[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] What should I know about Emails - Workflow?

[Assistant]
Here is a workflow divided in 3 parts, the first part is about finding emails, the second one to know if the email leaked in a data breach and the third one to find the data breach.
This workflow is still in process and is not exhaustive.

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

What should I know about Emails - Workflow?

Response:
Here is a workflow divided in 3 parts, the first part is about finding emails, the second one to know if the email leaked in a data breach and the third one to find the data breach.
This workflow is still in process and is not exhaustive.


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] How would I carry out Emails - Workflow during a pentest?

[Assistant]
Here is a workflow divided in 3 parts, the first part is about finding emails, the second one to know if the email leaked in a data breach and the third one to find the data breach.
This workflow is still in process and is not exhaustive.

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

How would I carry out Emails - Workflow during a pentest?

Response:
Here is a workflow divided in 3 parts, the first part is about finding emails, the second one to know if the email leaked in a data breach and the third one to find the data breach.
This workflow is still in process and is not exhaustive.


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] Give me an overview of Emails - Practice

[Assistant]
EMAIL SEARCH/VALIDATION
Search for email address on a website:
-http://www.email-search.org/search-emails (Free)
Search for email addresses with a domain name:
-https://hunter.io (Half free)
Get the target's email format with domain name:
-https://www.email-format.com (Free)
Making email list with a domain by permuting name and surname: -http://metricsparrow.com/toolkit/email-permutator (Free)
Verify if an email address exists:
-https://verifalia.com/validate-email (Free)
Verify email validity, check SMTP servers:
-https://dnslytics.com/email-test (Free)

EMAIL/PASSWORD LEAKS
Verify if the email has been compromised in data breach: -https://haveibeenpwned.com (Free)
-https://ghostproject.fr (Half free)
-https://www.dehashed.com (Half free)
-https://github.com/khast3x/h8mail (Could need non-free API's keys)
Find the leaked database:
-https://www.snusbase.com (Non-free)
-https://www.dehashed.com (Non-free)
Deepweb search engines:
-Notevil (http://hss3uro2hsxfogfq.onion/index.php)
-Candle (http://gjobqjj7wyczbqie.onion)
-Ahmia (http://msydqstlz2kzerdg.onion/)

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

Give me an overview of Emails - Practice

Response:
EMAIL SEARCH/VALIDATION
Search for email address on a website:
-http://www.email-search.org/search-emails (Free)
Search for email addresses with a domain name:
-https://hunter.io (Half free)
Get the target's email format with domain name:
-https://www.email-format.com (Free)
Making email list with a domain by permuting name and surname: -http://metricsparrow.com/toolkit/email-permutator (Free)
Verify if an email address exists:
-https://verifalia.com/validate-email (Free)
Verify email validity, check SMTP servers:
-https://dnslytics.com/email-test (Free)

EMAIL/PASSWORD LEAKS
Verify if the email has been compromised in data breach: -https://haveibeenpwned.com (Free)
-https://ghostproject.fr (Half free)
-https://www.dehashed.com (Half free)
-https://github.com/khast3x/h8mail (Could need non-free API's keys)
Find the leaked database:
-https://www.snusbase.com (Non-free)
-https://www.dehashed.com (Non-free)
Deepweb search engines:
-Notevil (http://hss3uro2hsxfogfq.onion/index.php)
-Candle (http://gjobqjj7wyczbqie.onion)
-Ahmia (http://msydqstlz2kzerdg.onion/)


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] Explain the practical steps for Emails - Practice

[Assistant]
EMAIL SEARCH/VALIDATION
Search for email address on a website:
-http://www.email-search.org/search-emails (Free)
Search for email addresses with a domain name:
-https://hunter.io (Half free)
Get the target's email format with domain name:
-https://www.email-format.com (Free)
Making email list with a domain by permuting name and surname: -http://metricsparrow.com/toolkit/email-permutator (Free)
Verify if an email address exists:
-https://verifalia.com/validate-email (Free)
Verify email validity, check SMTP servers:
-https://dnslytics.com/email-test (Free)

EMAIL/PASSWORD LEAKS
Verify if the email has been compromised in data breach: -https://haveibeenpwned.com (Free)
-https://ghostproject.fr (Half free)
-https://www.dehashed.com (Half free)
-https://github.com/khast3x/h8mail (Could need non-free API's keys)
Find the leaked database:
-https://www.snusbase.com (Non-free)
-https://www.dehashed.com (Non-free)
Deepweb search engines:
-Notevil (http://hss3uro2hsxfogfq.onion/index.php)
-Candle (http://gjobqjj7wyczbqie.onion)
-Ahmia (http://msydqstlz2kzerdg.onion/)

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

Explain the practical steps for Emails - Practice

Response:
EMAIL SEARCH/VALIDATION
Search for email address on a website:
-http://www.email-search.org/search-emails (Free)
Search for email addresses with a domain name:
-https://hunter.io (Half free)
Get the target's email format with domain name:
-https://www.email-format.com (Free)
Making email list with a domain by permuting name and surname: -http://metricsparrow.com/toolkit/email-permutator (Free)
Verify if an email address exists:
-https://verifalia.com/validate-email (Free)
Verify email validity, check SMTP servers:
-https://dnslytics.com/email-test (Free)

EMAIL/PASSWORD LEAKS
Verify if the email has been compromised in data breach: -https://haveibeenpwned.com (Free)
-https://ghostproject.fr (Half free)
-https://www.dehashed.com (Half free)
-https://github.com/khast3x/h8mail (Could need non-free API's keys)
Find the leaked database:
-https://www.snusbase.com (Non-free)
-https://www.dehashed.com (Non-free)
Deepweb search engines:
-Notevil (http://hss3uro2hsxfogfq.onion/index.php)
-Candle (http://gjobqjj7wyczbqie.onion)
-Ahmia (http://msydqstlz2kzerdg.onion/)


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] Describe Web infrastructure - Practice in the context of penetration testing

[Assistant]
shodan : net:"SUBNET/MASK"
 - org:"company name"

zoomeye : IP/MASK

fofa.so

Get the DNS servers, their records, and map the domain:\
\-https://dnsdumpster.com/\
IP enumeration + response header from domain name:\
\-https://zoomeye.org\
Find subdomains:\
\-https://findsubdomains.com\
Find technologies used and versions of a webapp:\
\-https://github.com/urbanadventurer/WhatWeb

Website caching platforms:\
\-https://archive.org/\
\-https://archive.is/

Google Analytics:

* The last piece of information that is really interesting is to check if the same Google Analytics / Adsense ID is used in several websites. This technique was discovered in 2015 and is well described here by Bellingcat.
* Certificates?

