# Anggi's Notes

## Anggi's Notes

- [Tentang Penulis](https://notes.anggipradana.com/master.md)
- [Preambule](https://notes.anggipradana.com/preambule.md)
- [Tutorial Setup VirtualBox](https://notes.anggipradana.com/tutorial/tutorial-setup-virtualbox.md): Pada sesi ini akan dijelaskan langkah-langkah installasi VirtualBox untuk keperluan pembuatan virtualisasi OS/ environtment. Environtment host pada
- [Tutorial Setup Kali Linux pada VirtualBox](https://notes.anggipradana.com/tutorial/tutorial-setup-kali-linux-pada-virtualbox.md): Pada tutorial ini kan ditunjukkan setup Kali Linux versi OVA yang langsung dapat digunakan pada Virtual Box.
- [Network Adapter Type pada Virtual Box](https://notes.anggipradana.com/tutorial/network-adapter-type-pada-virtual-box.md): Source: www.nakivo.com and www.thomas-krenn.com
- [Tutorial Port Forwarding Pada Virtual Box](https://notes.anggipradana.com/tutorial/tutorial-port-forwarding-pada-virtual-box.md): Sumber: https://travishorn.com
- [Mempercepat update/upgrade/install Kali Linux](https://notes.anggipradana.com/tutorial/mempercepat-update-upgrade-install-kali-linux.md): Sebuah cara mempercepat download/update/upgrade Kali Linux melalui pengubahan repository/apt sourcelist
- [Networking in a Nutshell](https://notes.anggipradana.com/tutorial/networking-in-a-nutshell.md)
- [Linux in A Nutshell](https://notes.anggipradana.com/tutorial/linux-in-a-nutshell.md)
- [Linux Command Intro](https://notes.anggipradana.com/tutorial/linux-command-intro.md): Cheatsheet perintah-perintah dasar Linux
- [Linux Command Learning (Bandit - OverTheWire)](https://notes.anggipradana.com/tutorial/linux-command-learning-bandit-overthewire.md): Source : axcheron.github.io
- [VA-PT Cheatsheet](https://notes.anggipradana.com/tutorial/va-pt-cheatsheet.md): Cheatsheet untuk Pentesting.
- [NMAP Cheatsheet](https://notes.anggipradana.com/tutorial/nmap-cheatsheet.md): Source:https://www.comparitech.com
- [Penetration Testing Guide & Checklist](https://notes.anggipradana.com/tutorial/penetration-testing-guide-and-checklist.md)
- [Pentesting Web checklist](https://notes.anggipradana.com/tutorial/pentesting-web-checklist.md): Supaya kamu ga pusing harus ngapain aja kalo mau pentest web ya.
- [Bind vs Reverse Shell Concept](https://notes.anggipradana.com/tutorial/bind-vs-reverse-shell-concept.md): Source: https://www.geeksforgeeks.org/ and GPTs
- [Reverse Shell Cheatsheet](https://notes.anggipradana.com/tutorial/reverse-shell-cheatsheet.md)
- [Linux TTY Shell Cheat Sheet](https://notes.anggipradana.com/tutorial/linux-tty-shell-cheat-sheet.md): Source https://steflan-security.com
- [Menaikkan Common Shell ke Meterpreter](https://notes.anggipradana.com/tutorial/menaikkan-common-shell-ke-meterpreter.md): Source: https://null-byte.wonderhowto.com
- [Metasploit Cheatsheet](https://notes.anggipradana.com/tutorial/metasploit-cheatsheet.md): Source https://docs.metasploit.com/
- [msfvenom](https://notes.anggipradana.com/tutorial/metasploit-cheatsheet/msfvenom.md): Source https://docs.metasploit.com/
- [searchploit](https://notes.anggipradana.com/tutorial/metasploit-cheatsheet/searchploit.md)
- [Metasploitable-2](https://notes.anggipradana.com/tutorial/metasploitable-2.md): This tutorial is sourced from Bob1Bob2 Pentest Notes
- [Metasploitable-3](https://notes.anggipradana.com/tutorial/metasploitable-3.md): Source: https://stuffwithaurum.com
- [Linux Privilege Escalation](https://notes.anggipradana.com/tutorial/linux-privilege-escalation.md)
- [Linux Privilege Escalation with Misconfigured /etc/passwd ](https://notes.anggipradana.com/tutorial/linux-privilege-escalation/linux-privilege-escalation-with-misconfigured-etc-passwd.md): Source : hackingarticles.in
- [Linux Privilege Escalation with SUID](https://notes.anggipradana.com/tutorial/linux-privilege-escalation/linux-privilege-escalation-with-suid.md): Study case Metasploitable 2. Source https://www.hackingarticles.in/ and https://medium.com/@SumanNathani.
