https://notes.estfanous.com/https://notes.estfanous.com/p/study-notes-88f374f92026-08-29https://notes.estfanous.com/p/practical-network-penetration-tester-pnpt-by-tcm-security-3034197e2026-08-29https://notes.estfanous.com/p/practical-junior-penetration-tester-pjpt-by-tcm-security-5560829c2026-08-29https://notes.estfanous.com/p/tips-and-tricks-3cef7fe62026-08-29https://notes.estfanous.com/p/attack-prio-f45e91ba2026-08-29https://notes.estfanous.com/p/internal-attack-prio-29a86ebd2026-08-29https://notes.estfanous.com/p/subnet-6ba180232026-08-29https://notes.estfanous.com/p/kali-7bcda9642026-08-29https://notes.estfanous.com/p/users-and-privileges-9fb2fc032026-08-29https://notes.estfanous.com/p/network-commands-844dc5662026-08-29https://notes.estfanous.com/p/starting-and-stopping-srvc-38fb82502026-08-29https://notes.estfanous.com/p/untitled-7ae658a82026-08-29https://notes.estfanous.com/p/installing-and-updating-tools-fa6e64bc2026-08-29https://notes.estfanous.com/p/scripting-w-bash-abfacfc02026-08-29https://notes.estfanous.com/p/python-4f6bd1b22026-08-29https://notes.estfanous.com/p/basic-034bb1a22026-08-29https://notes.estfanous.com/p/advanced-strings-c7a5e9172026-08-29https://notes.estfanous.com/p/dictionaries-726a09d92026-08-29https://notes.estfanous.com/p/importing-b7de65e72026-08-29https://notes.estfanous.com/p/sockets-and-netcat-c93570362026-08-29https://notes.estfanous.com/p/reading-and-writing-files-85b489062026-08-29https://notes.estfanous.com/p/classes-and-objects-4b50a6152026-08-29https://notes.estfanous.com/p/information-gathering-a4085e802026-08-29https://notes.estfanous.com/p/passive-0798853d2026-08-29https://notes.estfanous.com/p/email-addresses-161379cf2026-08-29https://notes.estfanous.com/p/breached-data-00c8ca692026-08-29https://notes.estfanous.com/p/subdomains-633194fc2026-08-29https://notes.estfanous.com/p/web-technologies-bf92d5912026-08-29https://notes.estfanous.com/p/scanning-and-enum-c06c2b4e2026-08-29https://notes.estfanous.com/p/kioptrix-f7a656ab2026-08-29https://notes.estfanous.com/p/notes-e441f2ae2026-08-29https://notes.estfanous.com/p/vulnerabilities-8c471b192026-08-29https://notes.estfanous.com/p/active-find-directories-da36fe322026-08-29https://notes.estfanous.com/p/metasploit-d083ab912026-08-29https://notes.estfanous.com/p/connecting-to-smb-f402a0ff2026-08-29https://notes.estfanous.com/p/ssh-423717d82026-08-29https://notes.estfanous.com/p/finding-exploits-606270a52026-08-29https://notes.estfanous.com/p/nessus-fc23a7752026-08-29https://notes.estfanous.com/p/exploitation-3ae259332026-08-29https://notes.estfanous.com/p/shells-netcat-c18bba5a2026-08-29https://notes.estfanous.com/p/staged-vs-non-staged-payloads-b62da1b12026-08-29https://notes.estfanous.com/p/gaining-root-with-metasploit-95187ff22026-08-29https://notes.estfanous.com/p/manual-exploitation-49e388062026-08-29https://notes.estfanous.com/p/brute-force-attacks-ef8036aa2026-08-29https://notes.estfanous.com/p/what-to-do-after-gaining-acess-6bb49de22026-08-29https://notes.estfanous.com/p/eternal-blue-0ce887de2026-08-29https://notes.estfanous.com/p/academy-25222cc82026-08-29https://notes.estfanous.com/p/dev-4848b3b82026-08-29https://notes.estfanous.com/p/butler-5f24e2bd2026-08-29https://notes.estfanous.com/p/blackpearl-95e7bd462026-08-29https://notes.estfanous.com/p/buffer-overflow-871ff6322026-08-29https://notes.estfanous.com/p/spiking-700994662026-08-29https://notes.estfanous.com/