PRACTITIONER – JWT authentication bypass via weak signing key

Network File System (NFS) is a protocol that allows file sharing across networks. Misconfigured NFS shares can expose sensitive data or allow unauthorized access, making them a valuable target in penetration testing. This cheat sheet covers enumeration, exploitation techniques, and privilege escalation strategies. 1. Enumerating NFS Shares Checking for NFS… Continue ⇢

Microsoft SQL Server (MSSQL) is a common target in penetration testing due to misconfigurations, weak credentials, and privilege escalation opportunities. This cheat sheet provides enumeration techniques, privilege escalation methods, and exploitation tactics useful for pentesters and red teamers. 1. Connecting to MSSQL Using sqsh (Linux) Connects to an MSSQL server… Continue ⇢

MySQL is one of the most widely used relational database management systems. Security misconfigurations and weak credentials can expose databases to attacks, making it a valuable target in pentesting engagements. This cheat sheet covers enumeration, exploitation techniques, and privilege escalation strategies for MySQL. 1. Basic MySQL Enumeration Connecting to MySQL… Continue ⇢

Pivoting is a crucial technique in penetration testing and red teaming that allows attackers to move laterally through a compromised network. This involves routing traffic through an intermediate machine to reach internal systems that are otherwise inaccessible. Understanding and properly using pivoting techniques enables deeper access into a target environment.… Continue ⇢

Secure Shell (SSH) is a widely used protocol for secure remote access to systems. While SSH is designed for security, misconfigurations and weak credentials can make it vulnerable to attacks. This cheat sheet covers enumeration, authentication attacks, exploitation, and post-exploitation techniques relevant to penetration testers. 1. Service Enumeration Identify SSH… Continue ⇢

The Server Message Block (SMB) protocol is used for file sharing, printer sharing, and network communication in Windows environments. It operates primarily over TCP ports 139 and 445. Misconfigured SMB services are a common attack vector in penetration testing. This cheat sheet covers enumeration, exploitation, post-exploitation techniques, and mitigation strategies… Continue ⇢