Skip links

  • Skip to primary navigation
  • Skip to content
  • Skip to footer
JOHNERMAC
  • Posts
  • Menu
  • About
    ~/johnermac
    ├── awareness/
    │   └── Security Awareness
    ├── c2/
    │   └── Sliver C2
    ├── cve/
    │   ├── Stored cross-site scripting (XSS)
    │   └── SQL Injection (SQLi)
    ├── insights/
    │   ├── How to become a Pentester (2024)
    │   └── seniority != mastery
    └── notes/
        ├── adcs/
        │   └── Attack AD CS Now!!
        ├── adx/
        │   ├── 1 - Powershell
        │   ├── 2 - Bloodhound
        │   ├── 3 - Windows Privesc
        │   └── 4 - Windows Lateral Movement
        ├── cartp/
        │   ├── CARTP - Review
        │   ├── 1 - Intro & Recon (Azure)
        │   ├── 2 - Enumeration & Privilege Escalation (Azure)
        │   └── 3 - Lateral mov & Persistence (Azure)
        ├── cloud/
        │   ├── Intro to Cloud Pentesting!
        │   └── Get familiar with Azure Pentesting!
        ├── container/
        │   ├── Hacking Containers!
        │   ├── Hacking Kubernetes!
        │   ├── Container Security - Defense in Layers!
        │   ├── Containers from Scratch: Linux Isolation Primitives in Action!
        │   └── From Containers to Pods – Engineering Multi-Container Isolation
        ├── crte/
        │   ├── CRTE Review
        │   ├── 1 - Lateral Movement
        │   ├── 2 - AD Privesc
        │   ├── 3 - AD Persistence
        │   ├── 4 - Cross Domain Attacks
        │   └── 5 - Cheat Sheet
        ├── crtp/
        │   ├── CRTP Review
        │   ├── 1 - AD Enumeration
        │   ├── 2 - Win Privesc
        │   ├── 3 - Lateral Movement
        │   ├── 4 - Offensive .NET
        │   ├── 5 - AD Persistence
        │   ├── 6 - AD Privesc
        │   └── 7 - AD Defense
        ├── ecppt/
        │   ├── eLearnSecurity Certified Professional Penetration Tester
        │   ├── 1 - System Security
        │   ├── 2 - Network Security
        │   ├── 3 - Powershell
        │   ├── 4 - Linux Security
        │   ├── 5 - Web App Security
        │   ├── 6 - Wi-Fi Pentest
        │   └── 7 - Metasploit & Ruby
        ├── ejpt/
        │   └── eLearnSecurity Junior Penetration Tester
        ├── ewptx/
        │   ├── Web application Penetration Tester eXtreme
        │   ├── 1 - Encoding & Filtering
        │   ├── 2 - Evasion Basics
        │   ├── 3 - Cross-site scripting (XSS)
        │   ├── 4 - XSS Filter Evasion
        │   ├── 5 - Cross-site request forgery (CSRF)
        │   ├── 6 - HTML5
        │   ├── 7 - SQL Injection
        │   ├── 8 - SQLI Filter Evasion
        │   ├── 9 - XML Attacks
        │   ├── 10 - Attacking Serialization
        │   ├── 11 - Server Side Attacks
        │   ├── 12 - Attacking Crypto
        │   ├── 13 - Authentication & SSO
        │   ├── 14 - APIs & Cloud Apps
        │   └── 15 - Attacking LDAP
        └── pnpt/
            ├── Practical Network Penetration Tester
            ├── 1 - Practical Ethical Hacker
            ├── 2 - Open-Source Intelligence (OSINT)
            ├── 3 - External Pentest Playbook
            ├── 4 - Linux Privilege Escalation
            ├── 5 - Windows Privilege Escalation
            └── 6 - Movement, Pivoting and Persistence