# yuyudhn's notes

## yuyudhn's notes

- [About](https://htb.linuxsec.org/readme.md): Just another pentesting checklists
- [Prerequisite](https://htb.linuxsec.org/quickstart/prerequisite.md): Some things that need to be prepared to play Hack The Box machines.
- [Reconnaissance](https://htb.linuxsec.org/quickstart/reconnaissance.md): Common reconnaissance phase steps on HackTheBox machines or during penetration testing.
- [Exploitation](https://htb.linuxsec.org/quickstart/exploitation.md): Common Explitation during CTF or Pentesting
- [Post Exploitation](https://htb.linuxsec.org/quickstart/post-exploitation.md): This page contains notes on post-exploitation
- [Misc](https://htb.linuxsec.org/quickstart/misc.md): This page contain useful Web, Linux, Windows, and Active Directory Attack Cheatsheet
- [Basic Command](https://htb.linuxsec.org/active-directory/basic-command.md): The basic of Command Prompt and PowerShell
- [Enumeration](https://htb.linuxsec.org/active-directory/enumeration.md): Basic Enumeration using Command Prompt and PowerShell
- [PowerView](https://htb.linuxsec.org/active-directory/enumeration/powerview.md): Active Directory Enumeration Checklists with PowerView
- [Service Exploitation](https://htb.linuxsec.org/active-directory/service.md): Basic Service Exploitation in Windows or Active Directory
- [LDAP](https://htb.linuxsec.org/active-directory/service/ldap.md): LDAP Enumeration and Exploitation
- [SMB](https://htb.linuxsec.org/active-directory/service/smb.md): Basic SMB Enumeration and Exploitation
- [MS17-010](https://htb.linuxsec.org/active-directory/service/smb/ms17-010.md): SMB Exploit MS17-010
- [MSSQL](https://htb.linuxsec.org/active-directory/service/mssql.md): Recon and pwning MSSQL Server
- [Privilege Escalation](https://htb.linuxsec.org/active-directory/privilege-escalation.md): Windows Privilege Escalation Checks
- [Unquoted Service Path](https://htb.linuxsec.org/active-directory/privilege-escalation/unquoted-service-path.md): Unquoted Service Paths – Windows Privilege Escalation
- [UAC Bypass](https://htb.linuxsec.org/active-directory/privilege-escalation/uac-bypass.md): Common UAC Bypass Checklists
- [Token Abuse](https://htb.linuxsec.org/active-directory/privilege-escalation/token-abuse.md): Abusing Token for Privilege Escalation
- [Post Exploitation](https://htb.linuxsec.org/active-directory/post-exploitation.md): Active Directory Post Exploitation Checklists
- [Tunneling with Ligolo-ng](https://htb.linuxsec.org/active-directory/post-exploitation/tunneling-with-ligolo-ng.md): Tunneling with Ligolo-ng
- [Credential Hunting](https://htb.linuxsec.org/active-directory/credential-hunting.md): Common technique and tools to hunt credentials on Windows or Active Directory
- [Group Policy Preferences](https://htb.linuxsec.org/active-directory/credential-hunting/group-policy-preferences.md): Finding Passwords in SYSVOL & Exploiting Group Policy Preferences
- [DPAPI](https://htb.linuxsec.org/active-directory/credential-hunting/dpapi.md): Credentials Dumping from Data Protection API
- [Defense Evasion](https://htb.linuxsec.org/mitre/defense-evasion.md): TA0005 - Defense Evasion
- [Physical Attack: Remove EDR](https://htb.linuxsec.org/mitre/defense-evasion/physical-attack-remove-edr.md): Remove EDR and XDR via Physical Attack
- [AMSI Bypass](https://htb.linuxsec.org/mitre/defense-evasion/amsi-bypass.md): Antimalware Scan Interface (AMSI) Bypass
- [Credential Access](https://htb.linuxsec.org/mitre/credential-access.md): TA0006 - Credential Access
- [Dump SAM Hashes via Registry](https://htb.linuxsec.org/mitre/credential-access/dump-sam-hashes-via-registry.md)
- [Misc](https://htb.linuxsec.org/linux/misc.md): Miscellaneous Commands
- [Linux Post Exploitation](https://htb.linuxsec.org/linux/linux-post-exploitation.md): Post Exploitation on Linux
- [Linux Password Hunting](https://htb.linuxsec.org/linux/linux-password-hunting.md): Common Password Attack on Linux Machine
- [Simple PHP Webshell](https://htb.linuxsec.org/backdoor-stuff/php-webshell.md): Several list of simple and obfuscate PHP shell
- [MSFvenom Generate Payload](https://htb.linuxsec.org/backdoor-stuff/generate-payload.md): Generate payload with MSFvenom
- [iOS Penetration Testing](https://htb.linuxsec.org/ios/ios-checklist.md): iOS Pentest Checklist
- [Objection](https://htb.linuxsec.org/ios/objection.md): List all Objection commands used for iOS mobile app penetration testing.
- [Common Applications](https://htb.linuxsec.org/web-application/common-applications.md): Attacking Common Applications
- [Tomcat](https://htb.linuxsec.org/web-application/common-applications/tomcat.md): Attacking Tomcat Service
- [Joomla](https://htb.linuxsec.org/web-application/common-applications/joomla.md): Attacking Joomla CMS
- [SSTI](https://htb.linuxsec.org/web-application/ssti.md): Notes about some basic Server Side Template Injection attack
- [File Inclusion](https://htb.linuxsec.org/web-application/file-inclusion.md): Notes about some basic File Insclusion attack
- [XSS](https://htb.linuxsec.org/web-application/xss.md): Cross-site scripting cheat sheet
- [Misc](https://htb.linuxsec.org/web-application/misc.md): Other useful stuff about Web Pentesting
- [HackTheBox](https://htb.linuxsec.org/machine-writeup/htb.md): HackTheBox Machine Writeups
- [Pilgrimage](https://htb.linuxsec.org/machine-writeup/htb/pilgrimage.md): Writeup Hack The Box Pilgrimage
- [PC](https://htb.linuxsec.org/machine-writeup/htb/pc.md): Writeup mesin Hack The Box PC
- [Shoppy](https://htb.linuxsec.org/machine-writeup/htb/shoppy.md): Writeup mesin Hack The Box Shoppy
- [GoodGames](https://htb.linuxsec.org/machine-writeup/htb/goodgames.md): Writeup mesin Hack The Box GoodGames
- [Photobomb](https://htb.linuxsec.org/machine-writeup/htb/photobomb.md): Writeup mesin Hack The Box Photobomb
- [Support](https://htb.linuxsec.org/machine-writeup/htb/support.md): Writeup Hack The Box Support