Howlsec
HOWLSEC
offensive security
// knowledge base

Notes

Loading… synced live from Notion. Use the sidebar to browse the tree or search across every note.

recently updated
    browse by category

    01Recon & Enumeration

    3 notes

    Host discovery, port scans, general recon — always start here.

      02Service Enumeration

      10 notes

      Per-service deep dives — FTP (21), SSH (22), Telnet (23), SMTP (25/465/587), DNS (53), TFTP (69), Finger (79), Kerberos (88), POP3 (110/995), RPC/Portmap (111), MSRPC (135), NetBIOS (137/138), IMAP (143/993), SNMP (161/162), LDAP (389/636), HTTPS (443), SMB (139/445), IPMI (623), Rsync (873), MSSQL (1433), Oracle TNS (1521), NFS (2049), Docker API (2375/2376), MySQL (3306), RDP (3389), PostgreSQL (5432), WinRM (5985/5986), VNC (5900), X11 (6000), Redis (6379), IRC (6667), CouchDB (5984), Elasticsearch (9200), Memcached (11211), MongoDB (27017).

      📁FTPport 211
      ✉️SMTPport 25 / 465 / 5871
      🔒HTTPSport 4432
      🗄️MSSQLport 14331
      📡Other Servicesport —5

      03Web Exploitation

      26 notes

      OWASP Top 10 in practice — SQLi, XSS, SSRF, LFI/RFI, XXE, IDOR, SSTI, command/file-upload, auth bypass, JWT/OAuth, API/GraphQL, deserialization, path traversal, CMS (WordPress/Drupal/Joomla), WebDAV, and app-server bugs (Tomcat, IIS, Jenkins, Spring, Log4j).

        04Password Attacks

        2 notes

        Hash cracking, wordlists, spraying, brute force, credential re-use.

          06Shells & File Transfers

          2 notes

          Reverse/bind shells, TTY upgrades, file-transfer tricks, webshells.

            07PrivEsc — Linux

            42 notes

            Sudo, SUID, capabilities, cron, kernel, GTFOBins, LinPEAS.

              08PrivEsc — Windows

              38 notes

              WinPEAS, token abuse, service misconfig, UAC bypass, potato family.

                09Active Directory

                49 notes

                AD attack paths, Kerberos, BloodHound, ACLs, trusts, DCSync/DCShadow.

                  10Pivoting & Tunneling

                  29 notes

                  Port forwarding, SOCKS, chisel, ligolo, proxychains, SSH tunnels.

                    13Report & Methodology

                    3 notes

                    Exam report template, methodology, mental models, checklists.

                      99Misc

                      9 notes

                      Notes that didn't match any category yet. Rename them or add keywords.