# Ethical Hacking Notes ## 1.0.0 (EN) - [Ethical Hacking Notes](https://tzero86.gitbook.io/tzero86/master.md): ⛔ All the content demonstrated in this compendium of writings is exclusively for the study of ethical hacking. - [Footprinting with Recon-NG](https://tzero86.gitbook.io/tzero86/footprinting-and-reconnaissance/untitled-1.md): In this lab we will see how to use recon-ng to perform footprinting of a target. - [Footprinting with Maltego](https://tzero86.gitbook.io/tzero86/footprinting-and-reconnaissance/untitled.md): In this lab we will see how to use Maltego to perform footprinting. - [Fingerprinting with FOCA](https://tzero86.gitbook.io/tzero86/footprinting-and-reconnaissance/fingerprinting-with-foca.md): In this lab we will see how to do file fingerprinting using FOCA. - [Creating a network diagram with Network Topology Mapper](https://tzero86.gitbook.io/tzero86/footprinting-and-reconnaissance/solarwinds-network-topology-mapper.md): For this lab we will see how to create a diagram of a network, using NTM to perform a network topology scan. - [Running scans with Nmap](https://tzero86.gitbook.io/tzero86/scanning/running-scans-with-nmap.md): Various examples of how to run different types of scans using Nmap. - [Basic Scanning (Shodan.io & Nmap)](https://tzero86.gitbook.io/tzero86/scanning/basic-scanning-shodan.io-and-nmap.md): In this lab we will see how to use Shodan to locate servers with ports 22 and 23 open and we will use nmap to obtain basic information about the targets. - [Password Files & Authentication](https://tzero86.gitbook.io/tzero86/password-files.md): In this lab we will see how the passwd and shadow files are formed in Linux and SAM in Windows and how authentication is handled in these OSes. - [Scanning Vulnerabilities with Nessus](https://tzero86.gitbook.io/tzero86/vulnerability-analysis/escaneando-vulnerabilidades-con-nessus.md): In this lab we will see how to do vulnerability scanning using Nessus Vulnerability Scanner. - [Steganography](https://tzero86.gitbook.io/tzero86/system-hacking/esteganografia-steganography.md): In this lab we will see what Steganography consists of and we will perform an exercise about it using Steghide in Kali Linux. - [NTFS Stream Manipulation](https://tzero86.gitbook.io/tzero86/system-hacking/ntfs-stream-manipulation-wip.md): In this lab we will see what the attack called NTFS Stream Manipulation consists of. - [Sniffing with Wireshark](https://tzero86.gitbook.io/tzero86/sniffing/wireshark.md): In this lab we will see the basic use of Wireshark for network packet analysis. - [SYN Flooding with HPING3](https://tzero86.gitbook.io/tzero86/denial-of-service/syn-flooding-con-hping.md): In this lab we will see how to do SYN flooding using HPING3 and how to analyze that traffic with Wireshark. - [Session Hijacking](https://tzero86.gitbook.io/tzero86/session-hijacking/session-hijacking.md): In this article we will see what session hijacking consists of and a simple example of reflected XSS. - [Website Defacement](https://tzero86.gitbook.io/tzero86/web-server-hacking/website-defacement.md): In this article we will see what Website Defacement consists of and we will perform a lab exercise on a local lab with our VMs. - [Shodan.io: Locating Vulnerable IoT Devices](https://tzero86.gitbook.io/tzero86/iot-hacking/shodan.io-localizando-dispositivos-iot-vulnerables.md): In this lab we will see how we can locate various vulnerable IoT devices using shodan.io and Python. ## 1.0.0 (ES) - [Ethical Hacking Notes](https://tzero86.gitbook.io/tzero86/master/master.md): ⛔ Todo el contenido demostrado en este compendio de escritos, es exclusivamente para el estudio de hacking ético. - [Footprinting with Recon-NG](https://tzero86.gitbook.io/tzero86/master/footprinting-and-reconnaissance/untitled-1.md): En esta práctica veremos como usar recon-ng para realizar un footprinting de un objetivo. - [Footprinting with Maltego](https://tzero86.gitbook.io/tzero86/master/footprinting-and-reconnaissance/untitled.md): En esta práctica veremos como usar Maltego para realizar un footprinting. - [Fingerprinting with FOCA](https://tzero86.gitbook.io/tzero86/master/footprinting-and-reconnaissance/fingerprinting-with-foca.md): En esta práctica veremos como hacer fingerprinting de archivos usando FOCA. - [Creando un diagrama de red con Network Topology Mapper](https://tzero86.gitbook.io/tzero86/master/footprinting-and-reconnaissance/solarwinds-network-topology-mapper.md): Para esta práctica veremos como realizar un diagrama de una red, utilizando NTM para realizar un scan de topología de red. - [Running scans with Nmap](https://tzero86.gitbook.io/tzero86/master/scanning/running-scans-with-nmap.md): Distintos ejemplos de como correr variados tipos de scans usando Nmap. - [Basic Scanning (Shodan.io & Nmap)](https://tzero86.gitbook.io/tzero86/master/scanning/basic-scanning-shodan.io-and-nmap.md): En esta práctica veremos como usar Shodan para localizar servers con puertos 22 y 23 abiertos y usaremos nmap para obtener información básica de los objetivos. - [Password Files & Authentication](https://tzero86.gitbook.io/tzero86/master/password-files.md): En esta práctica veremos como están formados