PowerShell Troubleshooting commands

get-netIPConfiguration
get-netIPaddress

test-netconnection www.linkedin.com

resolve-dnsname www.linkedin.com

resolve-dnsname www.linkedin.com -type soa

route print - routing table

get-netroute -protocol Loal - destinaion prefix

wpscan scanner

We will first enumerate the available WordPress logins using the enumerate user script. Enter the following command in the terminal:
wpscan -u https://<IP address>:12380/blogblog/ --enumerate u

Scanning SSL Kali Linux

sslscan website

heartbeat vulnerability


Another tool that performs a thorough sweep and analyzes the SSL/TLS configurations of a target service is SSLyze. To perform the majority of the basic tests in SSLyze, arguments should include the target server and the --regular argument. This includes tests for SSLv2, SSLv3, TLSv1, renegotiation, resumption, certificate information, HTTP GET response status codes, and compression support as follows:

root@KaliLinux:~# sslyze google.com --regular

Efficient technique using BurpSuite when spidering - Kali Linux

Proxy

Add the site to the scope


Spider tab - Options - application login - automatically submit these credentials

admin' or 1=1 --
password - NONE-blank

---

Target tab - activate spider

Target - site map tab
engagement tool - discover content - 
click session is not running button
brute force attack running

checks if a given domain uses laod-balancing

lbd website

wafw00f website - web application firewall attack commands

wafw00f website

WafW00f is a very useful Python script, capable of detecting the web application firewall (WAF). This tool is particularly useful when a penetration tester wants to inspect the target application server, and might get a fallback with certain vulnerability assessment techniques, for which the web application is actively protected by a firewall. Therefore, detecting the firewall sitting in between the application server and the Internet traffic not only improves a testing strategy, but also presents exceptional challenges for the penetration tester to develop advanced evasion techniques.

API Security Cheat Sheet - OWASP

Reverse shells - joke

Building security from scratch

OWASP, podcast

https://soundcloud.com/owasp-podcast/how-to-build-chapter-engagement-at-owasp

While at 2018 AppSec EU, I spoke with Sam Stepanyan and Grigorios Fragkos, chapter leaders of one of OWASP's largest chapters. The conversation centered around what does it take to grow a community, what does it take to lead a chapter.

The registry - where to find where I was connected - Wireless

Alex wants to determine whether the user of a company-owned laptop accessed a malicious wireless access point. Where can he find the list of wireless networks that the system knows about?

1. The registry
2. The user profile directory
3. The wireless adapter cache
4. Wireless network lists are not stored after use.

The Windows registry stores a list of wireless networks the system has connected to in the registry under HKLM\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\NetworkList\Profiles. This is not a user-specific setting and is stored for all users in LocalMachine.