Using Google Dorks to find subdomains

```

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

Describe Web infrastructure - Practice in the context of penetration testing

Response:
shodan : net:"SUBNET/MASK"
 - org:"company name"

zoomeye : IP/MASK

fofa.so

Get the DNS servers, their records, and map the domain:\
\-https://dnsdumpster.com/\
IP enumeration + response header from domain name:\
\-https://zoomeye.org\
Find subdomains:\
\-https://findsubdomains.com\
Find technologies used and versions of a webapp:\
\-https://github.com/urbanadventurer/WhatWeb

Website caching platforms:\
\-https://archive.org/\
\-https://archive.is/

Google Analytics:

* The last piece of information that is really interesting is to check if the same Google Analytics / Adsense ID is used in several websites. This technique was discovered in 2015 and is well described here by Bellingcat.
* Certificates?

Using Google Dorks to find subdomains

```


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] How do I perform Web infrastructure - Practice?

[Assistant]
shodan : net:"SUBNET/MASK"
 - org:"company name"

zoomeye : IP/MASK

fofa.so

Get the DNS servers, their records, and map the domain:\
\-https://dnsdumpster.com/\
IP enumeration + response header from domain name:\
\-https://zoomeye.org\
Find subdomains:\
\-https://findsubdomains.com\
Find technologies used and versions of a webapp:\
\-https://github.com/urbanadventurer/WhatWeb

Website caching platforms:\
\-https://archive.org/\
\-https://archive.is/

Google Analytics:

* The last piece of information that is really interesting is to check if the same Google Analytics / Adsense ID is used in several websites. This technique was discovered in 2015 and is well described here by Bellingcat.
* Certificates?

Using Google Dorks to find subdomains

```

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

How do I perform Web infrastructure - Practice?

Response:
shodan : net:"SUBNET/MASK"
 - org:"company name"

zoomeye : IP/MASK

fofa.so

Get the DNS servers, their records, and map the domain:\
\-https://dnsdumpster.com/\
IP enumeration + response header from domain name:\
\-https://zoomeye.org\
Find subdomains:\
\-https://findsubdomains.com\
Find technologies used and versions of a webapp:\
\-https://github.com/urbanadventurer/WhatWeb

Website caching platforms:\
\-https://archive.org/\
\-https://archive.is/

Google Analytics:

* The last piece of information that is really interesting is to check if the same Google Analytics / Adsense ID is used in several websites. This technique was discovered in 2015 and is well described here by Bellingcat.
* Certificates?

Using Google Dorks to find subdomains

```


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] What is GEOINT - Theory?

[Assistant] Geospacial intelligence (GEOINT) is intelligence by analyzing geospacial maps and images about the human activity. This part will present some tools to find and analyze geospacial information. These information could be useful during a Red Team to scout the target's location in order to find building entrances, monitored areas, etc.

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

Response: Geospacial intelligence (GEOINT) is intelligence by analyzing geospacial maps and images about the human activity. This part will present some tools to find and analyze geospacial information. These information could be useful during a Red Team to scout the target's location in order to find building entrances, monitored areas, etc.


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] Walk me through GEOINT - Theory

[Assistant] Geospacial intelligence (GEOINT) is intelligence by analyzing geospacial maps and images about the human activity. This part will present some tools to find and analyze geospacial information. These information could be useful during a Red Team to scout the target's location in order to find building entrances, monitored areas, etc.

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

Response: Geospacial intelligence (GEOINT) is intelligence by analyzing geospacial maps and images about the human activity. This part will present some tools to find and analyze geospacial information. These information could be useful during a Red Team to scout the target's location in order to find building entrances, monitored areas, etc.


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] Describe GEOINT - Practice in the context of penetration testing

[Assistant]
MAPS\
Outdoor geoint:\
\-google.maps\
\-google.earth\
\-yandex maps\
Allowed areas for drones:\
\-https://www.drone-spot.tech/carte-des-spots-pour-faire-voler-son-drone.aspx\
\-

IMAGES\
Find general metadata:\
\-http://fotoforensics.com\
Find metadata + hidden pixels + error level analysis (ELA) + ect..\
\-http://exif.regex.info/exif.cgi\
\-https://29a.ch/photo-forensics\
Reverse image search:\
_**_-https://tineye.com/\
Search for similar images:\
\-https://images.google.com\
\-https://yandex.com/images/\
Remove image background:\
\-https://www.remove.bg/

> [!TIP]
> It is possible to image search within an image using for instance the Bing's tool:\
> -https://blogs.bing.com/search-quality-insights/2017-06/beyond-text-queries-searching-with-bing-visual-search

> [!TIP]
> In a journalistic context it is crucial to verify sources, including images. Here is a guide to verify image's veracity:\
> https://firstdraftnews.org/wp-content/uploads/2017/03/FDN_verificationguide_photos.pdf?x40896

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

Describe GEOINT - Practice in the context of penetration testing

Response:
MAPS\
Outdoor geoint:\
\-google.maps\
\-google.earth\
\-yandex maps\
Allowed areas for drones:\
\-https://www.drone-spot.tech/carte-des-spots-pour-faire-voler-son-drone.aspx\
\-

IMAGES\
Find general metadata:\
\-http://fotoforensics.com\
Find metadata + hidden pixels + error level analysis (ELA) + ect..\
\-http://exif.regex.info/exif.cgi\
\-https://29a.ch/photo-forensics\
Reverse image search:\
_**_-https://tineye.com/\
Search for similar images:\
\-https://images.google.com\
\-https://yandex.com/images/\
Remove image background:\
\-https://www.remove.bg/

> [!TIP]
> It is possible to image search within an image using for instance the Bing's tool:\
> -https://blogs.bing.com/search-quality-insights/2017-06/beyond-text-queries-searching-with-bing-visual-search

> [!TIP]
> In a journalistic context it is crucial to verify sources, including images. Here is a guide to verify image's veracity:\
> https://firstdraftnews.org/wp-content/uploads/2017/03/FDN_verificationguide_photos.pdf?x40896


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] How would I carry out GEOINT - Practice during a pentest?