p/fuzzing-e3830e0c2026-08-29https://notes.estfanous.com/p/finding-the-offset-cb69c0432026-08-29https://notes.estfanous.com/p/bad-characters-666ba7b72026-08-29https://notes.estfanous.com/p/finding-the-right-module-dll-613f87d02026-08-29https://notes.estfanous.com/p/generating-shellcode-and-gaining-root-99de74f02026-08-29https://notes.estfanous.com/p/using-python3-and-mona-81ebcf4f2026-08-29https://notes.estfanous.com/p/active-directory-c15e45db2026-08-29https://notes.estfanous.com/p/llmnr-ccebaed62026-08-29https://notes.estfanous.com/p/mitigation-32ace3e52026-08-29https://notes.estfanous.com/p/cracking-captured-hashes-8d7381142026-08-29https://notes.estfanous.com/p/smb-relay-attacks-ntlm-f39866012026-08-29https://notes.estfanous.com/p/mitigations-dd2c0b952026-08-29https://notes.estfanous.com/p/gaining-shell-access-843f941e2026-08-29https://notes.estfanous.com/p/ipv6-dns-takeover-via-mitm6-fe90c9262026-08-29https://notes.estfanous.com/p/mitigations-669d89232026-08-29https://notes.estfanous.com/p/domain-enumeration-with-ldapdomaindump-ef46c2552026-08-29https://notes.estfanous.com/p/domain-enum-with-bloodhound-4db635cb2026-08-29https://notes.estfanous.com/p/domain-enum-with-plumhound-6b5e64182026-08-29https://notes.estfanous.com/p/pingcastle-b453c3b82026-08-29https://notes.estfanous.com/p/post-compromise-b5fb32ff2026-08-29https://notes.estfanous.com/p/kerberoasting-75e63e122026-08-29https://notes.estfanous.com/p/mitigations-30bf158d2026-08-29https://notes.estfanous.com/p/token-impersonation-bca6f6f72026-08-29https://notes.estfanous.com/p/mitigation-a193e9482026-08-29https://notes.estfanous.com/p/url-file-attacks-545762de2026-08-29https://notes.estfanous.com/p/gpp-attacks-cpassword-attacks-e4deaea82026-08-29https://notes.estfanous.com/p/mitigations-c324c2802026-08-29https://notes.estfanous.com/p/mimikatz-there-s-also-kiwi-b24c29572026-08-29https://notes.estfanous.com/p/pass-attacks-the-pass-the-hash-e9c9fcf42026-08-29https://notes.estfanous.com/p/dumping-and-cracking-hashes-fcc3ab902026-08-29https://notes.estfanous.com/p/mitigations-4a929b1f2026-08-29https://notes.estfanous.com/p/post-compromise-strat-b79c32732026-08-29https://notes.estfanous.com/p/we-own-the-domain-now-what-924590cf2026-08-29https://notes.estfanous.com/p/dumping-the-ntds-dit-aaa0ce762026-08-29https://notes.estfanous.com/p/golden-ticket-w-mimikatz-852ded1c2026-08-29https://notes.estfanous.com/p/shouldn-t-use-unless-approved-7f1a060d2026-08-29https://notes.estfanous.com/p/post-exploitation-701f3ae82026-08-29https://notes.estfanous.com/p/file-transfers-review-013c90792026-08-29https://notes.estfanous.com/p/maintaining-access-persistence-269f698e2026-08-29https://notes.estfanous.com/p/pivoting-dd928eec2026-08-29https://notes.estfanous.com/p/clean-up-23e41bd92026-08-29https://notes.estfanous.com/p/tools-c00145362026-08-29https://notes.estfanous.com/p/hashcat-179ab92f2026-08-29https://notes.estfanous.com/p/zerologon-db3f2a6a2026-08-29https://notes.estfanous.com/p/printnightmare-cve-2021-1675-2025d09e2026-08-29https://notes.estfanous.com/p/web-application-enumeration-revisited-106cbe3e2026-08-29https://notes.estfanous.com/p/web-application-exploitation-686945c02026-08-29https://notes.estfanous.com/p/sql-injection-13cd92a12026-08-29https://notes.estfanous.com/p/blind-injection-622123602026-08-29https://notes.estfanous.com/p/cross-site-scripting-xss-cecfb4bf2026-08-29https://notes.estfanous.com/p/examples