- [Linux Privilege Escalation with Misconfigured Sudo](https://notes.anggipradana.com/tutorial/linux-privilege-escalation/linux-privilege-escalation-with-misconfigured-sudo.md): Source https://www.hackingarticles.in
- [Linux Privilege Escalation with MSF](https://notes.anggipradana.com/tutorial/linux-privilege-escalation/linux-privilege-escalation-with-msf.md): Case study Metasploitable2. Source https://null-byte.wonderhowto.com
- [DVWA](https://notes.anggipradana.com/tutorial/dvwa.md): Cheatsheet penyelesaian DVWA.
- [Brute Force](https://notes.anggipradana.com/tutorial/dvwa/brute-force.md)
- [Low](https://notes.anggipradana.com/tutorial/dvwa/brute-force/low.md): Brute Force level Low on DVWA
- [Medium](https://notes.anggipradana.com/tutorial/dvwa/brute-force/medium.md): Brute Force level Medium on DVWA
- [High](https://notes.anggipradana.com/tutorial/dvwa/brute-force/high.md)
- [Command Injection](https://notes.anggipradana.com/tutorial/dvwa/command-injection.md)
- [Low](https://notes.anggipradana.com/tutorial/dvwa/command-injection/low.md)
- [Medium](https://notes.anggipradana.com/tutorial/dvwa/command-injection/medium.md): Command Injection level Medium on DVWA
- [High](https://notes.anggipradana.com/tutorial/dvwa/command-injection/high.md)
- [Local File Inclusion](https://notes.anggipradana.com/tutorial/dvwa/local-file-inclusion.md)
- [Low](https://notes.anggipradana.com/tutorial/dvwa/local-file-inclusion/low.md): File Inclusion level Low on DVWA
- [Medium](https://notes.anggipradana.com/tutorial/dvwa/local-file-inclusion/medium.md): File Inclusion level Medium on DVWA
- [High](https://notes.anggipradana.com/tutorial/dvwa/local-file-inclusion/high.md): File Inclusion level High on DVWA
- [File Upload Vulnerability](https://notes.anggipradana.com/tutorial/dvwa/untitled-2.md)
- [Low](https://notes.anggipradana.com/tutorial/dvwa/untitled-2/low.md)
- [Medium](https://notes.anggipradana.com/tutorial/dvwa/untitled-2/medium.md): File Upload level Medium on DVWA
- [High](https://notes.anggipradana.com/tutorial/dvwa/untitled-2/high.md): File Upload level High on DVWA
- [Cross Site Scripting (XSS)](https://notes.anggipradana.com/tutorial/dvwa/cross-site-scripting-xss.md)
- [Reflected](https://notes.anggipradana.com/tutorial/dvwa/cross-site-scripting-xss/reflected.md)
- [Low](https://notes.anggipradana.com/tutorial/dvwa/cross-site-scripting-xss/reflected/low.md): XSS (Reflected) level Low on DVWA
- [Medium](https://notes.anggipradana.com/tutorial/dvwa/cross-site-scripting-xss/reflected/medium.md): XSS (Reflected) level Medium on DVWA
- [High](https://notes.anggipradana.com/tutorial/dvwa/cross-site-scripting-xss/reflected/high.md): XSS (Reflected) level High on DVWA
- [Stored](https://notes.anggipradana.com/tutorial/dvwa/cross-site-scripting-xss/stored.md): Stored XSS (Persistent XSS)
- [Low](https://notes.anggipradana.com/tutorial/dvwa/cross-site-scripting-xss/stored/low.md): XSS (Stored) level Low on DVWA
- [Medium](https://notes.anggipradana.com/tutorial/dvwa/cross-site-scripting-xss/stored/medium.md): XSS (Stored) level Medium on DVWA
- [High](https://notes.anggipradana.com/tutorial/dvwa/cross-site-scripting-xss/stored/high.md): XSS (Stored) level High on DVWA
- [DOM](https://notes.anggipradana.com/tutorial/dvwa/cross-site-scripting-xss/dom.md)
