Great PTP/eCPPTv2 external resources

[Z3r0n37]

Here you can find useful resources for the PTP course! In general, the course materials and the labs are enough.
If you have extra resources reply to this post with the links! I’ll add them ASAP.

Cheatsheets

• eCPPT NETWORK SECURITY*DNS Enumerationnslookup example.comnslookup -query=m - Pastebin.com
• pentest-notes/OSCP-Survival-Guide.md at master · wwong99/pentest-notes · GitHub
• Hack All The Things - HackAllTheThings
• PayloadsAllTheThings/Bind Shell Cheatsheet.md at master · swisskyrepo/PayloadsAllTheThings · GitHub
• Notion – The all-in-one workspace for your notes, tasks, wikis, and databases. (Great cheatsheets from Nickapic)
• eCPPT_FieldManual.pdf - Google Drive
• Reverse Shell Cheat Sheet | pentestmonkey (Cresits: @thecyberguy007)

Buffer Overflows

• GitHub - freddiebarrsmith/Buffer-Overflow-Exploit-Development-Practice: Good For OSCP Training
• Buffer Overflows Made Easy - YouTube (Cresits: @thecyberguy007)

Articles

• Blog
• A Red Teamer's guide to pivoting
• Nessus Through SOCKS Through Meterpreter - DigiNinja
• Ethical Hacking Notes
• Pivoting with Chisel | Ap3x Security
• Explore Hidden Networks With Double Pivoting – Pentest Blog
• Nessus Through SOCKS Through Meterpreter - DigiNinja

Tools

• GitHub - jpillora/chisel: A fast TCP/UDP tunnel over HTTP
• GitHub - Orange-Cyberdefense/arsenal: Arsenal is just a quick inventory and launcher for hacking programs
• GitHub - cddmp/enum4linux-ng: A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.
• https://www.revshells.com/ (credit: @jaa)
• GitHub - cloudflare/flan: A pretty sweet vulnerability scanner (credit: @AWilson)

External Labs

The course labs are enough for the exam, but I would suggest proving your skills in these labs!

• Offensive Pentesting path from TryHackMe
• TryHackMe | Gatekeeper (Credits to TheMayor)

Misc

• Notion – The all-in-one workspace for your notes, tasks, wikis, and databases.

[jaa]

So here is what i found,
If anyone is too lazy to create the reverse shell by themselves? , Then take a look at this online reverse shell generator https://www.revshells.com/
#helpful #cyber-security #resources

[Z3r0n37]

Great site! I used it a couple of times haha, added it! (with credits, obv )

Update: Just realized I can’t modify the post anymore… maybe a mod can help me with this?

[jaa]

@Z3r0n37 This community is built on Discourse platform. Based on activity and contribution, your access level will eventually gets incremented and you gets additional account features such as editing your posts, undoing deleted posts etc.

[AWilson]

great post, for the eCPPT I also recommend using a tool like FlanScan or the nmap vulners script instead of utilizing Nessus as recommended in the course materials. For some reason Nessus was a real pain to get running, so if you are looking to add that finishing touch to the report with a vuln scan I recommend checking this out GitHub - cloudflare/flan: A pretty sweet vulnerability scanner

[Z3r0n37]

Thanks for sharing this tool! I just added it to the list with the proper credits!

[thecyberguy007]

Although for buffer overflows concept, the eCPPT material is good, but if we need an alternative source for understanding we can use cyber mentor’s YouTube page for buffer overflow - Buffer Overflows Made Easy - YouTube.

Also, for Reverse-shell cheat sheet: Reverse Shell Cheat Sheet | pentestmonkey. It is good collection source for all commands to get reverse-shell

[Z3r0n37]

Thanks! Sites added with credits!

[paris.vicente-d953ed]

I’m at the beginning stage of the PPT, so all the help is welcomed.
If I find something that isn’t here I’ll share it.
Thank you guys for sharing.