• Subdomain enumeratin
• Gather urls
• port scan
• bypass firewall Nmap
• Nmap operating system
• net cat
• Reverse Shell
• SMB
• FTP
• NFS
• SSH
• IIS
• vuln assessment
• system host attacks
• RDP & winRM
• bypassing UAC & privilege escalation & access token
• ADS & win hash
• MSF
• linux
• Network