[Assistant]
MAPS\
Outdoor geoint:\
\-google.maps\
\-google.earth\
\-yandex maps\
Allowed areas for drones:\
\-https://www.drone-spot.tech/carte-des-spots-pour-faire-voler-son-drone.aspx\
\-

IMAGES\
Find general metadata:\
\-http://fotoforensics.com\
Find metadata + hidden pixels + error level analysis (ELA) + ect..\
\-http://exif.regex.info/exif.cgi\
\-https://29a.ch/photo-forensics\
Reverse image search:\
_**_-https://tineye.com/\
Search for similar images:\
\-https://images.google.com\
\-https://yandex.com/images/\
Remove image background:\
\-https://www.remove.bg/

> [!TIP]
> It is possible to image search within an image using for instance the Bing's tool:\
> -https://blogs.bing.com/search-quality-insights/2017-06/beyond-text-queries-searching-with-bing-visual-search

> [!TIP]
> In a journalistic context it is crucial to verify sources, including images. Here is a guide to verify image's veracity:\
> https://firstdraftnews.org/wp-content/uploads/2017/03/FDN_verificationguide_photos.pdf?x40896

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

How would I carry out GEOINT - Practice during a pentest?

Response:
MAPS\
Outdoor geoint:\
\-google.maps\
\-google.earth\
\-yandex maps\
Allowed areas for drones:\
\-https://www.drone-spot.tech/carte-des-spots-pour-faire-voler-son-drone.aspx\
\-

IMAGES\
Find general metadata:\
\-http://fotoforensics.com\
Find metadata + hidden pixels + error level analysis (ELA) + ect..\
\-http://exif.regex.info/exif.cgi\
\-https://29a.ch/photo-forensics\
Reverse image search:\
_**_-https://tineye.com/\
Search for similar images:\
\-https://images.google.com\
\-https://yandex.com/images/\
Remove image background:\
\-https://www.remove.bg/

> [!TIP]
> It is possible to image search within an image using for instance the Bing's tool:\
> -https://blogs.bing.com/search-quality-insights/2017-06/beyond-text-queries-searching-with-bing-visual-search

> [!TIP]
> In a journalistic context it is crucial to verify sources, including images. Here is a guide to verify image's veracity:\
> https://firstdraftnews.org/wp-content/uploads/2017/03/FDN_verificationguide_photos.pdf?x40896


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] What is GEOINT - Sources?

[Assistant]
https://github.com/jivoi/awesome-osint#-geospatial-research-and-mapping-tools

https://www.bellingcat.com/resources/how-tos/2015/04/24/metadata-metauseful-metacreepy/

https://nothing2hide.org/fr/2019-09-18-guide-osint-2019/

https://www.bellingcat.com/resources/case-studies/2015/03/03/stunt-geolocation-verifying-the-unverifiable/

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

Response:
https://github.com/jivoi/awesome-osint#-geospatial-research-and-mapping-tools

https://www.bellingcat.com/resources/how-tos/2015/04/24/metadata-metauseful-metacreepy/

https://nothing2hide.org/fr/2019-09-18-guide-osint-2019/

https://www.bellingcat.com/resources/case-studies/2015/03/03/stunt-geolocation-verifying-the-unverifiable/


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] Walk me through GEOINT - Sources

[Assistant]
https://github.com/jivoi/awesome-osint#-geospatial-research-and-mapping-tools

https://www.bellingcat.com/resources/how-tos/2015/04/24/metadata-metauseful-metacreepy/

https://nothing2hide.org/fr/2019-09-18-guide-osint-2019/

https://www.bellingcat.com/resources/case-studies/2015/03/03/stunt-geolocation-verifying-the-unverifiable/

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

Response:
https://github.com/jivoi/awesome-osint#-geospatial-research-and-mapping-tools

https://www.bellingcat.com/resources/how-tos/2015/04/24/metadata-metauseful-metacreepy/

https://nothing2hide.org/fr/2019-09-18-guide-osint-2019/

https://www.bellingcat.com/resources/case-studies/2015/03/03/stunt-geolocation-verifying-the-unverifiable/


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] Give me an overview of OSINT - Theory

[Assistant]
When it comes to social engineering, gathering information about the target is crucial, especially if you target a specific person.

> If you know the enemy and know yourself, you need not fear the result of a hundred battles. If you know yourself but not the enemy, for every victory gained you will also suffer a defeat. If you know neither the enemy nor yourself, you will succumb in every battle. (_Art of war, Sun Tzu_)

In this part we will see how to get information about people, which could be useful to personalize social engineering attacks to make them more efficient.

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

Response:
When it comes to social engineering, gathering information about the target is crucial, especially if you target a specific person.

> If you know the enemy and know yourself, you need not fear the result of a hundred battles. If you know yourself but not the enemy, for every victory gained you will also suffer a defeat. If you know neither the enemy nor yourself, you will succumb in every battle. (_Art of war, Sun Tzu_)

In this part we will see how to get information about people, which could be useful to personalize social engineering attacks to make them more efficient.


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] What are the steps for OSINT - Theory?

[Assistant]
When it comes to social engineering, gathering information about the target is crucial, especially if you target a specific person.

> If you know the enemy and know yourself, you need not fear the result of a hundred battles. If you know yourself but not the enemy, for every victory gained you will also suffer a defeat. If you know neither the enemy nor yourself, you will succumb in every battle. (_Art of war, Sun Tzu_)

In this part we will see how to get information about people, which could be useful to personalize social engineering attacks to make them more efficient.

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

Response:
When it comes to social engineering, gathering information about the target is crucial, especially if you target a specific person.

> If you know the enemy and know yourself, you need not fear the result of a hundred battles. If you know yourself but not the enemy, for every victory gained you will also suffer a defeat. If you know neither the enemy nor yourself, you will succumb in every battle. (_Art of war, Sun Tzu_)

In this part we will see how to get information about people, which could be useful to personalize social engineering attacks to make them more efficient.


