[Johnny]

A almost complete set of pdf to learn hacking, android, linux, windows, antivirus, burpsuite, cerberus, ddos attacks, pentest, mitre, xss and a lot of content! I found this very useful and complete for analysis and exploit

It will take a lot to read everything.

Suggested, for both advanced and beginners

Hidden Content

You must register or login to view this content.

[Johnny]

I would say it is, this is for cerberus for example:

Executive Summary............................................................................................................................................................ .
Introduction...............................................................................................................................................................1
Cerberus Developers and Their Operation .................................................................................................................2
Cerberus Clients and Their Operations.......................................................................................................................4
Evolution of Cerberus Malware..................................................................................................................................5
Technical Analysis......................................................................................................................................................7
Anti-Analysis Techniques.......................................................................................................................................7
Persistence ............................................................................................................................................................7
Gaining Accessibility Permission ..........................................................................................................................12
Abusing Accessibility............................................................................................................................................14
What We Know About The Command & Control Server.......................................................................................17
Gathering Device Information..............................................................................................................................20
Downloaded Module ...........................................................................................................................................22
Remote Control ...................................................................................................................................................22
Grabber...............................................................................................................................................................24
Dialer - SMS Interception.....................................................................................................................................25
Remote App Removal and Self Destruction..........................................................................................................27
Mitigation and Countermeasures.............................................................................................................................28
Future of Cerberus...................................................................................................................................................29
Sources....................................................................................................................................................................30
Appendix.A – Count of Detected Cerberus - Daily.............................................................................................................31
Appendix.B – Known Injection List ...................................................................................................................................32
Appendix.C – IoC Table.....................................................................................................................................................34
Appendix.D – Turkish Banks Injection Overlays................................................................................................................36

This is another file:

TABLE OF CONTENTS
Intro
Required Software
Core Hash Cracking Knowledge
Cracking Methodology
Basic Cracking Playbook
Cheat Sheets
Extract Hashes
Password Analysis
Dictionary / Wordlist
Rules & Masks
Foreign Character Sets
Advanced Attacks
Cracking Concepts
Common Hash Examples
Appendix
-Terms
-Online Resources
-John The Ripper Men

another one:

Table of Contents
Preface 1
Section 1: The Basics
Chapter 1: Introduction to Penetration Testing 8
Technical requirements 8
What is penetration testing? 9
Stages of a penetration test 10
Pre-engagement 11
Scoping 11
Timelines 12
Dealing with third parties 12
Payment 13
Your "get out of jail free card" 13
Intelligence gathering 14
Threat modeling 14
Vulnerability analysis 15
Exploitation 15
Post-exploitation 15
Reporting 16
Executive summary 16
Technical report 17
Getting started with your lab 18
Creating virtual machines in VMware, Hyper-V, and VirtualBox 20
Microsoft Hyper-V 20
VMware 23
VirtualBox 23
Target machines 23
Metasploitable 24
Summary 25
Questions 26
Chapter 2: Getting Started with Kali Linux 27
Technical requirements 28
An introduction to Kali Linux 28
Installing and configuring Kali Linux 32
Installation 32
Installing Kali Linux on macOS 33
Installing Kali Linux using the Windows Subsystem for Linux (WSL) 38
Installing Kali Linux using VirtualBox 41
Configuring Kali Linux 42
Table of Contents
[ ii ]
Basic commands in Kali Linux 48
Scripting in Kali Linux 49
The essential tools of Kali Linux 50
Nmap 51
Aircrack-ng 51
John the Ripper (JTR) and Hydra 52
SET 52
Burp Suite 53
Summary 53
Questions 54
Section 2: Exploitation
Chapter 3: Performing Information Gathering 56
Technical requirements 57
Passive information gathering 57
Using the internet 58
Google dorks 58
Shodan 61
Shodan scripting 62
Using Kali Linux 65
Maltego 65
Active information gathering 68
Nmap 69
Vulnerability scanning 74
OpenVAS 74
Nessus 79
Capturing traffic 86
Wireshark 86
tcpdump 91
Summary 92
Questions 92
Chapter 4: Mastering Social Engineering 93
Technical requirements 93
What is social engineering? 94
Pretexting 95
Phishing 96
Spear phishing 97
Tailgating 98
Social engineering tools 98
The social engineering toolkit (SET) 98
Gophish 100
Modlishka 101
Wifiphisher 102
Creating a social engineering campaign 103
Table of Contents
[ iii ]
Installing Modlishka 103
Executing the attack 108
Using SET to create a phishing campaign 110
Summary 112
Questions 112
Chapter 5: Diving into the Metasploit Framework 113
Technical requirements 113
Introducing Metasploit 114
Updating the Metasploit Framework 115
Linking the Metasploit Framework to a database 116
Enhancing your experience within Metasploit 120
Using Metasploit to exploit a remote target 123
Finding modules 125
Exploit-DB 125
Rapid7 exploit database 126
0day.today 128
Adding modules 128
Metasploit options, shells, and payloads 130
Options 130
Shells 131
Payloads 131
Working with MSFvenom 135
Summary 137
Questions 138
Chapter 6: Understanding Password Attacks 139
Technical requirements 139
Introduction to password attacks 140
Working with wordlists 141
Password profiling 143
Password mutation 146
Offline password attacks 148
John the Ripper 150
Hashcat 153
Online password attacks 155
Hydra 155
Medusa 157
Ncrack 159
Dumping passwords from memory 162
Summary 167
Questions 167
Chapter 7: Working with Burp Suite 168
Technical requirements 168
Table of Contents
[ iv ]
Understanding Burp Suite 169
Preparing your environment 170
Installing Burp Suite Professional 170
Setting up OWASP BWA 171
Configuring your browser 174
Exploring and configuring Burp Suite components 175
Burp Suite tools 176
Proxy 177
Target 181
Scanner 183
Repeater 186
Intruder 190
Sequencer 196
Decoder 201
Comparer 201
Extender 204
Summary 205
Questions 205
Chapter 8: Attacking Web Applications 206
Technical requirements 207
Preparing your environment 207
Types of web application security testing 207
The components of a web application 208
Web application architecture 208
Web application languages 209
Python 209
Ruby 210
Java 211
Understanding the HTTP protocol 212
HTTP requests and responses 213
Common web application attacks 215
Inclusion attacks (LFI/RFI) 215
Cross-Site Request Forgery (CSRF) 215
Cross-site scripting (XSS) 216
SQL injection (SQLi) 217
Command execution 218
Attacking web applications 218
Nikto 218
Using Sqlmap 219
Performing attacks using Sqlmap 219
Information gathering 220
Dumping user details from SQL tables 224
Creating a backdoor using PHP 227
Performing XSS attacks 230
Performing a reflective XSS attack 230
Performing a stored XSS attack 233
Table of Contents
[ v ]
Performing a file inclusion attack 234
Performing a command execution attack 236
Summary 243
Questions 243
Chapter 9: Getting Started with Wireless Attacks 244
Technical requirements 245
Exploring wireless attacks 245
Wireless network architecture 245
Wireless frames 246
Notable wireless frames 247
Wireless security protocols 249
WEP 250
WPA 250
Wi-Fi Protected Access version 2 (WPA2) 251
Wi-Fi Protected Access version 3 (WPA3) 251
Types of wireless attacks 252
Compatible hardware 253
Wireless adapters 254
Wireless attack tools 256
Wifiphisher 257
Aircrack-ng suite 259
Airmon-ng 260
Airodump-ng 261
Aireplay-ng 263
Airgeddon 265
The Evil Twin attack 268
Cracking WEP, WPA, and WPA2 272
Cracking WPA/WPA2 273
Cracking WEP 275
Summary 279
Questions 279
Section 3: Post Exploitation
Chapter 10: Moving Laterally and Escalating Your Privileges 281
Technical requirements 281
Discovering post-exploitation techniques 282
Lateral movement 282
Privilege escalation 283
Pivoting 283
Preparing your environment 284
Post-exploitation tools 288
Metasploit Framework 288
Metasploit post modules 288
Empire 291
Responder 296
Table of Contents
[ vi ]
Mimikatz 299
Performing post-exploitation attacks 300
Performing credential harvesting 301
Performing Overpass-the-Hash 305
Performing lateral movement 310
Performing a Pass-the-Ticket attack 312
Summary 314
Questions 315
Chapter 11: Antivirus Evasion 316
Technical requirements 316
The evolution of antivirus technologies 317
Out with the old 317
In with the new 317
Concepts of antivirus evasion 318
Antivirus evasion techniques 319
Encoders 319
Custom compiling 319
Obfuscation 319
Getting started with antivirus evasion 320
MSFvenom 320
Veil Evasion 322
TheFatRat 329
Custom compiling 333
Testing evasion techniques 335
VirusTotal 335
Summary 338
Questions 338
Chapter 12: Maintaining Control within the Environment 339
Technical requirements 339
The importance of maintaining access 340
Techniques used to maintain access 340
Backdoor 341
C2 341
Linux cron jobs 341
Living off the land 341
Using tools for persistence 342
The Metasploit Framework 342
Empire 346
Summary 349
Questions 349
Section 4: Section 4: Putting It All Together
Chapter 13: Reporting and Acting on Your Findings 351
Table of Contents
[ vii ]
Technical requirements 351
The importance of a penetration testing report 352
What goes into a penetration test report? 352
Cover page 353
Executive summary 353
Background 353
Overall posture 353
Risk ranking 353
General findings 355
Strategic roadmap 355
Technical report 355
Tools used 356
Information gathering 356
Vulnerability assessment and exploitation 357
Post-exploitation 358
Conclusion 359
Tools for report writing 359
Methodologies 360
Nodes 362
Issues and evidence 364
Recommending remediation options 366
Information gathering 366
Social engineering 366
Vulnerabilities and OS hardening 367
Passwords 368
Web applications 369
Privilege escalation and lateral movement 369
Summary 370
Questions 370
Chapter 14: Where Do I Go from Here? 371
Technical requirements 371
Knowledge maintenance 371
Network penetration testing 372
Wireless penetration testing 373
Web application penetration testing 373
Online training 374
Cybrary 374
Pentester Academy 374
Pentesterlab 374
Certifications 375
eLearnSecurity 375
Offensive security 376
Global Information Assurance Certifications (GIACs) 376
Toolkit maintenance 376
Purposefully vulnerable resources 377
Vulnhub



And you have a GB of file like this

[heimda7]

Is it possible for this to be shared on a new site - I just wasted credits on this given the resource is shared on anonfiles

[Johnny]

Hi all, I'll upload this again in few days, I'll update here so you can download it again

thanks

[Yaddmin]

ThankYou @Johnny 
 The title is very attractive so, 
I would kindly take a look at those Guides..
with the hope to find something new and interesting
 to read before I go to sleep 
<3

[pine]

The link in this thread is dead. Please reply to the PM you were sent to get your thread moved back to the Databases section.