-walkthrough-c03beafd2026-08-29https://notes.estfanous.com/p/command-injection-8b8a0fe32026-08-29https://notes.estfanous.com/p/file-upload-f75848852026-08-29https://notes.estfanous.com/p/authentication-86e453bc2026-08-29https://notes.estfanous.com/p/brute-force-w-burp-or-ffuf-e8c90ee42026-08-29https://notes.estfanous.com/p/mfa-a57aba6f2026-08-29https://notes.estfanous.com/p/xxe-external-entities-injection-f21263c72026-08-29https://notes.estfanous.com/p/idor-bola-insecure-direct-object-reference-24eb37202026-08-29https://notes.estfanous.com/p/wpa2-psk-hacking-process-fbe7c05e2026-08-29https://notes.estfanous.com/p/windows-priv-esc-69b0d9672026-08-29https://notes.estfanous.com/p/devel-iis-7-5-asp-52d1668b2026-08-29https://notes.estfanous.com/p/initial-enumeration-windows-ca8827c62026-08-29https://notes.estfanous.com/p/system-enum-280e1a2f2026-08-29https://notes.estfanous.com/p/user-enum-c5fc3e292026-08-29https://notes.estfanous.com/p/network-enum-2962d7c02026-08-29https://notes.estfanous.com/p/password-hunting-b9dcaccc2026-08-29https://notes.estfanous.com/p/firewall-and-antivirus-enum-bd7976e52026-08-29https://notes.estfanous.com/p/exploring-automated-tools-5625485a2026-08-29https://notes.estfanous.com/p/winpeas-9f6116c02026-08-29https://notes.estfanous.com/p/powershell-5e7b48882026-08-29https://notes.estfanous.com/p/windows-exploit-suggester-34c7a2122026-08-29https://notes.estfanous.com/p/old-suggester-c26a67ec2026-08-29https://notes.estfanous.com/p/new-suggester-2314edc12026-08-29https://notes.estfanous.com/p/escalation-paths-9fc0c16d2026-08-29https://notes.estfanous.com/p/kernel-exploits-eb21287c2026-08-29https://notes.estfanous.com/p/metasploit-d736b6382026-08-29https://notes.estfanous.com/p/manual-kernel-exploitation-75336f242026-08-29https://notes.estfanous.com/p/passwords-and-port-forwarding-cd4ed53f2026-08-29https://notes.estfanous.com/p/chatterbox-09c783262026-08-29https://notes.estfanous.com/p/achat-exploitation-090b27382026-08-29https://notes.estfanous.com/p/windows-subsystem-for-linux-f6a7bec02026-08-29https://notes.estfanous.com/p/impersonation-and-potato-attacks-efc9b3482026-08-29https://notes.estfanous.com/p/impersonation-privileges-76ba503f2026-08-29https://notes.estfanous.com/p/potato-attacks-358e0d9d2026-08-29https://notes.estfanous.com/p/alternate-data-streams-19388aff2026-08-29https://notes.estfanous.com/p/getsystem-cd5722302026-08-29https://notes.estfanous.com/p/runas-5e802fb52026-08-29https://notes.estfanous.com/p/tryhackme-labs-b63b11982026-08-29https://notes.estfanous.com/p/registry-4a8b09382026-08-29https://notes.estfanous.com/p/autoruns-f30b676d2026-08-29https://notes.estfanous.com/p/alwaysinstallelevated-d6c95b242026-08-29https://notes.estfanous.com/p/regsvc-acl-923001882026-08-29https://notes.estfanous.com/p/executable-files-65f317ca2026-08-29https://notes.estfanous.com/p/startup-applications-ec138e5f2026-08-29https://notes.estfanous.com/p/dll-hijacking-66a26ba52026-08-29https://notes.estfanous.com/p/service-permissions-paths-40a5f5e12026-08-29https://notes.estfanous.com/p/unquoted-service-paths-38a70afa2026-08-29https://notes.estfanous.com/p/steel-mountain-tryhackme-box-26212a1c2026-08-29https://notes.estfanous.com/p/manual-winpeas-and-nc-d3dd88cd2026-08-29https://notes.estfanous.com/p/cve-2019-1388-blaster-machine-on-tryhackme-f6a3a1be2026-08-29https://notes.estfanous.com/p/capstone-challenges-ac2edb212026-08-29https://notes.estfanous.com/p/arctic-hackthebox-7fb9e8982026-08-29https://notes.estfanous.com/p/bastard-hackthebox-4b65f8cd2026-08-29https://notes.estfanous.com/p/bastion-hackthebox-mremoteng-0b2ccd1b2026-08-29https://notes.estfanous.com/p/querier-f548aacc2026-08-29https://notes.estfanous.com/p/alfred-tryhackme-1ed43b852026-08-29https://notes.estfanous.com/p/my-challenges-e48c31c72026-08-29https://notes.estfanous.com/p/active-e0e5ffe52026-08-29https://notes.estfanous.com/p/tally-1293881e2026-08-29https://notes.estfanous.com/p/jab-2c05aa662026-08-29https://notes.estfanous.com/p/sauna-582fe6852026-08-29https://notes.estfanous.com/p/forest-ea84d9ce2026-08-29https://notes.estfanous.com/p/exploits-codes-for-quick-ref-4fc2df062026-08-29https://notes.estfanous.com/p/linux-priv-esc-f7a3c06f2026-08-29https://notes.estfanous.com/p/resources-79a1d5062026-08-29https://notes.estfanous.com/p/initial-enumeration-560fb89d2026-08-29https://notes.estfanous.com/p/system-enumeration-95e4cb062026-08-29https://notes.estfanous.com/p/user-enumeration-ed19a2112026-08-29https://notes.estfanous.com/p/network-enumeration-f082c3db2026-08-29https://notes.estfanous.com/p/password-hunting-ef7322aa2026-08-29https://notes.estfanous.com/p/exploring-automated-tools-46fd972e2026-08-29https://notes.estfanous.com/p/resources-and-tips-d9b2cd822026-08-29https://notes.estfanous.com/p/linpeas-1727b5002026-08-29https://notes.estfanous.com/p/escalation-paths-2db922682026-08-29https://notes.estfanous.com/p/kernal-exploits-783c75ca2026-08-29https://notes.estfanous.com/p/escalation-via-kernel-exploit-080007302026-08-29https://notes.estfanous.com/p/password-file-permissions-ec70a4cc2026-08-29https://notes.estfanous.com/p/stored-passwords-0476f8c22026-08-29https://notes.estfanous.com/p/weak-file-permissions-de46fe942026-08-29https://notes.estfanous.com/p/ssh-keys-b58e3ee92026-08-29https://notes.estfanous.com/p/sudo-918653f12026-08-29https://notes.estfanous.com/p/sudo-shell-escaping-fb629d102026-08-29https://notes.estfanous.com/p/intended-functionality-fe1235942026-08-29https://notes.estfanous.com/p/ld-preload-7d5fa9a42026-08-29https://notes.estfanous.com/p/simple-ctf-challenge-machine-cf6537fb2026-08-29https://notes.estfanous.com/p/cve-2019-14287-sudo-bypass-6f56cf942026-08-29https://notes.estfanous.com/p/cve-2019-18634-sudo-buffer-overflow-45011af22026-08-29https://notes.estfanous.com/p/suid-set-user-id-f0fdae052026-08-29https://notes.estfanous.com/p/vulnversity-a97f0ba42026-08-29https://notes.estfanous.com/p/other-suid-escalation-c833e4722026-08-29https://notes.estfanous.com/p/shared-object-injection-211bfbf42026-08-29https://notes.estfanous.com/p/binary-symlinks-722eeba92026-08-29https://notes.estfanous.com/p/environmental-variables-3dbd630f2026-08-29https://notes.estfanous.com/p/capabilities-fdfe47a02026-08-29https://notes.estfanous.com/p/scheduled-tasks-d58658f42026-08-29https://notes.estfanous.com/p/cron-timers-0bf96ad92026-08-29https://notes.estfanous.com/p/cron-paths-52cde0d32026-08-29https://notes.estfanous.com/p/cron-wildcards-957b02ae2026-08-29https://notes.estfanous.com/p/cron-file-overwrites-e989135f2026-08-29https://notes.estfanous.com/p/challenge-machine-cmess-3ad065f42026-08-29https://notes.estfanous.com/p/nfs-root-squashing-69f1eb5e2026-08-29https://notes.estfanous.com/p/docker-6224f5452026-08-29https://notes.estfanous.com/p/capstone-challenge-b7b6937b2026-08-29https://notes.estfanous.com/p/lazy-admin-b17476522