Preparation

Build a local testlab

Footprinting

Introduction
- What?
- Why?
- How?
Gather network information
Gather system information
Collect organisation information

Initial scanning

Introduction
- What?
- Why?
- How?
War-dialing-driving-flying-shipping
Live host discovery
- Types of scans
- Options
Host discovery with ICMP
- Examples
Host discovery with TCP
Host discovery with UDP
Port scanning
- Types of scans
- Options
Service and OS detection
Diving deeper in discovery
Defence detection
Stealth scans
- Stealth
Firewall evasion

Canopy of apple-blossom

Introduction
- What?
- Why?
- How?
Manually walk through the target
Scope discovery
Other sneaky OSINT techniques
Tech stack fingerprinting

API Mayhem

Introduction
- What?
- Why?
- How?
Collect data
- Tools
Understand application functionality
- Resources
Analyse traffic
Document key parameters
- Resources
Check for exposed secrets
- Resources

Head in the clouds

Introduction
- What?
- Why?
- How?
Mapping endpoints
Investigating AWS S3 URLs

Pocketful of acorns

Introduction
- What?
- Why?
- How?
Passive reconnaissance
Recon of facilities
- Resources

Falconry

Ty Myrddin Home
Unseen University
Improbability Blog
About
Contact

Index

Unseen University, 2024, with a forest garden fostered by /ut7.