links and stuff

lolbins its a thing

• https://www.sentinelone.com/blog/how-do-attackers-use-lolbins-in-fileless-attacks/?utm_source=gdn-paid&utm_medium=paid-display&utm_campaign=nam-pmax-epp-edr-ppc-xdr&utm_term=&campaign_id=19502097988&ad_id=&gclid=CjwKCAjwmbqoBhAgEiwACIjzEAYlzFb3gEx14kUuY2_-GErhGdVJ8UKt92jcuhNqWAmRWRlK2s6BWBoCQKwQAvD_BwE

• https://lolbas-project.github.io/

online xif data stuff

• https://jimpl.com/

stings

• https://github.com/mandiant/flare-floss

Web Discovery manual

• robots.txt – What not to look at
• sitemap.xml – what do we want looked at SEO

linux for rev eng

https://remnux.org/ All the cool kids are using this now :)

• The docs are really good on tihs one. So many from Didier (Sans)

Favicon DB —

• Pass the favicon.ico into md5 and then lookup vendor here
• https://wiki.owasp.org/index.php/OWASP_favicon_database

Might help to know a framework.

Priv esc

• https://github.com/carlospolop/PEASS-ng/tree/master/linPEAS - this is the stuff

SetUID setGID uses

https://gtfobins.github.io/

Crypto help

• https://quipqiup.com/
• https://www.dcode.fr/en
• cyberchef

Recon

• https://www.wappalyzer.com/
• https://wiki.owasp.org/index.php/OWASP_favicon_database - favicon db just do the md5 thing on a .ico file to check

nmap docs

• https://nmap.org/nsedoc/

ip location services online

• https://www.ipfingerprints.com/

wordlists / etc

• https://github.com/danielmiessler/SecLists - danielmiessler