026-08-29https://notes.estfanous.com/p/anonymous-126a42ed2026-08-29https://notes.estfanous.com/p/tomghost-dc547e712026-08-29https://notes.estfanous.com/p/convertmyvideo-a366bd262026-08-29https://notes.estfanous.com/p/brainpan1-buffer-overflow-with-immunity-debugger-cea4419a2026-08-29https://notes.estfanous.com/p/osint-c326d6682026-08-29https://notes.estfanous.com/p/what-is-osint-d18eb4b02026-08-29https://notes.estfanous.com/p/sock-puppets-3e242ec22026-08-29https://notes.estfanous.com/p/search-engine-osint-5d776bd02026-08-29https://notes.estfanous.com/p/image-osint-c2cf82b72026-08-29https://notes.estfanous.com/p/reverse-image-searching-cd1e06882026-08-29https://notes.estfanous.com/p/viewing-exif-data-6e40b6b82026-08-29https://notes.estfanous.com/p/physical-location-osint-b257fdbd2026-08-29https://notes.estfanous.com/p/identifying-geographical-locations-dae42c812026-08-29https://notes.estfanous.com/p/where-in-the-world-a34b1ffe2026-08-29https://notes.estfanous.com/p/email-osint-2be562aa2026-08-29https://notes.estfanous.com/p/password-osint-588c54b82026-08-29https://notes.estfanous.com/p/username-osint-590f73f42026-08-29https://notes.estfanous.com/p/people-osint-27c89e912026-08-29https://notes.estfanous.com/p/searching-for-people-ccd2c3c12026-08-29https://notes.estfanous.com/p/voter-records-c8b3f4142026-08-29https://notes.estfanous.com/p/hunting-phone-numbers-a00c45642026-08-29https://notes.estfanous.com/p/discovering-birthdates-948ed7d32026-08-29https://notes.estfanous.com/p/searching-for-resumes-043214712026-08-29https://notes.estfanous.com/p/social-media-osint-f3a2bd892026-08-29https://notes.estfanous.com/p/twitter-x-osint-0d12b5b02026-08-29https://notes.estfanous.com/p/facebook-osint-7a7a6ff72026-08-29https://notes.estfanous.com/p/instagram-osint-d763525f2026-08-29https://notes.estfanous.com/p/snapchat-osint-b307a2e02026-08-29https://notes.estfanous.com/p/reddit-osint-02f835162026-08-29https://notes.estfanous.com/p/linkedin-osint-4f3b5f1b2026-08-29https://notes.estfanous.com/p/tiktok-osint-a33e0f872026-08-29https://notes.estfanous.com/p/website-osint-8fa24bb72026-08-29https://notes.estfanous.com/p/hunting-business-information-246cf6712026-08-29https://notes.estfanous.com/p/wireless-osint-5fa182472026-08-29https://notes.estfanous.com/p/working-with-osint-tools-dd3438c92026-08-29https://notes.estfanous.com/p/image-and-location-osint-2479220d2026-08-29https://notes.estfanous.com/p/hunting-emails-and-breached-data-93137ddc2026-08-29https://notes.estfanous.com/p/username-and-account-osint-53b97b422026-08-29https://notes.estfanous.com/p/phone-number-osint-b4ae1ac92026-08-29https://notes.estfanous.com/p/social-media-osint-418191422026-08-29https://notes.estfanous.com/p/exploring-osint-frameworks-d17355512026-08-29https://notes.estfanous.com/p/website-osint-tools-db026ba72026-08-29https://notes.estfanous.com/p/osint-case-studies-f637544f2026-08-29https://notes.estfanous.com/p/deadly-osint-pop-smoke-a552e46f2026-08-29https://notes.estfanous.com/p/influencer-home-tour-1971b8622026-08-29https://notes.estfanous.com/p/cooking-tutorials-15eef0632026-08-29https://notes.estfanous.com/p/osint-report-writing-bbaf944d2026-08-29https://notes.estfanous.com/p/external-pentest-playbook-fb41b8da2026-08-29https://notes.estfanous.com/p/before-we-start-80d0152b2026-08-29https://notes.estfanous.com/p/checklists-ftw-65a3c4c32026-08-29https://notes.estfanous.com/p/rules-of-engagement-a293