SUMMARY.md

Table of contents

• 🚩 Home - Practical CTF

🌐 Web

• Enumeration
  • Finding Hosts & Domains
  • Masscan
  • Nmap
  • OSINT
• Client-Side
  • Cross-Site Scripting (XSS)
  • CSS Injection
  • Cross-Site Request Forgery (CSRF)
  • XS-Leaks
  • Window Popup Tricks
  • Header / CRLF Injection
  • Caching
• Server-Side
  • SQL Injection
  • NoSQL Injection
  • GraphQL
  • XML External Entities (XXE)
  • HTTP Request Smuggling
  • Local File Disclosure
  • Arbitrary File Write
  • Reverse Proxies
• Frameworks
  • Flask
  • Ruby on Rails
  • NodeJS
  • Bun
  • WordPress
  • Angular
• Chrome Remote DevTools
• ImageMagick

🔣 Cryptography

• Encodings
• Ciphers
• Custom Ciphers
  • Z3 Solver
• XOR
• Asymmetric Encryption
  • RSA
  • Diffie-Hellman
  • PGP / GPG
• AES
• Hashing
  • Cracking Hashes
  • Cracking Signatures
• Pseudo-Random Number Generators (PRNG)
• Timing Attacks
• Blockchain
  • Smart Contracts
  • Bitcoin addresses

🔎 Forensics

• Wireshark
• File Formats
• Archives
• Memory Dumps (Volatility)
• VBA Macros
• Grep
• Git
• File Recovery

⚙️ Reverse Engineering

• Ghidra
• Angr Solver
• Reversing C# - .NET / Unity
• PowerShell

📟 Binary Exploitation

• ir0nstone's Binary Exploitation Notes
• Reverse Engineering for Pwn
• PwnTools
• ret2win
• ret2libc
• Shellcode
• Stack Canaries
• Return-Oriented Programming (ROP)
  • SigReturn-Oriented Programming (SROP)
  • ret2dlresolve
• Sandboxes (chroot, seccomp & namespaces)
• Race Conditions

📲 Mobile

• Setup
• Reversing APKs
• Patching APKs
• HTTP(S) Proxy for Android
• Android Backup
• Compiling C for Android
• iOS

🌎 Languages

• PHP
• Python
• JavaScript
  • Prototype Pollution
  • postMessage Exploitation
• Java
• C#
• Assembly
• Markdown
• LaTeX
• JSON
• YAML
• CodeQL
• NASL (Nessus Plugins)
• Regular Expressions (RegEx)

🤖 Networking

• Modbus - TCP/502
• Redis/Valkey - TCP/6379

🐧 Linux

• Shells
• Bash
• Linux Privilege Escalation
  • Enumeration
  • Networking
  • Command Triggers
  • Command Exploitation
  • Outdated Versions
  • Network File Sharing (NFS)
  • Docker
  • Filesystem Permissions
• Analyzing Processes

🪟 Windows

• The Hacker Recipes - AD
• Scanning/Spraying
• Exploitation
• Local Enumeration
• Local Privilege Escalation
• Windows Authentication
  • Kerberos
  • NTLM
• Lateral Movement
• Active Directory Privilege Escalation
• Persistence
• Antivirus Evasion
• Metasploit
• Alternate Data Streams (ADS)

☁️ Cloud

• Kubernetes
• Microsoft Azure

❔ Other

• Business Logic Errors
• Password Managers
• ANSI Escape Codes
• WSL Tips