> For the complete documentation index, see [llms.txt](https://ahmed-tarek.gitbook.io/security-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ahmed-tarek.gitbook.io/security-notes/notes.md). # Notes - [Qiuch Recon Methodology](https://ahmed-tarek.gitbook.io/security-notes/notes/qiuch-recon-methodology.md) - [Enumeration](https://ahmed-tarek.gitbook.io/security-notes/notes/enumeration.md) - [Active Directory Pentesting](https://ahmed-tarek.gitbook.io/security-notes/notes/active-directory-pentesting.md) - [Active Directory Components](https://ahmed-tarek.gitbook.io/security-notes/notes/active-directory-pentesting/active-directory-components.md) - [Initial Attack Vectors](https://ahmed-tarek.gitbook.io/security-notes/notes/active-directory-pentesting/initial-attack-vectors.md) - [LLMNR Poisoning](https://ahmed-tarek.gitbook.io/security-notes/notes/active-directory-pentesting/initial-attack-vectors/llmnr-poisoning.md) - [SMB Relay Attacks](https://ahmed-tarek.gitbook.io/security-notes/notes/active-directory-pentesting/initial-attack-vectors/smb-relay-attacks.md) - [IPv6 Attacks ( IPv6 DNS Takeover )](https://ahmed-tarek.gitbook.io/security-notes/notes/active-directory-pentesting/initial-attack-vectors/ipv6-attacks-ipv6-dns-takeover.md) - [Printer Hacking](https://ahmed-tarek.gitbook.io/security-notes/notes/active-directory-pentesting/initial-attack-vectors/printer-hacking.md): Passback Attacks - [Methodology](https://ahmed-tarek.gitbook.io/security-notes/notes/active-directory-pentesting/initial-attack-vectors/methodology.md): for the moment - [Some Other Attacks](https://ahmed-tarek.gitbook.io/security-notes/notes/active-directory-pentesting/initial-attack-vectors/some-other-attacks.md) - [Zerologon (CVE-2020-1472)](https://ahmed-tarek.gitbook.io/security-notes/notes/active-directory-pentesting/initial-attack-vectors/some-other-attacks/zerologon-cve-2020-1472.md) - [PrintNightmare (CVE-2021-1675)](https://ahmed-tarek.gitbook.io/security-notes/notes/active-directory-pentesting/initial-attack-vectors/some-other-attacks/printnightmare-cve-2021-1675.md) - [Post-Compromise Attacks](https://ahmed-tarek.gitbook.io/security-notes/notes/active-directory-pentesting/post-compromise-attacks.md) - [Pass Attacks](https://ahmed-tarek.gitbook.io/security-notes/notes/active-directory-pentesting/post-compromise-attacks/pass-attacks.md) - [Kerberoasting Attack](https://ahmed-tarek.gitbook.io/security-notes/notes/active-directory-pentesting/post-compromise-attacks/kerberoasting-attack.md) - [Token Impersonation Attack](https://ahmed-tarek.gitbook.io/security-notes/notes/active-directory-pentesting/post-compromise-attacks/token-impersonation-attack.md) - [LNK File Attack](https://ahmed-tarek.gitbook.io/security-notes/notes/active-directory-pentesting/post-compromise-attacks/lnk-file-attack.md) - [GPP / cPassword Attacks](https://ahmed-tarek.gitbook.io/security-notes/notes/active-directory-pentesting/post-compromise-attacks/gpp-cpassword-attacks.md) - [Mimikatz](https://ahmed-tarek.gitbook.io/security-notes/notes/active-directory-pentesting/post-compromise-attacks/mimikatz.md) - [Methodology](https://ahmed-tarek.gitbook.io/security-notes/notes/active-directory-pentesting/post-compromise-attacks/methodology.md) - [We've Compromised the Domain](https://ahmed-tarek.gitbook.io/security-notes/notes/active-directory-pentesting/weve-compromised-the-domain.md) - [Dumping the NTDS.dit](https://ahmed-tarek.gitbook.io/security-notes/notes/active-directory-pentesting/weve-compromised-the-domain/dumping-the-ntds.dit.md) - [Golden Ticket Attacks](https://ahmed-tarek.gitbook.io/security-notes/notes/active-directory-pentesting/weve-compromised-the-domain/golden-ticket-attacks.md) - [Methodology](https://ahmed-tarek.gitbook.io/security-notes/notes/active-directory-pentesting/weve-compromised-the-domain/methodology.md) - [Case Study](https://ahmed-tarek.gitbook.io/security-notes/notes/active-directory-pentesting/case-study.md) - [Password Attacks](https://ahmed-tarek.gitbook.io/security-notes/notes/active-directory-pentesting/password-attacks.md) - [API-Pen](https://ahmed-tarek.gitbook.io/security-notes/notes/api-pen.md) - [API Discovry](https://ahmed-tarek.gitbook.io/security-notes/notes/api-pen/api-discovry.md) - [Reverse Engineering API Documentation](https://ahmed-tarek.gitbook.io/security-notes/notes/api-pen/reverse-engineering-api-documentation.md) - [Excessive Data Exposure](https://ahmed-tarek.gitbook.io/security-notes/notes/api-pen/excessive-data-exposure.md) - [Vulnerability Scanning](https://ahmed-tarek.gitbook.io/security-notes/notes/api-pen/vulnerability-scanning.md) - [API Authentication Attacks](https://ahmed-tarek.gitbook.io/security-notes/notes/api-pen/api-authentication-attacks.md) - [Classic Authentication Attacks](https://ahmed-tarek.gitbook.io/security-notes/notes/api-pen/api-authentication-attacks/classic-authentication-attacks.md) - [API Token Attacks](https://ahmed-tarek.gitbook.io/security-notes/notes/api-pen/api-authentication-attacks/api-token-attacks.md) - [API Authorization