466a2026-08-29https://notes.estfanous.com/p/verifying-scope-9621b7592026-08-29https://notes.estfanous.com/p/client-communication-26bd5c5e2026-08-29https://notes.estfanous.com/p/kicking-off-190376022026-08-29https://notes.estfanous.com/p/attack-strategy-561433562026-08-29https://notes.estfanous.com/p/vulnerability-scanning-63fa9e232026-08-29https://notes.estfanous.com/p/reviewing-extracting-information-93e4d38d2026-08-29https://notes.estfanous.com/p/information-gathering-osint-e85dc8b72026-08-29https://notes.estfanous.com/p/hunting-breached-credentials-f19d39762026-08-29https://notes.estfanous.com/p/identifying-emails-employees-15af679d2026-08-29https://notes.estfanous.com/p/enumerating-valid-accounts-pre-attack-e99170a22026-08-29https://notes.estfanous.com/p/other-useful-information-33cf2f6b2026-08-29https://notes.estfanous.com/p/attacking-login-portals-7b2567692026-08-29https://notes.estfanous.com/p/password-spraying-o365-attacking-o365-27f87f3a2026-08-29https://notes.estfanous.com/p/password-spraying-owa-outlook-web-app-c58f8b262026-08-29https://notes.estfanous.com/p/attacking-other-portals-6158f8d52026-08-29https://notes.estfanous.com/p/bypassing-mfa-2fa-f76b85e92026-08-29https://notes.estfanous.com/p/escalating-access-be75aa662026-08-29https://notes.estfanous.com/p/strategy-walkthrough-0be66abb2026-08-29https://notes.estfanous.com/p/report-writing-client-presentation-a86c211e2026-08-29https://notes.estfanous.com/p/report-writing-f67ab6ea2026-08-29https://notes.estfanous.com/p/common-pentest-findings-external-testing-b45a71c72026-08-29https://notes.estfanous.com/p/insufficient-authentication-controls-9996004b2026-08-29https://notes.estfanous.com/p/weak-password-policy-8a26c9b92026-08-29https://notes.estfanous.com/p/insufficient-patching-302547792026-08-29https://notes.estfanous.com/p/default-credentials-824b2fb92026-08-29https://notes.estfanous.com/p/insufficient-encryption-the-most-by-far-d8418c042026-08-29https://notes.estfanous.com/p/information-disclosure-915303262026-08-29https://notes.estfanous.com/p/username-enumeration-515145d92026-08-29https://notes.estfanous.com/p/default-web-pages-ed3851332026-08-29https://notes.estfanous.com/p/open-mail-relays-ff4385372026-08-29https://notes.estfanous.com/p/ike-aggressive-mode-6c9ee4c62026-08-29https://notes.estfanous.com/p/unexpected-perimeter-services-82edc1182026-08-29https://notes.estfanous.com/p/insufficient-traffic-blocking-2f3fc4342026-08-29https://notes.estfanous.com/p/undetected-malicious-activity-9b9964112026-08-29https://notes.estfanous.com/p/historical-account-compromises-4f2e31572026-08-29https://notes.estfanous.com/p/client-debriefs-668606fa2026-08-29https://notes.estfanous.com/p/attestation-letters-bf9a86df2026-08-29https://notes.estfanous.com/p/client-retests-a236818e2026-08-29https://notes.estfanous.com/p/my-exam-checklist-7b85df622026-08-29https://notes.estfanous.com/p/certificate-attacks-esc1-15-91fc8f2a2026-08-29https://notes.estfanous.com/p/esc1-def456ae2026-08-29https://notes.estfanous.com/p/esc2-cf8b91b32026-08-29https://notes.estfanous.com/p/esc3-923900162026-08-29https://notes.estfanous.com/p/esc7-36ff849f2026-08-29https://notes.estfanous.com/p/esc8-b5dca35f2026-08-29https://notes.estfanous.com/p/esc11-a0da26262026-08-29https://notes.estfanous.com/p/certifried-55ad1ff72026-08-29https://notes.estfanous.com/p/operationalizing-cybercrime-data-for-red-teams-offensive-ops-29d07f032026-08-29