- [Low](https://notes.anggipradana.com/tutorial/dvwa/cross-site-scripting-xss/dom/low.md): XSS (DOM) level Low on DVWA
- [Medium](https://notes.anggipradana.com/tutorial/dvwa/cross-site-scripting-xss/dom/medium.md): XSS (DOM) level Medium on DVWA
- [High](https://notes.anggipradana.com/tutorial/dvwa/cross-site-scripting-xss/dom/high.md): XSS (DOM) level High on DVWA
- [SQL Injection](https://notes.anggipradana.com/tutorial/dvwa/sql-injection.md)
- [Non Blind](https://notes.anggipradana.com/tutorial/dvwa/sql-injection/non-blind.md)
- [Low](https://notes.anggipradana.com/tutorial/dvwa/sql-injection/non-blind/low.md): SQL Injection level Low on DVWA
- [Medium](https://notes.anggipradana.com/tutorial/dvwa/sql-injection/non-blind/medium.md): SQL Injection level Medium on DVWA
- [High](https://notes.anggipradana.com/tutorial/dvwa/sql-injection/non-blind/high.md): SQL Injection level High on DVWA
- [Blind](https://notes.anggipradana.com/tutorial/dvwa/sql-injection/blind.md)
- [Low](https://notes.anggipradana.com/tutorial/dvwa/sql-injection/blind/low.md): Blind SQL Injection level Low on DVWA
- [Medium](https://notes.anggipradana.com/tutorial/dvwa/sql-injection/blind/medium.md): Blind SQL Injection level Medium on DVWA
- [High](https://notes.anggipradana.com/tutorial/dvwa/sql-injection/blind/high.md): Blind SQL Injection level High on DVWA
- [CSRF](https://notes.anggipradana.com/tutorial/dvwa/csrf.md)
- [Low](https://notes.anggipradana.com/tutorial/dvwa/csrf/low.md): CSRF level Low on DVWA
- [Medium](https://notes.anggipradana.com/tutorial/dvwa/csrf/medium.md): CSRF level Medium on DVWA
- [High](https://notes.anggipradana.com/tutorial/dvwa/csrf/high.md): CSRF level High on DVWA
- [Pentesting Report Sample](https://notes.anggipradana.com/tutorial/pentesting-report-sample.md)
- [Tutorial Penggunaan ZAP](https://notes.anggipradana.com/tutorial/tutorial-penggunaan-zap.md): Source:https://www.softwaretestinghelp.com/
- [Windows VA/Audit](https://notes.anggipradana.com/tutorial/windows-va-audit.md): Catatan ini ditujukan untuk mempermudah melakukan Vulnerability Scanning (VA) dan Audit pada Operating System (OS) Windows.
- [DetExploit](https://notes.anggipradana.com/tutorial/windows-va-audit/detexploit.md)
- [HardeningKitty](https://notes.anggipradana.com/tutorial/windows-va-audit/hardeningkitty.md): Pada panel ini akan dijelaskan bagaimana menggunakan HadeningKitty untuk tujuan VA/Audit Windows dan Hardening Windows. (Untuk pembahasan ini masih perlu saya lengkapi ya 😁)
- [Tutorial Installasi OWASP ZAP pada Windows OS](https://notes.anggipradana.com/tutorial/windows-va-audit/tutorial-installasi-owasp-zap-pada-windows-os.md): Pada tutorial ini ditunjukkan langkah installasi OWASP ZAP pada environment Windows OS.
- [Linux VA/Audit dengan Lynis](https://notes.anggipradana.com/tutorial/linux-va-audit-dengan-lynis.md): Lynis adalah aplikasi audit keamanan open-source berbasis host yang dapat mengevaluasi profil keamanan dan postur Linux dan sistem operasi mirip UNIX lainnya. Pada pembahasan ini akan dibahas langkah
- [Mobile Security Framework (MobSF) Windows Docker](https://notes.anggipradana.com/tutorial/mobile-security-framework-mobsf-windows-docker.md): MobSF
- [Reconnaissance Techniques](https://notes.anggipradana.com/teknik-windows-attack/teknik-recon.md): This tutorial is sourced from HackerSploit and is sponsored by Linode.
