Tryhackme Cct2019 Review

| Tool | Purpose | | :--- | :--- | | | Port scanning & service detection. | | Gobuster / Dirb | Web directory brute-forcing. | | Burp Suite / Curl | Intercepting/modifying web requests for SQLi or Command Inj. | | Netcat (nc) | Reverse shell listener. | | Python/Perl | Upgrading to a TTY shell ( python3 -c 'import pty;pty.spawn("/bin/bash")' ). | | LinPEAS / LinEnum | Automated privilege escalation script (optional, but helpful). | | John the Ripper | Cracking database password hashes. | | GTFOBins | Web reference for SUID exploitation. |