> For the complete documentation index, see [llms.txt](https://notes.m4lwhere.org/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.m4lwhere.org/offensive.md).

# Offensive

- [Exploit Workflow](https://notes.m4lwhere.org/offensive/offensive-notes.md): How to work through a vulnerable host
- [Recon](https://notes.m4lwhere.org/offensive/recon.md): Recon scripts and details
- [OSINT](https://notes.m4lwhere.org/offensive/recon/osint.md): The Internet knows pretty much everything, we just need to ask the right questions
- [DNS](https://notes.m4lwhere.org/offensive/recon/dns.md): DNS analysis
- [Domain Discovery](https://notes.m4lwhere.org/offensive/recon/dns/domain-discovery.md)
- [Layer 2 Config and Analysis](https://notes.m4lwhere.org/offensive/recon/layer-2-config-and-analysis.md): Investigate layer 2 activity on a local network
- [Port Scanning and Discovery](https://notes.m4lwhere.org/offensive/recon/nmap.md): I'm knocking on every door
- [Port Attacks](https://notes.m4lwhere.org/offensive/recon/port-analysis.md)
- [Link it all together](https://notes.m4lwhere.org/offensive/recon/link-it-all-together.md)
- [Payloads](https://notes.m4lwhere.org/offensive/payloads.md)
- [MSFVenom](https://notes.m4lwhere.org/offensive/payloads/msfvenom.md): Generate msfvenom payloads
- [Reverse Shells](https://notes.m4lwhere.org/offensive/payloads/reverse-shells.md): Work in Progress
- [Websites](https://notes.m4lwhere.org/offensive/web-exploits.md): Anything and Everything
- [Enumeration](https://notes.m4lwhere.org/offensive/web-exploits/enumeration.md): Find information before we attack
- [Injection/LFI](https://notes.m4lwhere.org/offensive/web-exploits/injection.md): Command and Database 😍
- [Session Management](https://notes.m4lwhere.org/offensive/web-exploits/session-management.md)
- [Brute Forcing](https://notes.m4lwhere.org/offensive/web-exploits/brute-forcing.md): Sometimes just looking isn't enough
- [JavaScript & XSS](https://notes.m4lwhere.org/offensive/web-exploits/javascript.md)
- [SSRF](https://notes.m4lwhere.org/offensive/web-exploits/ssrf.md): So many things!
- [XXE](https://notes.m4lwhere.org/offensive/web-exploits/xxe.md): XML External Entity
- [PHP](https://notes.m4lwhere.org/offensive/web-exploits/php.md)
- [Password Attacks](https://notes.m4lwhere.org/offensive/password-attacks.md)
- [Brute Forcing](https://notes.m4lwhere.org/offensive/password-attacks/brute-forcing.md)
- [Mimikatz](https://notes.m4lwhere.org/offensive/password-attacks/mimikatz.md)
- [Password Cracking](https://notes.m4lwhere.org/offensive/password-attacks/password-cracking.md)
- [Hash Extraction](https://notes.m4lwhere.org/offensive/password-attacks/hash-extraction.md)
- [Wordlist Generation](https://notes.m4lwhere.org/offensive/password-attacks/wordlist-generation.md)
- [Databases](https://notes.m4lwhere.org/offensive/databases.md)
- [SQL](https://notes.m4lwhere.org/offensive/databases/sql.md)
- [Mongodb](https://notes.m4lwhere.org/offensive/databases/mongodb.md)
- [Microsoft Windows Exploits](https://notes.m4lwhere.org/offensive/microsoft-windows-exploits.md)
- [Enumeration](https://notes.m4lwhere.org/offensive/microsoft-windows-exploits/enumeration.md)
- [Powershell](https://notes.m4lwhere.org/offensive/microsoft-windows-exploits/powershell.md)
- [Cmd](https://notes.m4lwhere.org/offensive/microsoft-windows-exploits/cmd.md)
- [Privilege Escalation](https://notes.m4lwhere.org/offensive/microsoft-windows-exploits/privilege-escalation.md)
- [Active Directory](https://notes.m4lwhere.org/offensive/microsoft-windows-exploits/active-directory.md)
- [Bloodhound](https://notes.m4lwhere.org/offensive/microsoft-windows-exploits/bloodhound.md)
- [Social Engineering](https://notes.m4lwhere.org/offensive/social-engineering.md)
- [Netcat & Socat](https://notes.m4lwhere.org/offensive/netcat.md): Netcat rocks my socks
- [File Transfers](https://notes.m4lwhere.org/offensive/file-transfers.md)
- [Metasploit](https://notes.m4lwhere.org/offensive/metasploit.md): Who cares if it's easy, that's the point right?
- [Writing Modules](https://notes.m4lwhere.org/offensive/metasploit/writing-modules.md)
- [PS Empire](https://notes.m4lwhere.org/offensive/ps-empire.md): PowerShell Empire used to manage C2 nodes
- [Priv Escalation](https://notes.m4lwhere.org/offensive/priv-escalation.md)
- [Post Exploitation](https://notes.m4lwhere.org/offensive/post-exploitation.md): Ok, now what do we do??
- [Pivoting](https://notes.m4lwhere.org/offensive/pivoting.md)
- [Certs and Secrets](https://notes.m4lwhere.org/offensive/certificates.md): how to generate and analyze certificates
- [NGROK](https://notes.m4lwhere.org/offensive/ngrok.md): Using ngrok to access internal services
- [Misc.](https://notes.m4lwhere.org/offensive/misc..md)