Professional penetration testing labs documenting reconnaissance, enumeration, exploitation, privilege escalation, post-exploitation, and attack surface analysis across Windows, Linux, web applications, and network services.
This repository contains hands-on penetration testing assessments and lab reports developed while studying offensive security, network enumeration, exploitation methodologies, and post-exploitation techniques.
The goal of this repository is to document the complete penetration testing lifecycle in a structured and professional manner while building a practical cybersecurity portfolio.
Reconnaissance
│
▼
Host Discovery
│
▼
Port Enumeration
│
▼
Service Enumeration
│
▼
Vulnerability Assessment
│
▼
Exploitation
│
▼
Privilege Escalation
│
▼
Post Exploitation
│
▼
Reporting
- Host Discovery
- Port Scanning
- Service Fingerprinting
- Banner Grabbing
- SMB Enumeration
- RPC Enumeration
- WinRM Enumeration
- RDP Enumeration
- HTTP Enumeration
- DNS Enumeration
- Service Exploitation
- Credential Attacks
- Web Exploitation
- Metasploit Framework
- Manual Exploitation
- Local Enumeration
- Privilege Escalation
- Credential Harvesting
- Persistence
- Pivoting
- Nmap
- Netcat
- WhatWeb
- Enum4linux
- SMBClient
- SMBMap
- RPCClient
- CrackMapExec
- Burp Suite
- Gobuster
- Dirb
- Nikto
- Curl
- WPSCan
- SQLMap
- Metasploit Framework
- Searchsploit
- Hydra
- Evil-WinRM
All activities, techniques, and assessments documented in this repository were performed within authorized lab environments, training platforms, Capture The Flag (CTF) challenges, or intentionally vulnerable systems.
The content is provided solely for educational and defensive security purposes. Unauthorized testing against systems without explicit permission is prohibited.
@ashrithpeechara