# 4PFSEC

## 4PFSEC

- [Welcome!](https://repo.4pfsec.com/master.md): Welcome to 4pfsec's repo where you'll find all things Cybersecurity & Penetration Testing!!
- [Remote Buffer Overflow](https://repo.4pfsec.com/buffer-overflow/remote-buffer-overflow.md): This subsection would cover the exploitation of Stack Based Remote Buffer Overflows
- [Crashing the Application](https://repo.4pfsec.com/buffer-overflow/remote-buffer-overflow/crashing-the-application.md): In order to exploit the target application, we need to crash the application and be able to overwrite the EIP with our own values.
- [Controlling the EIP](https://repo.4pfsec.com/buffer-overflow/remote-buffer-overflow/controlling-the-eip.md): To take control of the EIP, we first need to locate the EIP’s exact position in the buffer of 600. To do this we will make use of a tool called “msf-pattern\_create”.
- [Finding Bad Characters](https://repo.4pfsec.com/buffer-overflow/remote-buffer-overflow/finding-bad-characters.md): We need to be warry of bad characters and pick them out so that our payload doesn't contain any characters that might cause our exploit to fail.
- [Finding a Return Address](https://repo.4pfsec.com/buffer-overflow/remote-buffer-overflow/finding-a-return-address.md): This Return Address would be written in the EIP and used to direct the application to where our payload will be located! Mona.py would be used for this as well.
- [Generating Shellcode](https://repo.4pfsec.com/buffer-overflow/remote-buffer-overflow/generating-shellcode.md): This is the most crucial step as it decides whether we get a shell!
- [Getting a Shell](https://repo.4pfsec.com/buffer-overflow/remote-buffer-overflow/getting-a-shell.md): With some final modification to the POC, a shell will be obtained.
- [Wifi Pineapple - Tetra](https://repo.4pfsec.com/wireless-penetration-testing/wifi-pineapple-tetra.md)
- [Setup](https://repo.4pfsec.com/wireless-penetration-testing/wifi-pineapple-tetra/setup.md): This subsection covers the setup process of the Tetra.
- [Firmware Upgrade](https://repo.4pfsec.com/wireless-penetration-testing/wifi-pineapple-tetra/firmware-upgrade.md): This subsection covers the firmware update process of the Tetra.
- [Capturing Wireless Handshake](https://repo.4pfsec.com/wireless-penetration-testing/wifi-pineapple-tetra/capturing-wireless-handshake.md): This section covers how a wireless handshake can be captured via the deauth method
- [Cracking WPA2 Handshake](https://repo.4pfsec.com/wireless-penetration-testing/wifi-pineapple-tetra/cracking-wpa2-handshake.md): This section will cover how to crack a WPA2 handshakes captured with the previously showcased attack vector
- [PineAP](https://repo.4pfsec.com/wireless-penetration-testing/wifi-pineapple-tetra/pineap.md): This section contains information on PineAP and how it can be used
- [Modules](https://repo.4pfsec.com/wireless-penetration-testing/wifi-pineapple-tetra/modules.md): This section contains information about community modules that can be used on top of the PineAP Attack
- [Authentication](https://repo.4pfsec.com/portswigger-labs/authentication.md): https://portswigger.net/web-security/authentication
- [Username enumeration via different responses](https://repo.4pfsec.com/portswigger-labs/authentication/username-enumeration-via-different-responses.md): This lab is vulnerable to username enumeration and password brute-force attacks.
- [Username enumeration via subtly different responses](https://repo.4pfsec.com/portswigger-labs/authentication/username-enumeration-via-subtly-different-responses.md): This lab is subtly vulnerable to username enumeration and password brute-force attacks.
- [Username enumeration via response timing](https://repo.4pfsec.com/portswigger-labs/authentication/username-enumeration-via-response-timing.md): This lab is vulnerable to username enumeration using its response times.
- [Advent of Cyber 3 (2021)](https://repo.4pfsec.com/tryhackme/advent-of-cyber-3-2021.md): 25 days of cyber security leading up to Christmas!
- [\[Day 1\] Save The Gifts](https://repo.4pfsec.com/tryhackme/advent-of-cyber-3-2021/day-1-save-the-gifts.md): {Web Exploitation = Insecure Direct Object Reference vulnerability}
- [\[Day 2\] Elf HR Problems](https://repo.4pfsec.com/tryhackme/advent-of-cyber-3-2021/day-2-elf-hr-problems.md): {Web Exploitation = Cookie Manipulation}
- [\[Day 3\] Christmas Blackout](https://repo.4pfsec.com/tryhackme/advent-of-cyber-3-2021/day-3-christmas-blackout.md): {Web Exploitation = Content Discovery}
- [\[Day 4\] Santa's Running Behind](https://repo.4pfsec.com/tryhackme/advent-of-cyber-3-2021/day-4-santas-running-behind.md): {Web Exploitation = Fuzzing}
- [\[Day 5\] Pesky Elf Forum](https://repo.4pfsec.com/tryhackme/advent-of-cyber-3-2021/day-5-pesky-elf-forum.md): {Web Exploitation = XSS}
- [\[Day 6\]  Patch Management Is Hard](https://repo.4pfsec.com/tryhackme/advent-of-cyber-3-2021/day-6-patch-management-is-hard.md): {Web Exploitation = LFI}
- [\[Day 7\] Migration Without Security](https://repo.4pfsec.com/tryhackme/advent-of-cyber-3-2021/day-7-migration-without-security.md): {Web Exploitation = NoSQLi}
- [\[Day 8\] Santa's Bag of Toys](https://repo.4pfsec.com/tryhackme/advent-of-cyber-3-2021/day-8-santas-bag-of-toys.md): {Incident response = PowerShell Transcription Logs}
- [\[Day 9\] Where Is All This Data Going](https://repo.4pfsec.com/tryhackme/advent-of-cyber-3-2021/day-9-where-is-all-this-data-going.md): {Network Forensics}
- [Cloud Computing Fundamentals](https://repo.4pfsec.com/google-cloud-computing/cloud-computing-fundamentals.md): The Google Cloud Computing Foundations courses provide an overview of concepts central to cloud basics, big data, and machine learning, and where and how Google Cloud fits in.
- [Getting Started with Cloud Shell and gcloud](https://repo.4pfsec.com/google-cloud-computing/cloud-computing-fundamentals/getting-started-with-cloud-shell-and-gcloud.md): LAB 1
- [Creating a Virtual Machine](https://repo.4pfsec.com/google-cloud-computing/cloud-computing-fundamentals/creating-a-virtual-machine.md): LAB 2
- [App Engine: Qwik Start - Python](https://repo.4pfsec.com/google-cloud-computing/cloud-computing-fundamentals/app-engine-qwik-start-python.md): LAB 3
- [Cloud Functions: Qwik Start - Command Line](https://repo.4pfsec.com/google-cloud-computing/cloud-computing-fundamentals/cloud-functions-qwik-start-command-line.md): LAB 4
- [Kubernetes Engine: Qwik Start](https://repo.4pfsec.com/google-cloud-computing/cloud-computing-fundamentals/kubernetes-engine-qwik-start.md): LAB 5
- [Set Up Network and HTTP Load Balancers](https://repo.4pfsec.com/google-cloud-computing/cloud-computing-fundamentals/set-up-network-and-http-load-balancers.md): LAB 6