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] Tell me about OSINT - Practice

[Assistant]
General search:
- <https://webmii.com>
- Google Dork :
site:linkedin.com -inurl:dir "Company" "Name"

About companies:
- <https://opencorporates.com>
- <https://www.societe.com> (_France-only_)

Employee's feedback and information about companies:
- <https://www.glassdoor.com>
- <https://www.indeed.com/companies>

Twitter :
- <https://x.com/search-advanced>
- <https://twiteridfinder.com/>
- <https://onemilliontweetmap.com>

Social networks/medias:
* Twitter
* Facebook
* Instagram
* Pinterest
* Reddit
* VKontakte
* Tumblr
* LinkedIn
* DeviantArt
* Steam

Image recognition:
- <https://lens.google.com>
- <https://tineye.com>

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

Response:
General search:
- <https://webmii.com>
- Google Dork :
site:linkedin.com -inurl:dir "Company" "Name"

About companies:
- <https://opencorporates.com>
- <https://www.societe.com> (_France-only_)

Employee's feedback and information about companies:
- <https://www.glassdoor.com>
- <https://www.indeed.com/companies>

Twitter :
- <https://x.com/search-advanced>
- <https://twiteridfinder.com/>
- <https://onemilliontweetmap.com>

Social networks/medias:
* Twitter
* Facebook
* Instagram
* Pinterest
* Reddit
* VKontakte
* Tumblr
* LinkedIn
* DeviantArt
* Steam

Image recognition:
- <https://lens.google.com>
- <https://tineye.com>


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] How would I carry out OSINT - Practice during a pentest?

[Assistant]
General search:
- <https://webmii.com>
- Google Dork :
site:linkedin.com -inurl:dir "Company" "Name"

About companies:
- <https://opencorporates.com>
- <https://www.societe.com> (_France-only_)

Employee's feedback and information about companies:
- <https://www.glassdoor.com>
- <https://www.indeed.com/companies>

Twitter :
- <https://x.com/search-advanced>
- <https://twiteridfinder.com/>
- <https://onemilliontweetmap.com>

Social networks/medias:
* Twitter
* Facebook
* Instagram
* Pinterest
* Reddit
* VKontakte
* Tumblr
* LinkedIn
* DeviantArt
* Steam

Image recognition:
- <https://lens.google.com>
- <https://tineye.com>

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

How would I carry out OSINT - Practice during a pentest?

Response:
General search:
- <https://webmii.com>
- Google Dork :
site:linkedin.com -inurl:dir "Company" "Name"

About companies:
- <https://opencorporates.com>
- <https://www.societe.com> (_France-only_)

Employee's feedback and information about companies:
- <https://www.glassdoor.com>
- <https://www.indeed.com/companies>

Twitter :
- <https://x.com/search-advanced>
- <https://twiteridfinder.com/>
- <https://onemilliontweetmap.com>

Social networks/medias:
* Twitter
* Facebook
* Instagram
* Pinterest
* Reddit
* VKontakte
* Tumblr
* LinkedIn
* DeviantArt
* Steam

Image recognition:
- <https://lens.google.com>
- <https://tineye.com>


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] What is Android Debug Bridge ⚙ - Theory?

[Assistant] Android Debug Bridge (adb) is a versatile command-line tool that lets you communicate with a device. The adb command facilitates a variety of device actions, such as installing and debugging apps, and it provides access to a Unix shell that you can use to run a variety of commands on a device.

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

What is Android Debug Bridge ⚙ - Theory?

Response: Android Debug Bridge (adb) is a versatile command-line tool that lets you communicate with a device. The adb command facilitates a variety of device actions, such as installing and debugging apps, and it provides access to a Unix shell that you can use to run a variety of commands on a device.


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] Give me a guide on Android Debug Bridge ⚙ - Theory

[Assistant] Android Debug Bridge (adb) is a versatile command-line tool that lets you communicate with a device. The adb command facilitates a variety of device actions, such as installing and debugging apps, and it provides access to a Unix shell that you can use to run a variety of commands on a device.

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

Give me a guide on Android Debug Bridge ⚙ - Theory

Response: Android Debug Bridge (adb) is a versatile command-line tool that lets you communicate with a device. The adb command facilitates a variety of device actions, such as installing and debugging apps, and it provides access to a Unix shell that you can use to run a variety of commands on a device.


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] Explain Android Debug Bridge ⚙ - Practical

[Assistant]
| Command | Description |
| ----------------------- | ------------------------------------------- |
| adb devices | List connected devices |
| adb shell | shell on connected phone (then su for root) |
| adb install "app.apk" | install app on your phone |
| adb backup  | backup \ |
| adb logcat | logs on your phone |

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

Explain Android Debug Bridge ⚙ - Practical

Response:
| Command | Description |
| ----------------------- | ------------------------------------------- |
| adb devices | List connected devices |
| adb shell | shell on connected phone (then su for root) |
| adb install "app.apk" | install app on your phone |
| adb backup  | backup \ |
| adb logcat | logs on your phone |


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] What are the steps for Android Debug Bridge ⚙ - Practical?

[Assistant]
| Command | Description |
| ----------------------- | ------------------------------------------- |
| adb devices | List connected devices |
| adb shell | shell on connected phone (then su for root) |
| adb install "app.apk" | install app on your phone |
| adb backup  | backup \ |
| adb logcat | logs on your phone |

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

What are the steps for Android Debug Bridge ⚙ - Practical?

Response:
| Command | Description |
| ----------------------- | ------------------------------------------- |
| adb devices | List connected devices |
| adb shell | shell on connected phone (then su for root) |
| adb install "app.apk" | install app on your phone |
| adb backup  | backup \ |
| adb logcat | logs on your phone |


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] Describe Android Debug Bridge ⚙ - Frequent problems in the context of penetration testing

[Assistant] Sometimes ADB can no longer connect to the mobile. There are several reasons for this.

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

Describe Android Debug Bridge ⚙ - Frequent problems in the context of penetration testing

Response: Sometimes ADB can no longer connect to the mobile. There are several reasons for this.


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] Show me how to do Android Debug Bridge ⚙ - Frequent problems

[Assistant] Sometimes ADB can no longer connect to the mobile. There are several reasons for this.

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

Show me how to do Android Debug Bridge ⚙ - Frequent problems

Response: Sometimes ADB can no longer connect to the mobile. There are several reasons for this.


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] Explain Android Debug Bridge ⚙ - Make sure Developers options and USB debugging are activated

[Assistant]
* Enable Developers options

1. Go to the settings of the Android device.
2. Go to the system settings.
3. Go to "About the phone".
4. Tap 7 times "build number".
5. The options for developers appear in the system settings.

* Inside Developers options, enable USB Debugging

> When in doubt, reboot (Confucious)

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

Explain Android Debug Bridge ⚙ - Make sure Developers options and USB debugging are activated

Response:
* Enable Developers options

1. Go to the settings of the Android device.
2. Go to the system settings.
3. Go to "About the phone".
4. Tap 7 times "build number".
5. The options for developers appear in the system settings.

