Table of contents 📕 The Red Book 🦳 Stages of Ethical Hacking 1️⃣ Information Gathering Active Information Gathering DNS Zone Transfers NMAP netdiscover sqlMap Nikto Shodan RustScan Amass fping Passive Information Gathering Website Recon & Footprinting Whois Enumeration Netcraft ⭐ DNS Identify if site is protected by firewall or proxy - wafw00f Subdomain Enumeration - Sublist3r ❌ theHarvester (borked) Email gathering Leaked Password Databases Certificates 2️⃣ Enumeration SMB Windows discover & Mount NMAP Scripts SMBMap Samba with Linux Dictionary Attack FTP SSH HTTP Subdomain IIS Apache SQL 3️⃣ Vulnerability Assessment Nessus 💾 System/Host Based Attacks 🪟 Windows Frequently exploited Windows Services 🐧 Linux 🥽 Dorks Google Cheatsheet Examples Extra 🎣 Phishing Gophish evilgophish King Phisher EvilURL 🔎 OSINT Temporary links 👾 Data exfiltration Temporary links 🐝 OWASP Top10 📙 Cheat Sheet Curl