{"id":19001760,"url":"https://github.com/lucthienphong1120/aio-pentesting","last_synced_at":"2025-04-22T17:48:22.747Z","repository":{"id":61836770,"uuid":"550674379","full_name":"lucthienphong1120/AIO-Pentesting","owner":"lucthienphong1120","description":"All in one Pentest methodologies - Tools and commands | Where compiled all common materials for pentester","archived":false,"fork":false,"pushed_at":"2025-03-20T07:14:41.000Z","size":52282,"stargazers_count":33,"open_issues_count":0,"forks_count":10,"subscribers_count":3,"default_branch":"main","last_synced_at":"2025-04-16T08:07:07.756Z","etag":null,"topics":["all-in-one","cve","enumeration","exploitation","guide","hacker","hacking","library","methodology","nmap","oscp","oscp-cheatsheet","penetration-testing","pentest","pentest-tools","pentesting","privilege-escalation","reconnaissance","vulnerability"],"latest_commit_sha":null,"homepage":"","language":"PHP","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/lucthienphong1120.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2022-10-13T06:27:53.000Z","updated_at":"2025-04-08T19:56:05.000Z","dependencies_parsed_at":"2024-08-18T09:46:18.015Z","dependency_job_id":"f82a27fc-a1b6-4d7f-8d93-d92bceadddc4","html_url":"https://github.com/lucthienphong1120/AIO-Pentesting","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lucthienphong1120%2FAIO-Pentesting","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lucthienphong1120%2FAIO-Pentesting/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lucthienphong1120%2FAIO-Pentesting/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lucthienphong1120%2FAIO-Pentesting/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/lucthienphong1120","download_url":"https://codeload.github.com/lucthienphong1120/AIO-Pentesting/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":250290489,"owners_count":21406187,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["all-in-one","cve","enumeration","exploitation","guide","hacker","hacking","library","methodology","nmap","oscp","oscp-cheatsheet","penetration-testing","pentest","pentest-tools","pentesting","privilege-escalation","reconnaissance","vulnerability"],"created_at":"2024-11-08T18:12:42.539Z","updated_at":"2025-04-22T17:48:22.742Z","avatar_url":"https://github.com/lucthienphong1120.png","language":"PHP","funding_links":[],"categories":[],"sub_categories":[],"readme":"# AIO-Pentesting\n\n\u003e All in one Pentest methodologies - **Tools and commands**\n\u003e\n\u003e *Where compiled all common materials for pentester*\n\u003e\n\u003e :star: If you feel it helpful, please contribute, otherwise start it! :star:\n\nIn this material, I will divide it into 2 phases and an overview is listed after below:\n\n+ [Documents](./Documents):\n  - [0. Pentesting Stages](./Documents/0-Pentesting-Stages.md) :heavy_check_mark:\n  - [0. Forensics](./Documents/0-Forensics.md) :heavy_check_mark:\n  - [0. Cracking](./Documents/0-Cracking.md) :heavy_check_mark:\n  - [0. Sniffing](./Documents/0-Sniffing.md) :heavy_check_mark:\n  - [0. SQL Injection](./Documents/0-SQL-Injection.md) :heavy_check_mark:\n+ Pre-Intrusion phase:\n  - [1. Linux Pre Intrusion](./1-Linux-Pre-Intrusion.md) :heavy_check_mark:\n  - [3. Windows Pre Intrusion](./3-Windows-Pre-Intrusion.md) (In Progress) :x:\n+ Intrusion phase\n  - [2. Linux Intrusion](./2-Linux-Intrusion.md) :heavy_check_mark:\n  - [4. Windows Intrusion](./4-Windows-Intrusion.md) (In Progress) :x:\n+ Others:\n  - [OSCP-Notes](./OSCP-Notes/) :heavy_check_mark:\n  - [OSWE-Notes](./OSWE-Notes/) :heavy_check_mark:\n\n## Useful documents\n\n### CVE Databases\n\n1. [NVD (National Vulnerability Database)](https://nvd.nist.gov/vuln/full-listing)\n2. [Exploit-DB](https://exploit-db.com/)\n3. [CVE MITRE](https://cve.mitre.org/cve/)\n\n### OS binaries libraries\n\n1. [GTFOBins of Unix binaries](https://gtfobins.github.io/)\n2. [LOLBAS of Windows binaries](https://lolbas-project.github.io/)\n\n### Pentest Active Directory\n\nRef: [esidate/pentesting-active-directory](https://github.com/esidate/pentesting-active-directory)\n\n### Build-in shell \u0026 wordlist\n\n```sh\ntree /usr/share/webshells/\n├── asp\n│   ├── cmd-asp-5.1.asp\n│   └── cmdasp.asp\n├── aspx\n│   └── cmdasp.aspx\n├── cfm\n│   └── cfexec.cfm\n├── jsp\n│   ├── cmdjsp.jsp\n│   └── jsp-reverse.jsp\n├── laudanum -\u003e /usr/share/laudanum\n├── perl\n│   ├── perlcmd.cgi\n│   └── perl-reverse-shell.pl\n└── php\n    ├── findsocket\n    │   ├── findsock.c\n    │   └── php-findsock-shell.php\n    ├── php-backdoor.php\n    ├── php-reverse-shell.php\n    ├── qsd-php-backdoor.php\n    └── simple-backdoor.php\n```\n\n```sh\ntree /usr/share/wordlists/\n├── dirb -\u003e /usr/share/dirb/wordlists\n├── dirbuster -\u003e /usr/share/dirbuster/wordlists\n├── dnsmap.txt -\u003e /usr/share/dnsmap/wordlist_TLAs.txt\n├── fasttrack.txt -\u003e /usr/share/set/src/fasttrack/wordlist.txt\n├── fern-wifi -\u003e /usr/share/fern-wifi-cracker/extras/wordlists\n├── metasploit -\u003e /usr/share/metasploit-framework/data/wordlists\n├── nmap.lst -\u003e /usr/share/nmap/nselib/data/passwords.lst\n├── rockyou.txt\n└── wfuzz -\u003e /usr/share/wfuzz/wordlist\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flucthienphong1120%2Faio-pentesting","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Flucthienphong1120%2Faio-pentesting","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flucthienphong1120%2Faio-pentesting/lists"}