- [Windows Red Team Exploitation Techniques](https://notes.anggipradana.com/teknik-windows-attack/windows-red-team-exploitation-techniques.md): This tutorial is sourced from HackerSploit and sponsored by Linode.
- [Windows Red Team Defense Evasion Techniques](https://notes.anggipradana.com/teknik-windows-attack/windows-red-team-defense-evasion-techniques.md): This tutorial is sourced from HackerSploit and sponsored by Linode.
- [Merancang SOC](https://notes.anggipradana.com/tutorial-blue-team-area/merancang-soc.md): Coming Soon
- [IR Playbook](https://notes.anggipradana.com/tutorial-blue-team-area/ir-playbook.md): Source: NIST SP 800-61 and https://gitlab.com/syntax-ir/playbooks
- [Blue Team Opensource Online Tools](https://notes.anggipradana.com/tutorial-blue-team-area/blue-team-opensource-online-tools.md): Source: https://gitlab.com/syntax-ir/playbooks
- [Wireshark Query Cheatsheet](https://notes.anggipradana.com/tutorial-blue-team-area/wireshark-query-cheatsheet.md): Source=https://www.stationx.net/
- [LFI (Directory Traversal) di redacted.co.id](https://notes.anggipradana.com/temuan-celah-keamanan/lfi-di-redacted.co.id.md)
- [Kredensial Database dan Azure Leaks pada redacted.com](https://notes.anggipradana.com/temuan-celah-keamanan/kredensial-database-dan-azure-leaks-pada-redacted.com.md)
- [HTML Injection di Tokopedia](https://notes.anggipradana.com/temuan-celah-keamanan/html-injection-di-tokopedia.md)
- [4300$ Bounty from Opensource automate recon tools, why not?](https://notes.anggipradana.com/temuan-celah-keamanan/4300usd-bounty-from-opensource-automate-recon-tools-why-not.md): A critical thread of my thoughts about people who underestimate others because of opensource tools and skill set.
- [I hacked Mastercard 4 times? But How?](https://notes.anggipradana.com/temuan-celah-keamanan/i-hacked-mastercard-4-times-but-how.md): Coming soon
- [LFI dan RCE di aset redacted.com](https://notes.anggipradana.com/temuan-celah-keamanan/lfi-dan-rce-di-aset-redacted.md): Coming soon
- [FTPd DOS di aset redacted.co.id](https://notes.anggipradana.com/temuan-celah-keamanan/ftpd-dos-di-aset-redacted.md): Comingsoon
- [Gitlab SSRF di redacted.com](https://notes.anggipradana.com/temuan-celah-keamanan/gitlab-ssrf-di-redacted.md)
- [Firebase Android database Takeover](https://notes.anggipradana.com/temuan-celah-keamanan/firebase-android-database-takeover.md): Commingsoon
- [RCE di 11 Subdomain Dell](https://notes.anggipradana.com/temuan-celah-keamanan/rce-di-11-subdomain-dell.md): Coming Soon
- [SSRF di redacted.com](https://notes.anggipradana.com/temuan-celah-keamanan/ssrf-di-redacted.com.md): Coming soon
- [Reflected XSS di CelticPipes](https://notes.anggipradana.com/temuan-celah-keamanan/reflected-xss-di-celticpipes.md): Coming Soon
- [Git Disclosure di redacted.co.id](https://notes.anggipradana.com/temuan-celah-keamanan/git-disclosure-di-redacted.co.id.md): Coming Soon
- [Open Redirection+XSS pada Private Program Bugcrowd](https://notes.anggipradana.com/temuan-celah-keamanan/open-redirection+xss-pada-private-program-bugcrowd.md): Coming Soon
- [Rails Debug Mode Enabled pada redacted.com](https://notes.anggipradana.com/temuan-celah-keamanan/rails-debug-mode-enabled-pada-redacted.com.md): Coming Soon