b3nj1-1

• https://github.com/tokyoneon/CredPhish
• https://github.com/m4ll0k/Atlas/blob/master/atlas.py
• https://github.com/FluxionNetwork/fluxion/wiki/Handshake-Snooper-Attack

Evil Twin

NOTA: Asignar ip a la tarjeta de red ifconfig wlan0 10.0.0.1 netmask 255.255.255.0

Colocar la tarjeta en modo monitor:

b3nj1-1

Reto Web para entrar

Exploit:

#!/usr/bin/python

import sys

import threading

b3nj1-1

Resource Lab docker

vulhub/vulhub: Pre-Built Vulnerable Environments Based on Docker-Compose (github.com)

Reverse Shell

https://github.com/xct/xc - A small reverse shell for Linux & Windows

https://github.com/cytopia/pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)

https://github.com/Kudaes/LOLBITS - C# reverse shell using Background Intelligent Transfer Service (BITS) as communication protocol and direct syscalls for EDR user-mode hooking evasion.

b3nj1-1

XSS https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xss.md https://github.com/ismailtasdelen/xss-payload-list https://portswigger.net/web-security/xxe https://portswigger.net/web-security/xxe/xml-entities https://portswigger.net/web-security/xxe/blind

https://comocreartuweb.com/herramientas-utiles/redireccionar-paginas/enmascarar-urls-enlaces.html

b3nj1-1

Firefox

-HackBar
-Cookies Manager+
-User-Agent Switcher
-Tamper Data
-FoxyProxy Standard
-Wappalyzer
-HttpRequester

b3nj1-1

-contained.af
-cryptohack.org
-0x00sec.org
-hack.me
-chall.stypr.com
-crackmes.one
-hackxor.net
-tryhackme.com

b3nj1-1

b3nj1-1

There are lot of C2 frameworks to choose from and there is no clear winner between them. Some popular choices are:

• Cobalt strike (commercial)
• Metasploit (free and commercial)
• SharpC2 (Open source) SharpC2 (github.com)
• SilentTrinity (Open source)
• Koadic (Open source)
• PowerShell Empire (Open source)

b3nj1-1

Hardening List

decalage2/awesome-security-hardening: A collection of awesome security hardening guides, tools and other resources (github.com)

b3nj1-1

Adaptadores wifi

Alfa AWUS036NEH 
Panda PAU05 
Alfa AWUS036ACH 
Sabrent NT-WGHU 
Alfa AWUS036H 
Alfa AWUS036NH 
Alfa AWUS036NHA