Network — topics
Network and infrastructure attack-surface notes. See network-pentesting for ordering.
Recon
Service enumeration
- ftp-enum · ssh-enum · smtp-enum
- dns-enum · http-enum
- smb-enum · snmp-enum · msrpc-enum
- ldap-enum · kerberos-enum
- mssql-enum · mysql-enum · redis-enum
- rdp-enum · winrm-enum
Initial access
Pivoting and tunneling
Service-specific attacks
- memcache-attacks · tftp-attacks
- mqtt-attacks · ipmi-cipher-zero
- vnc-attacks · x11-attacks
- rmi-java-attacks
Classic MS network bugs
Protocol-layer attacks
Wireless
- wifi-and-802-11-primer
- wpa-and-wpa2-cracking
- evil-twin-and-karma-attacks
- ble-and-bluetooth-low-energy-attacks
- nfc-and-rfid-cloning
- sdr-and-radio-recon
- zigbee-and-zwave-attacks
- lorawan-attacks