* Inside Developers options, enable USB Debugging

> When in doubt, reboot (Confucious)


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] Show me how to do Android Debug Bridge ⚙ - Make sure Developers options and USB debugging are activated

[Assistant]
* Enable Developers options

1. Go to the settings of the Android device.
2. Go to the system settings.
3. Go to "About the phone".
4. Tap 7 times "build number".
5. The options for developers appear in the system settings.

* Inside Developers options, enable USB Debugging

> When in doubt, reboot (Confucious)

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

Show me how to do Android Debug Bridge ⚙ - Make sure Developers options and USB debugging are activated

Response:
* Enable Developers options

1. Go to the settings of the Android device.
2. Go to the system settings.
3. Go to "About the phone".
4. Tap 7 times "build number".
5. The options for developers appear in the system settings.

* Inside Developers options, enable USB Debugging

> When in doubt, reboot (Confucious)


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] What is APK transform - Theory?

[Assistant]
An .APK file (e.g. Android Package) is a compressed collection of files (i.e. a package) for Android. It could be extracted as an regular archive.

A .DEX file (.e.g Dalvik EXecutable) is an executable file saved in a format that contains compiled code that Android systems can run.

When auditing an APK, transforming it to human-readable formats is usually required.

* smali and baksmali are DEX assembler and disassembler respectively
* d2j-dex2jar can be used to convert DEX files to .class files (zipped as .jar)
* jadx is a DEX to Java decompiler. It can be used in CLI and GUI for producing Java source code out of Android DEX and APK files.

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

Response:
An .APK file (e.g. Android Package) is a compressed collection of files (i.e. a package) for Android. It could be extracted as an regular archive.

A .DEX file (.e.g Dalvik EXecutable) is an executable file saved in a format that contains compiled code that Android systems can run.

When auditing an APK, transforming it to human-readable formats is usually required.

* smali and baksmali are DEX assembler and disassembler respectively
* d2j-dex2jar can be used to convert DEX files to .class files (zipped as .jar)
* jadx is a DEX to Java decompiler. It can be used in CLI and GUI for producing Java source code out of Android DEX and APK files.


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] Explain the practical steps for APK transform - Theory

[Assistant]
An .APK file (e.g. Android Package) is a compressed collection of files (i.e. a package) for Android. It could be extracted as an regular archive.

A .DEX file (.e.g Dalvik EXecutable) is an executable file saved in a format that contains compiled code that Android systems can run.

When auditing an APK, transforming it to human-readable formats is usually required.

* smali and baksmali are DEX assembler and disassembler respectively
* d2j-dex2jar can be used to convert DEX files to .class files (zipped as .jar)
* jadx is a DEX to Java decompiler. It can be used in CLI and GUI for producing Java source code out of Android DEX and APK files.

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

Explain the practical steps for APK transform - Theory

Response:
An .APK file (e.g. Android Package) is a compressed collection of files (i.e. a package) for Android. It could be extracted as an regular archive.

A .DEX file (.e.g Dalvik EXecutable) is an executable file saved in a format that contains compiled code that Android systems can run.

When auditing an APK, transforming it to human-readable formats is usually required.

* smali and baksmali are DEX assembler and disassembler respectively
* d2j-dex2jar can be used to convert DEX files to .class files (zipped as .jar)
* jadx is a DEX to Java decompiler. It can be used in CLI and GUI for producing Java source code out of Android DEX and APK files.


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] How does APK transform - Add Kali repo to your sources work?

[Assistant]
``
echo "deb http://http.kali.org/kali kali-rolling main contrib non-free" >> /etc/apt/sources.list

apt-get update
`

Note that if you haven’t updated your Kali installation in some time, you will like receive a GPG error about the repository key being expired (ED444FF07D8D0BF6). Fortunately, this issue is quickly resolved by running the following as root:

`
wget -q -O - https://archive.kali.org/archive-key.asc | apt-key add
``

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

How does APK transform - Add Kali repo to your sources work?

Response:
``
echo "deb http://http.kali.org/kali kali-rolling main contrib non-free" >> /etc/apt/sources.list

apt-get update
`

Note that if you haven’t updated your Kali installation in some time, you will like receive a GPG error about the repository key being expired (ED444FF07D8D0BF6). Fortunately, this issue is quickly resolved by running the following as root:

`
wget -q -O - https://archive.kali.org/archive-key.asc | apt-key add
``


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] Walk me through APK transform - Add Kali repo to your sources

[Assistant]
``
echo "deb http://http.kali.org/kali kali-rolling main contrib non-free" >> /etc/apt/sources.list

apt-get update
`

Note that if you haven’t updated your Kali installation in some time, you will like receive a GPG error about the repository key being expired (ED444FF07D8D0BF6). Fortunately, this issue is quickly resolved by running the following as root:

`
wget -q -O - https://archive.kali.org/archive-key.asc | apt-key add
``

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

Walk me through APK transform - Add Kali repo to your sources

Response:
``
echo "deb http://http.kali.org/kali kali-rolling main contrib non-free" >> /etc/apt/sources.list

apt-get update
`

Note that if you haven’t updated your Kali installation in some time, you will like receive a GPG error about the repository key being expired (ED444FF07D8D0BF6). Fortunately, this issue is quickly resolved by running the following as root:

`
wget -q -O - https://archive.kali.org/archive-key.asc | apt-key add
``


[System] You are a penetration testing tool expert. Provide the exact command or sequence of commands to accomplish the task, including required flags and arguments. Format multi-step operations as numbered steps.

[User] What is the echo syntax for apk transform - add kali repo to your sources?

[Assistant]
echo "deb http://http.kali.org/kali kali-rolling main contrib non-free" >> /etc/apt/sources.list

apt-get update

System: You are a penetration testing tool expert. Provide the exact command or sequence of commands to accomplish the task, including required flags and arguments. Format multi-step operations as numbered steps.

What is the echo syntax for apk transform - add kali repo to your sources?

Response:
echo "deb http://http.kali.org/kali kali-rolling main contrib non-free" >> /etc/apt/sources.list

apt-get update


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] What are the steps for APK transform - Add Kali repo to your sources?

[Assistant]
echo "deb http://http.kali.org/kali kali-rolling main contrib non-free" >> /etc/apt/sources.list

apt-get update

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

What are the steps for APK transform - Add Kali repo to your sources?

