Ethical Hacking

1. Exploitation

Metasploit

msfconsole
use exploit/windows/smb/ms17_010_eternalblue
set RHOST [IP]
exploit

Searchsploit

searchsploit apache
searchsploit -m exploit/path

2. Web Hacking

Burp Suite

Configurer proxy → Intercepter requêtes HTTP

OWASP ZAP
```
zap.sh
```

SQLMap

sqlmap -u "http://site.com/page.php?id=1" --dbs

3. Forensics

Autopsy
```
autopsy
```

Volatility

volatility -f dump.raw --profile=Win10x64 pslist

Binwalk
```
binwalk firmware.bin
```

4. OSINT

theHarvester
```
theHarvester -d domain.com -b google
```
Maltego
```
Interface graphique
```
Shodan
```
shodan search apache
shodan host [IP]
```

5. Pentest Réseaux

Nmap
```
nmap -A -T4 192.168.1.1
```
Netcat
```
nc -lvp 4444
nc [ip] 4444
```
Hping3
```
hping3 -S -p 80 -c 10 [IP]
```

6. Social Engineering

SET (Social Engineering Toolkit)
```
setoolkit
```
HiddenEye
```
python3 HiddenEye.py
```

7. Brute Force

Hydra

hydra -l user -P pass.txt ssh://192.168.1.1

John the Ripper
```
john hash.txt --wordlist=rockyou.txt
```

8. WiFi Hacking

Aircrack-ng

airmon-ng start wlan0
airodump-ng wlan0mon
aireplay-ng -0 10 -a [BSSID] wlan0mon

Wifite
```
wifite
```

9. Web Servers

Nikto
```
nikto -h http://site.com
```
Dirb
```
dirb http://target.com/
```

10. Sniffing & Spoofing

Wireshark
```
Interface graphique
```
Ettercap
```
ettercap -G
```

11. Reverse Engineering

Ghidra
```
Interface graphique
```
OllyDbg
```
Outil Windows - Analyse binaire
```

12. Password Cracking

Hashcat

hashcat -m 0 -a 0 hashes.txt rockyou.txt

Cain & Abel
```
Outil Windows - Interface graphique
```

13. Malware Analysis

PEStudio
```
Analyse statique de malware
```
VirusTotal CLI
```
vt scan file.exe
```

14. Privilege Escalation

LinPEAS
```
./linpeas.sh
```
WinPEAS
```
winPEAS.exe
```

15. Steganography

Steghide
```
steghide extract -sf image.jpg
```
zsteg
```
zsteg image.png
```

Kali Linux

Outils par Catégorie

1. Exploitation

2. Web Hacking

3. Forensics

4. OSINT

5. Pentest Réseaux

6. Social Engineering

7. Brute Force

8. WiFi Hacking

9. Web Servers

10. Sniffing & Spoofing

11. Reverse Engineering

12. Password Cracking

13. Malware Analysis

14. Privilege Escalation

15. Steganography