Tools & Defense Nmap Mastery: Service Discovery and NSE Scripting
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
enumeration
Tools & Defense 
Active Directory LDAP Enumeration Techniques: ldapsearch and windapsearch
A practical guide to enumerating Active Directory over LDAP with ldapsearch, windapsearch, and bloodyAD, plus blue-team defenses.
Active Directory SMB Enumeration and Null Session Exploitation
A practical guide to enumerating SMB and abusing null sessions with enum4linux-ng, smbclient, rpcclient, and RID cycling.
Windows Privesc Practical Windows Enumeration with winPEAS
A hands-on guide to running winPEASx64 for Windows privilege escalation enumeration, with defensive countermeasures.
Linux Privesc Practical Linux Enumeration with LinPEAS
A hands-on guide to running LinPEAS for fast Linux privilege escalation enumeration, reading its output, and defending against it.
Linux Privesc Linux Enumeration Cheat Sheet for Privilege Escalation
A practical Linux post-exploitation enumeration cheat sheet covering id, uname -a, sudo -l, SUID hunting, and process inspection.