Response:
echo "deb http://http.kali.org/kali kali-rolling main contrib non-free" >> /etc/apt/sources.list

apt-get update


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] What does this command do: `echo "deb http://http.kali.org/kali kali-rolling main contrib non-free" >> /etc/apt/sources.list`?

[Assistant] This command is used for apk transform - add kali repo to your sources. Add Kali repo to your sources

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

What does this command do: `echo "deb http://http.kali.org/kali kali-rolling main contrib non-free" >> /etc/apt/sources.list`?

Response: This command is used for apk transform - add kali repo to your sources. Add Kali repo to your sources


[System] You are a penetration testing tool expert. Provide the exact command or sequence of commands to accomplish the task, including required flags and arguments. Format multi-step operations as numbered steps.

[User] How do I use wget for apk transform - add kali repo to your sources?

[Assistant] wget -q -O - https://archive.kali.org/archive-key.asc | apt-key add

System: You are a penetration testing tool expert. Provide the exact command or sequence of commands to accomplish the task, including required flags and arguments. Format multi-step operations as numbered steps.

How do I use wget for apk transform - add kali repo to your sources?

Response: wget -q -O - https://archive.kali.org/archive-key.asc | apt-key add


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] Give me a guide on APK transform - Add Kali repo to your sources

[Assistant] wget -q -O - https://archive.kali.org/archive-key.asc | apt-key add

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

Give me a guide on APK transform - Add Kali repo to your sources

Response: wget -q -O - https://archive.kali.org/archive-key.asc | apt-key add


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] What does this command do: `wget -q -O - https://archive.kali.org/archive-key.asc | apt-key add`?

[Assistant] This command is used for apk transform - add kali repo to your sources. Add Kali repo to your sources

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

What does this command do: `wget -q -O - https://archive.kali.org/archive-key.asc | apt-key add`?

Response: This command is used for apk transform - add kali repo to your sources. Add Kali repo to your sources


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] Describe APK transform - Install softwares in the context of penetration testing

[Assistant]
``
apt install unzip smali apktool dex2jar jadx
`
:::

``bash

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

Describe APK transform - Install softwares in the context of penetration testing

Response:
``
apt install unzip smali apktool dex2jar jadx
`
:::

``bash


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] Show me how to do APK transform - Install softwares

[Assistant]
``
apt install unzip smali apktool dex2jar jadx
`
:::

``bash

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

Show me how to do APK transform - Install softwares

Response:
``
apt install unzip smali apktool dex2jar jadx
`
:::

``bash


[System] You are a penetration testing tool expert. Provide the exact command or sequence of commands to accomplish the task, including required flags and arguments. Format multi-step operations as numbered steps.

[User] Show me the apt command for apk transform - install softwares

[Assistant] apt install unzip smali apktool dex2jar jadx

System: You are a penetration testing tool expert. Provide the exact command or sequence of commands to accomplish the task, including required flags and arguments. Format multi-step operations as numbered steps.

Show me the apt command for apk transform - install softwares

Response: apt install unzip smali apktool dex2jar jadx


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] Give me a guide on APK transform - Install softwares

[Assistant] apt install unzip smali apktool dex2jar jadx

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

Give me a guide on APK transform - Install softwares

Response: apt install unzip smali apktool dex2jar jadx


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] What does this command do: `apt install unzip smali apktool dex2jar jadx`?

[Assistant] This command is used for apk transform - install softwares. Install softwares

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

What does this command do: `apt install unzip smali apktool dex2jar jadx`?

Response: This command is used for apk transform - install softwares. Install softwares


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] Describe Disassemble DEX in the context of penetration testing

[Assistant] baksmali d ./application-unzipped/classes.dex -o ./application-unzipped/classes.dex.out/ 2>/dev/null

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

Describe Disassemble DEX in the context of penetration testing

Response: baksmali d ./application-unzipped/classes.dex -o ./application-unzipped/classes.dex.out/ 2>/dev/null


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] Walk me through Disassemble DEX

[Assistant] baksmali d ./application-unzipped/classes.dex -o ./application-unzipped/classes.dex.out/ 2>/dev/null

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

Response: baksmali d ./application-unzipped/classes.dex -o ./application-unzipped/classes.dex.out/ 2>/dev/null


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] Describe Decompile .DEX files in the context of penetration testing

[Assistant] jadx application.apk -j $(grep -c ^processor /proc/cpuinfo) -d ./application-jadx/ > /dev/null

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

Describe Decompile .DEX files in the context of penetration testing

Response: jadx application.apk -j $(grep -c ^processor /proc/cpuinfo) -d ./application-jadx/ > /dev/null


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] Walk me through Decompile .DEX files

[Assistant] jadx application.apk -j $(grep -c ^processor /proc/cpuinfo) -d ./application-jadx/ > /dev/null

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

Response: jadx application.apk -j $(grep -c ^processor /proc/cpuinfo) -d ./application-jadx/ > /dev/null


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] What is Unpack the APK?

[Assistant]
apktool d application.apk -o ./application-unpacked/
```

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

Response:
apktool d application.apk -o ./application-unpacked/
```


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] How to execute Unpack the APK?

[Assistant]
apktool d application.apk -o ./application-unpacked/
```

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

Response:
apktool d application.apk -o ./application-unpacked/
```


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] Tell me about Magisk - Theory

[Assistant]
> Magisk is a suite of open source software for customizing Android, supporting devices higher than Android 6.0.\
> Some highlight features:
>
> * MagiskSU: Provide root access for applications
> * Magisk Modules: Modify read-only partitions by installing modules
> * MagiskBoot: The most complete tool for unpacking and repacking Android boot images
> * Zygisk: Run code in every Android applications' processes
>
> (Magisk GitHub repo)

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

Response:
> Magisk is a suite of open source software for customizing Android, supporting devices higher than Android 6.0.\
> Some highlight features:
>
> * MagiskSU: Provide root access for applications
> * Magisk Modules: Modify read-only partitions by installing modules
> * MagiskBoot: The most complete tool for unpacking and repacking Android boot images
> * Zygisk: Run code in every Android applications' processes
>
> (Magisk GitHub repo)


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] Walk me through Magisk - Theory

