Try_Harder-_TJnull-s_Preparation_Guide_for_PEN-200_PWK_OSCP_2.0.html#section-15-privilege-escalation) * [ ] [Section 16: Password Cracking](https://www.netsecfocus.com/oscp/2021/05/06/The_Journey_to_Try_Harder-_TJnull-s_Preparation_Guide_for_PEN-200_PWK_OSCP_2.0.html#section-16-password-cracking) * [ ] [Section 17: Port Redirection and Pivoting](https://www.netsecfocus.com/oscp/2021/05/06/The_Journey_to_Try_Harder-_TJnull-s_Preparation_Guide_for_PEN-200_PWK_OSCP_2.0.html#section-17-port-redirection-and-pivoting) * [ ] [Section 18: Active Directory Attacks](https://www.netsecfocus.com/oscp/2021/05/06/The_Journey_to_Try_Harder-_TJnull-s_Preparation_Guide_for_PEN-200_PWK_OSCP_2.0.html#section-18-active-directory-attacks) * [ ] [Section 19: Metasploit Framework](https://www.netsecfocus.com/oscp/2021/05/06/The_Journey_to_Try_Harder-_TJnull-s_Preparation_Guide_for_PEN-200_PWK_OSCP_2.0.html#section-19-metasploit-framework) * [ ] [Section 20: PowerShell Empire](https://www.netsecfocus.com/oscp/2021/05/06/The_Journey_to_Try_Harder-_TJnull-s_Preparation_Guide_for_PEN-200_PWK_OSCP_2.0.html#section-20-powershell-empire)