los archivos passwd y shadow en Linux y SAM en Windows y como se maneja la autenticación en estos SO. - [Escaneando Vulnerabilidades con Nessus](https://tzero86.gitbook.io/tzero86/master/vulnerability-analysis/escaneando-vulnerabilidades-con-nessus.md): En esta práctica veremos como hacer scanning the vulnerabilidades usando Nessus Vulnerability Scanner. - [Esteganografía (Steganography)](https://tzero86.gitbook.io/tzero86/master/system-hacking/esteganografia-steganography.md): En esta práctica veremos en que consiste la Esteganografía y realizaremos un ejercicio al respecto utilizando Steghide en Kali Linux. - [NTFS Stream Manipulation](https://tzero86.gitbook.io/tzero86/master/system-hacking/ntfs-stream-manipulation-wip.md): En esta práctica veremos en que consiste el ataque llamado NTFS Stream Manipulation. - [Sniffing con Wireshark](https://tzero86.gitbook.io/tzero86/master/sniffing/wireshark.md): En esta práctica veremos el uso básico de Wireshark para el análisis de paquetes de red. - [SYN Flooding con HPING3](https://tzero86.gitbook.io/tzero86/master/denial-of-service/syn-flooding-con-hping.md): En esta práctica veremos como hacer SYN Flooding usando HPING3 y como analizar ese tráfico con Wireshark. - [Session Hijacking](https://tzero86.gitbook.io/tzero86/master/session-hijacking/session-hijacking.md): En este artículo veremos en que consiste el secuestro de sesión (Session Hijacking) y un simple ejemplo de reflected XSS. - [Website Defacement](https://tzero86.gitbook.io/tzero86/master/web-server-hacking/website-defacement.md): En este artículo veremos en que consiste el Website Defacement y realizaremos una práctica en un laboratorio local con nuestras VMs. - [Shodan.io: Localizando Dispositivos IoT Vulnerables](https://tzero86.gitbook.io/tzero86/master/iot-hacking/shodan.io-localizando-dispositivos-iot-vulnerables.md): En esta práctica veremos como podemos localizar diversos dispositivos IoT vulnerables, usando shodan.io y Python. ## Not Curated EH Notes - [Ethical Hacking Notes](https://tzero86.gitbook.io/tzero86/not-curated-eh-notes/master.md): ⛔ Todo el contenido demostrado en este compendio de escritos, es exclusivamente para el estudio de hacking ético. - [Footprinting with Recon-NG](https://tzero86.gitbook.io/tzero86/not-curated-eh-notes/footprinting-and-reconnaissance/untitled-1.md): En esta práctica veremos como usar recon-ng para realizar un footprinting de un objetivo. - [Footprinting with Maltego](https://tzero86.gitbook.io/tzero86/not-curated-eh-notes/footprinting-and-reconnaissance/untitled.md): En esta práctica veremos como usar Maltego para realizar un footprinting. - [Fingerprinting with FOCA](https://tzero86.gitbook.io/tzero86/not-curated-eh-notes/footprinting-and-reconnaissance/fingerprinting-with-foca.md): En esta práctica veremos como hacer fingerprinting de archivos usando FOCA. - [Creando un diagrama de red con Network Topology Mapper](https://tzero86.gitbook.io/tzero86/not-curated-eh-notes/footprinting-and-reconnaissance/solarwinds-network-topology-mapper.md): Para esta práctica veremos como realizar un diagrama de una red, utilizando NTM para realizar un scan de topología de red. - [Running scans with Nmap](https://tzero86.gitbook.io/tzero86/not-curated-eh-notes/scanning/running-scans-with-nmap.md): Distintos ejemplos de como correr variados tipos de scans usando Nmap. - [Basic Scanning (Shodan.io & Nmap)](https://tzero86.gitbook.io/tzero86/not-curated-eh-notes/scanning/basic-scanning-shodan.io-and-nmap.md): En esta práctica veremos como usar Shodan para localizar servers con puertos 22 y 23 abiertos y usaremos nmap para obtener información básica de los objetivos. - [Password Files & Authentication](https://tzero86.gitbook.io/tzero86/not-curated-eh-notes/password-files.md): En esta práctica veremos como están formados los archivos passwd y shadow en Linux y SAM en Windows y como se maneja la autenticación en estos SO. - [Escaneando Vulnerabilidades con Nessus](https://tzero86.gitbook.io/tzero86/not-curated-eh-notes/vulnerability-analysis/escaneando-vulnerabilidades-con-nessus.md): En esta práctica veremos como hacer scanning the vulnerabilidades usando Nessus Vulnerability Scanner. - [Esteganografía (Steganography)](https://tzero86.gitbook.io/tzero86/not-curated-eh-notes/system-hacking/esteganografia-steganography.md): En esta práctica veremos en que consiste la Esteganografía y realizaremos un ejercicio al respecto utilizando Steghide en Kali Linux. - [NTFS Stream Manipulation](https://tzero86.gitbook.io/tzero86/not-curated-eh-notes/system-hacking/ntfs-stream-manipulation-wip.md): En esta práctica veremos en que consiste el ataque llamado NTFS Stream Manipulation. - [Sniffing con Wireshark](https://tzero86.gitbook.io/tzero86/not-curated-eh-notes/sniffing/wireshark.md): En esta práctica veremos el uso básico de Wireshark para el análisis de paquetes de red. - [JWT Token Pirate Map](https://tzero86.gitbook.io/tzero86/not-curated-eh-notes/jwt-token-pirate-map.md) --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on a page URL with the `ask` query parameter: ``` GET https://tzero86.gitbook.io/tzero86/master.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.