[Assistant]
> Magisk is a suite of open source software for customizing Android, supporting devices higher than Android 6.0.\
> Some highlight features:
>
> * MagiskSU: Provide root access for applications
> * Magisk Modules: Modify read-only partitions by installing modules
> * MagiskBoot: The most complete tool for unpacking and repacking Android boot images
> * Zygisk: Run code in every Android applications' processes
>
> (Magisk GitHub repo)

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

Response:
> Magisk is a suite of open source software for customizing Android, supporting devices higher than Android 6.0.\
> Some highlight features:
>
> * MagiskSU: Provide root access for applications
> * Magisk Modules: Modify read-only partitions by installing modules
> * MagiskBoot: The most complete tool for unpacking and repacking Android boot images
> * Zygisk: Run code in every Android applications' processes
>
> (Magisk GitHub repo)


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] Explain Magisk - Install Magisk

[Assistant]
1. Download latest APK release at https://github.com/topjohnwu/Magisk/releases
2. Install package on the phone

``bash
adb install "Magisk-vXX.Y.apk"
``

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

Response:
1. Download latest APK release at https://github.com/topjohnwu/Magisk/releases
2. Install package on the phone

``bash
adb install "Magisk-vXX.Y.apk"
``


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] How to execute Magisk - Install Magisk?

[Assistant]
1. Download latest APK release at https://github.com/topjohnwu/Magisk/releases
2. Install package on the phone

``bash
adb install "Magisk-vXX.Y.apk"
``

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

Response:
1. Download latest APK release at https://github.com/topjohnwu/Magisk/releases
2. Install package on the phone

``bash
adb install "Magisk-vXX.Y.apk"
``


[System] You are a penetration testing tool expert. Provide the exact command or sequence of commands to accomplish the task, including required flags and arguments. Format multi-step operations as numbered steps.

[User] Give me the adb command to magisk - install magisk

[Assistant] adb install "Magisk-vXX.Y.apk"

System: You are a penetration testing tool expert. Provide the exact command or sequence of commands to accomplish the task, including required flags and arguments. Format multi-step operations as numbered steps.

Give me the adb command to magisk - install magisk

Response: adb install "Magisk-vXX.Y.apk"


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] How do I perform Magisk - Install Magisk?

[Assistant] adb install "Magisk-vXX.Y.apk"

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

How do I perform Magisk - Install Magisk?

Response: adb install "Magisk-vXX.Y.apk"


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] What does this command do: `adb install "Magisk-vXX.Y.apk"`?

[Assistant] This command is used for magisk - install magisk. Install Magisk

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

What does this command do: `adb install "Magisk-vXX.Y.apk"`?

Response: This command is used for magisk - install magisk. Install Magisk


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] What is Magisk - Install Magisk modules?

[Assistant]
1. Download ZIP module (e.g. MagiskTrustUserCerts, MagiskHide, ...)
2. Push the archive on the phone

``bash
adb push "module.zip" "/sdcard/Download"
``

Once the archive is on the phone's storage, the module can be installed and enabled within the Magisk app

* Magisk App --> Modules --> Install from storage --> Reboot
* After reboot, enable the package

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

What is Magisk - Install Magisk modules?

Response:
1. Download ZIP module (e.g. MagiskTrustUserCerts, MagiskHide, ...)
2. Push the archive on the phone

``bash
adb push "module.zip" "/sdcard/Download"
``

Once the archive is on the phone's storage, the module can be installed and enabled within the Magisk app

* Magisk App --> Modules --> Install from storage --> Reboot
* After reboot, enable the package


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] Explain the practical steps for Magisk - Install Magisk modules

[Assistant]
1. Download ZIP module (e.g. MagiskTrustUserCerts, MagiskHide, ...)
2. Push the archive on the phone

``bash
adb push "module.zip" "/sdcard/Download"
``

Once the archive is on the phone's storage, the module can be installed and enabled within the Magisk app

* Magisk App --> Modules --> Install from storage --> Reboot
* After reboot, enable the package

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

Explain the practical steps for Magisk - Install Magisk modules

Response:
1. Download ZIP module (e.g. MagiskTrustUserCerts, MagiskHide, ...)
2. Push the archive on the phone

``bash
adb push "module.zip" "/sdcard/Download"
``

Once the archive is on the phone's storage, the module can be installed and enabled within the Magisk app

* Magisk App --> Modules --> Install from storage --> Reboot
* After reboot, enable the package


[System] You are a penetration testing tool expert. Provide the exact command or sequence of commands to accomplish the task, including required flags and arguments. Format multi-step operations as numbered steps.

[User] How do I use adb for magisk - install magisk modules?

[Assistant] adb push "module.zip" "/sdcard/Download"

System: You are a penetration testing tool expert. Provide the exact command or sequence of commands to accomplish the task, including required flags and arguments. Format multi-step operations as numbered steps.

How do I use adb for magisk - install magisk modules?

Response: adb push "module.zip" "/sdcard/Download"


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] Give me a guide on Magisk - Install Magisk modules

[Assistant] adb push "module.zip" "/sdcard/Download"

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

Give me a guide on Magisk - Install Magisk modules

Response: adb push "module.zip" "/sdcard/Download"


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] What does this command do: `adb push "module.zip" "/sdcard/Download"`?

[Assistant] This command is used for magisk - install magisk modules. Install Magisk modules

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

What does this command do: `adb push "module.zip" "/sdcard/Download"`?

Response: This command is used for magisk - install magisk modules. Install Magisk modules


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] Describe Android in the context of penetration testing

[Assistant]
Auditing Android apps usually requires to be able to

* capture and handles requests generated by the phone (e.g. through a proxy like Burp)
* communicate with the phone easily ("android debug bridge", a.k.a. ADB)
* handle all sorts of data (i.e. memory, logs, cache, backups)

This could be done using a real rooted phone, or a simulated one (e.g. MobSF, Genymotion).

Several tools allow to enumerate the attack surface of an APK (e.g. Drozer or AndroidManifest.xml showing exported services and features).

Android pentesting can be time-consuming. A reading of decompiled files allows to understand the role of functions used (APK transformation), hooks can be placed during the execution of the application in order to bypass its original behaviour (i.e. Frida, Objection).

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

Describe Android in the context of penetration testing

Response:
Auditing Android apps usually requires to be able to

* capture and handles requests generated by the phone (e.g. through a proxy like Burp)
* communicate with the phone easily ("android debug bridge", a.k.a. ADB)
* handle all sorts of data (i.e. memory, logs, cache, backups)

This could be done using a real rooted phone, or a simulated one (e.g. MobSF, Genymotion).

