🃏 Flashcards
Reinforce your knowledge with spaced repetition flashcards.
🔔 20 cards due for review!
Keep your knowledge fresh with spaced repetition.
60
Total Cards
20
Due Today
0
Reviewed
All Flashcards
| Question | Module | Status | Next Review |
|---|---|---|---|
| What are the 5 phases of a penetration test? | Penetration Testing Process | New | Now |
| What Nmap flag performs a SYN stealth scan? | Network Enumeration with Nmap | New | Now |
| What Nmap flag detects service versions? | Network Enumeration with Nmap | New | Now |
| What Nmap flag scans all 65535 ports? | Network Enumeration with Nmap | New | Now |
| What Nmap flag runs default scripts? | Network Enumeration with Nmap | New | Now |
| What Nmap timing template is 'aggressive'? | Network Enumeration with Nmap | New | Now |
| What tool performs SMB enumeration with null sessions? | Footprinting | New | Now |
| What default port does SMB use? | Footprinting | New | Now |
| What SNMP community string is commonly used? | Footprinting | New | Now |
| What port does SNMP use? | Footprinting | New | Now |
| What tool is used for subdomain enumeration? | Web Information Gathering | New | Now |
| What file should you check for hidden paths on a web server? | Web Information Gathering | New | Now |
| What tool searches for public exploits? | Vulnerability Assessment | New | Now |
| How do you start a Python HTTP server on port 8000? | File Transfers | New | Now |
| What Windows command downloads files via HTTP? | File Transfers | New | Now |
| What's a basic bash reverse shell technique? | Shells & Payloads | New | Now |
| How do you upgrade a shell to a PTY with Python? | Shells & Payloads | New | Now |
| What command starts a netcat listener? | Shells & Payloads | New | Now |
| What Metasploit module finds privilege escalation vectors? | Metasploit Framework | New | Now |
| What hashcat mode is for NTLM? | Password Attacks | New | Now |
| What hashcat mode is for Kerberos TGS (Kerberoast)? | Password Attacks | New | Now |
| What's the default wordlist location on Kali? | Password Attacks | New | Now |
| What default port does WinRM use? | Attacking Common Services | New | Now |
| What tool provides PowerShell shells over WinRM? | Attacking Common Services | New | Now |
| What flag makes proxychains work with Nmap? | Pivoting, Tunneling & Port Forwarding | New | Now |
| What Chisel command starts a reverse SOCKS server? | Pivoting, Tunneling & Port Forwarding | New | Now |
| What tool visualizes AD attack paths? | Active Directory Enumeration | New | Now |
| What PowerView command finds local admin access? | Active Directory Enumeration | New | Now |
| What is Kerberoasting? | Active Directory Attacks | New | Now |
| What tool performs DCSync attacks? | Active Directory Attacks | New | Now |
| What is AS-REP Roasting? | Active Directory Attacks | New | Now |
| What's the default Burp Suite proxy port? | Using Web Proxies | New | Now |
| What ffuf flag filters by response code? | Attacking Web Apps with Ffuf | New | Now |
| What ffuf flag filters by response size? | Attacking Web Apps with Ffuf | New | Now |
| What's a basic SQL injection test payload? | SQL Injection Fundamentals | New | Now |
| What SQL function causes time delays in MySQL? | SQL Injection Fundamentals | New | Now |
| What sqlmap flag dumps all databases? | SQLMap Essentials | New | Now |
| What sqlmap flag attempts OS shell? | SQLMap Essentials | New | Now |
| What HTML tag is commonly used in XSS testing? | Cross-Site Scripting (XSS) | New | Now |
| What PHP wrapper reads source code via LFI? | File Inclusion | New | Now |
| What's the basic LFI traversal sequence? | File Inclusion | New | Now |
| What magic bytes indicate a GIF file? | File Upload Attacks | New | Now |
| What characters can be used for command injection? | Command Injections | New | Now |
| What's the AWS metadata endpoint IP? | Web Attacks | New | Now |
| What tool scans WordPress for vulnerabilities? | Attacking Common Applications | New | Now |
| What command checks sudo privileges on Linux? | Linux Privilege Escalation | New | Now |
| What command finds SUID binaries? | Linux Privilege Escalation | New | Now |
| What automated Linux privesc tool is commonly used? | Linux Privilege Escalation | New | Now |
| What website lists GTFOBins? | Linux Privilege Escalation | New | Now |
| What Windows command shows all privileges? | Windows Privilege Escalation | New | Now |