📓 Jorkle's Notes

      • Breached Credentials Cheatsheet
      • directory-traversal
      • DNS Enumeration Cheatsheet
      • Internal Network Initial Access Cheatsheet
      • Linux Privilege Escalation Cheatsheet
      • People OSINT Cheatsheet
      • PowerView Cheatsheet
      • Search Engine OSINT Cheatsheet
      • SMB Enumeration Cheatsheet
      • ASREP Roasting
      • CONCEPT - What is DSRM?
      • Kerberos Authentication
      • kerberos-delegation
      • SCCM Knowledge for Pentesting Interviews
      • SCCM/MECM Basics
      • What is a Golden Ticket Attack?
              • WiFi (DoS) Deauthentication Attack
        • Foundations
        • IntelTechniques Search Tools
        • Am I Inside of a Docker Container?
        • ASREP Roasting
        • ASREQ-Roasting
        • Coercion to ADCS ESC8 Compromise
        • constrained-delegation
        • DCSYNC with SafetyKatz
        • Diamond Ticket
        • Discover Birthdays
        • Discover SMB Shares remotely
        • Discover Systems Recently Accessed By Compromised Machine
        • Download File With LOLBAS
        • Dump and Crack Kerberos Keys
        • Dump and Crack Kerberos Keys
        • Dump Domain Cached Credentials
        • Dump Google Chrome Passwords
        • Dump LSA Secrets
        • Dump LSASS Logon Passwords
        • Dump NTDS.dit
        • Dump PXE Passwords from Windows (No PXE Password Protection)
        • Dump SAM Database
        • Dump SAM Database from VM Virtual Hard Disk (VHD/VMDK)
        • Dump Windows Credential Manager
        • Enumerate Domain Shares
        • Enumerate OS Name and Version on Linux
        • Enumerate SCCM (MECM) using LDAP
        • Enumerate SMB Version
        • Enumerate Users and Groups via SMB
        • Enumerate Users using Kerberos
        • Enumerate Users With Kerberos PREAUTH Not Enabled
        • Enumerate Windows Firewall Configuration
        • Fetch Powershell History
        • Find Annual Company Reports
        • Find Company Information using CrunchBase
        • Find Interesting Files on Linux
        • Gather Company Email Addresses
        • Golden Ticket
        • Host Discovery
        • How to use PSRemoting with Enter-PSSession
        • Identify Domain Controllers
        • Identify if SCCM (MECM) is Present
        • Internal Port Scanning
        • kerberoasting
        • Kerberos Unconstrained Delegation
        • Load Powershell Scripts and Modules
        • Logon Script Persistence
        • mitm6-poisoning
        • Null/Anon & Guest SMB Auth
        • Obfuscate Powershell Scripts and Modules
        • Organization OSINT via SEC.GOV Edgar Filings
        • Over Pass The Hash
        • Persistence using DSRM Password
        • run-and-run-once-persistence
        • SCCM Computer Account SMB Relay Coercion to MSSQL Server Admi
        • Scheduled Task (Elevated) Persistence
        • Scheduled Task (Non Elevated) Persistence
        • Silver Ticket
        • Skeleton Key
        • SMB Relaying
        • Time Roasting
        • Windows Service Elevated Persistence
    Home

    ❯

    Cheatsheets

    Cheatsheets

    Dec 15, 20251 min read

    Map of Content

    Finding Breached Credentials Hunting Usernames Internal Network Initial Access Linux Privilege Escalation PowerView Search Engine OSINT SMB Enumeration Windows Persistence Windows Privilege Escalation


    Graph View

    Backlinks

    • Jorkle Notes - Home
    • Blog
    • Contact
    • Gitrub
    • Linkedin