Attacks](https://ahmed-tarek.gitbook.io/security-notes/notes/api-pen/api-authorization-attacks.md) - [Broken Object Level Authorization (BOLA)](https://ahmed-tarek.gitbook.io/security-notes/notes/api-pen/api-authorization-attacks/broken-object-level-authorization-bola.md): BOLA is all about accessing resources that do not belong to you - [Broken Function Level Authorization](https://ahmed-tarek.gitbook.io/security-notes/notes/api-pen/api-authorization-attacks/broken-function-level-authorization.md): Where BOLA is all about accessing resources that do not belong to you, BFLA is all about performing unauthorized actions - [Improper Assets Management](https://ahmed-tarek.gitbook.io/security-notes/notes/api-pen/improper-assets-management.md) - [Mass Assignment](https://ahmed-tarek.gitbook.io/security-notes/notes/api-pen/mass-assignment.md) - [SSRF](https://ahmed-tarek.gitbook.io/security-notes/notes/api-pen/ssrf.md) - [Injection Attacks in API](https://ahmed-tarek.gitbook.io/security-notes/notes/api-pen/injection-attacks-in-api.md) - [Evasive Maneuvers](https://ahmed-tarek.gitbook.io/security-notes/notes/api-pen/evasive-maneuvers.md) - [GraphQL Vulnerabilities](https://ahmed-tarek.gitbook.io/security-notes/notes/api-pen/graphql-vulnerabilities.md) - [Attack Vectors by Port](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port.md): A chill guide to what you can do with each open port - [FTP](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/ftp.md) - [SSH](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/ssh.md) - [Telnet](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/telnet.md) - [SMTP](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/smtp.md) - [DNS](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/dns.md) - [Kerberos](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/kerberos.md) - [POP3](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/pop3.md) - [NTP](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/ntp.md) - [NetBIOS](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/netbios.md) - [SMB](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/smb.md) - [MSRPC](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/msrpc.md) - [SNMP](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/snmp.md) - [LDAP](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/ldap.md) - [Modbus](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/modbus.md) - [Ms-SQL](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/ms-sql.md) - [Oracle Listener](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/oracle-listener.md) - [NFS](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/nfs.md) - [MySql](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/mysql.md) - [RDP](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/rdp.md) - [ADB Android Debug Bridge](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/adb-android-debug-bridge.md) - [WinRM](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/winrm.md) - [VNC](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/vnc.md) - [Redis](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/redis.md) - [IRC](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/irc.md) - [Tomcat 8080](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/tomcat-8080.md) - [MongoDB 27017](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/mongodb-27017.md) - [http](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/http.md) - [Docker](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/docker.md) - [Elasticsearch](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/elasticsearch.md) - [etcd](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/etcd.md) - [Grafana](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/grafana.md) - [IMAP](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/imap.md) - [ISCSI](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/iscsi.md) - [Jenkins](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/jenkins.md) - [Kafka](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/kafka.md) - [Kibana](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/kibana.md) - [LPD](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/lpd.md) - [Memcached](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/memcached.md) - [PostgreSQL](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/postgresql.md) - [RabbitMQ](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/rabbitmq.md) - [rpcbind](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/rpcbind.md) - [Rsync](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/rsync.md) - [RTSP](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/rtsp.md) - [Splunkd](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/splunkd.md) - [TACACS](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/tacacs.md) - [TFTP](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/tftp.md) - [WebDAV](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/webdav.md) - [WHOIS](https://ahmed-tarek.gitbook.io/security-notes/notes/attack-vectors-by-port/whois.md)