Skip to content

📕 The Red Book

Select theme

📕 The Red Book
Introduction
🦳 Stages of Ethical Hacking
- 1️⃣ Information Gathering
  - Overview
  - Active Information Gathering
    
    Overview
    DNS Zone Transfers
    NMAP
    netdiscover
    sqlMap
    Nikto
    Shodan
    RustScan
    Amass
    fping
  - Passive Information Gathering
    
    Overview
    Website Recon & Footprinting
    Whois Enumeration
    Netcraft
    ⭐ DNS
    Identify if site is protected by firewall or proxy - wafw00f
    Subdomain Enumeration - Sublist3r
    ❌ theHarvester (borked)
    Email gathering
    Leaked Password Databases
    Certificates
- 2️⃣ Enumeration
  - Overview
  - SMB
    
    Overview
    Windows discover & Mount
    NMAP Scripts
    SMBMap
    Samba with Linux
    Dictionary Attack
  - FTP
  - SSH
  - HTTP
    
    Overview
    Subdomain
    IIS
    Apache
  - SQL
- 3️⃣ Vulnerability Assessment
  - Overview
  - Nessus
💾 System/Host Based Attacks
- 🪟 Windows
  - Overview
  - Frequently exploited Windows Services
- 🐧 Linux
🥽 Dorks
- Google
- Extra
🎣 Phishing
🔎 OSINT
- Temporary links
👾 Data exfiltration
- Temporary links
🐝 OWASP
- Top10
📙 Cheat Sheet

Select theme

On this page

Overview
wafw00f

On this page

Overview
wafw00f

Identify if site is protected by firewall or proxy - wafw00f

wafw00f

Section titled “wafw00f”

GitHub repo for wafw00f

Usage

Terminal window

wafw00f $DOMAIN_NAME -a

Previous
⭐ DNS Next
Subdomain Enumeration - Sublist3r