Several tools allow to enumerate the attack surface of an APK (e.g. Drozer or AndroidManifest.xml showing exported services and features).

Android pentesting can be time-consuming. A reading of decompiled files allows to understand the role of functions used (APK transformation), hooks can be placed during the execution of the application in order to bypass its original behaviour (i.e. Frida, Objection).


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] What are the steps for Android?

[Assistant]
Auditing Android apps usually requires to be able to

* capture and handles requests generated by the phone (e.g. through a proxy like Burp)
* communicate with the phone easily ("android debug bridge", a.k.a. ADB)
* handle all sorts of data (i.e. memory, logs, cache, backups)

This could be done using a real rooted phone, or a simulated one (e.g. MobSF, Genymotion).

Several tools allow to enumerate the attack surface of an APK (e.g. Drozer or AndroidManifest.xml showing exported services and features).

Android pentesting can be time-consuming. A reading of decompiled files allows to understand the role of functions used (APK transformation), hooks can be placed during the execution of the application in order to bypass its original behaviour (i.e. Frida, Objection).

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

Response:
Auditing Android apps usually requires to be able to

* capture and handles requests generated by the phone (e.g. through a proxy like Burp)
* communicate with the phone easily ("android debug bridge", a.k.a. ADB)
* handle all sorts of data (i.e. memory, logs, cache, backups)

This could be done using a real rooted phone, or a simulated one (e.g. MobSF, Genymotion).

Several tools allow to enumerate the attack surface of an APK (e.g. Drozer or AndroidManifest.xml showing exported services and features).

Android pentesting can be time-consuming. A reading of decompiled files allows to understand the role of functions used (APK transformation), hooks can be placed during the execution of the application in order to bypass its original behaviour (i.e. Frida, Objection).


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] Tell me about Android - Audits

[Assistant]
Auditing Android covers multiples domains.

* Applications Storage
 * Presence of sensitive data inside files (API_KEY, secrets)
 * Presence of sensitive data inside backups
 * Presence of sensitive data inside logs
 * Presence of sensitive data inside cache
 * Presence of sensitive data inside memory
* Communications
 * Certificate pinning
 * Audit communications between phone and backends
* Auditing platforms
 * Applications permissions
 * Fragments injection
 * Webview's user input
 * Webview's methods
 * Object persistence
 * Instants Apps
 * Custom URLs

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

Response:
Auditing Android covers multiples domains.

* Applications Storage
 * Presence of sensitive data inside files (API_KEY, secrets)
 * Presence of sensitive data inside backups
 * Presence of sensitive data inside logs
 * Presence of sensitive data inside cache
 * Presence of sensitive data inside memory
* Communications
 * Certificate pinning
 * Audit communications between phone and backends
* Auditing platforms
 * Applications permissions
 * Fragments injection
 * Webview's user input
 * Webview's methods
 * Object persistence
 * Instants Apps
 * Custom URLs


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] Walk me through Android - Audits

[Assistant]
Auditing Android covers multiples domains.

* Applications Storage
 * Presence of sensitive data inside files (API_KEY, secrets)
 * Presence of sensitive data inside backups
 * Presence of sensitive data inside logs
 * Presence of sensitive data inside cache
 * Presence of sensitive data inside memory
* Communications
 * Certificate pinning
 * Audit communications between phone and backends
* Auditing platforms
 * Applications permissions
 * Fragments injection
 * Webview's user input
 * Webview's methods
 * Object persistence
 * Instants Apps
 * Custom URLs

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

Response:
Auditing Android covers multiples domains.

* Applications Storage
 * Presence of sensitive data inside files (API_KEY, secrets)
 * Presence of sensitive data inside backups
 * Presence of sensitive data inside logs
 * Presence of sensitive data inside cache
 * Presence of sensitive data inside memory
* Communications
 * Certificate pinning
 * Audit communications between phone and backends
* Auditing platforms
 * Applications permissions
 * Fragments injection
 * Webview's user input
 * Webview's methods
 * Object persistence
 * Instants Apps
 * Custom URLs


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] Explain Android - Setup

[Assistant]
Auditing an Android APK requires a setup made of:

* An Android smartphone (e.g. Pixel3A, or any other smartphone easy enough to root) or a Genymotion virtual machine (e.g. using MobSF)
* A few utilities directly on the phone (whether it's real or virtual)
 * Frida Server
 * Drozer Server
 * Magisk App with Modules
* A few utilities on the computer
 * Frida client
 * Drozer client
 * MobSF
 * A proxy (e.g. Burp Suite)

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

Response:
Auditing an Android APK requires a setup made of:

* An Android smartphone (e.g. Pixel3A, or any other smartphone easy enough to root) or a Genymotion virtual machine (e.g. using MobSF)
* A few utilities directly on the phone (whether it's real or virtual)
 * Frida Server
 * Drozer Server
 * Magisk App with Modules
* A few utilities on the computer
 * Frida client
 * Drozer client
 * MobSF
 * A proxy (e.g. Burp Suite)


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] Give me a guide on Android - Setup

[Assistant]
Auditing an Android APK requires a setup made of:

* An Android smartphone (e.g. Pixel3A, or any other smartphone easy enough to root) or a Genymotion virtual machine (e.g. using MobSF)
* A few utilities directly on the phone (whether it's real or virtual)
 * Frida Server
 * Drozer Server
 * Magisk App with Modules
* A few utilities on the computer
 * Frida client
 * Drozer client
 * MobSF
 * A proxy (e.g. Burp Suite)

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

Response:
Auditing an Android APK requires a setup made of:

* An Android smartphone (e.g. Pixel3A, or any other smartphone easy enough to root) or a Genymotion virtual machine (e.g. using MobSF)
* A few utilities directly on the phone (whether it's real or virtual)
 * Frida Server
 * Drozer Server
 * Magisk App with Modules
* A few utilities on the computer
 * Frida client
 * Drozer client
 * MobSF
 * A proxy (e.g. Burp Suite)


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] What is Certificate pinning?

[Assistant]
bypass (need jailbroken)

* https://github.com/nabla-c0d3/ssl-kill-switch2
* https://portswigger.net/burp/documentation/desktop/tools/mobile-assistant/installing

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

Response:
bypass (need jailbroken)

* https://github.com/nabla-c0d3/ssl-kill-switch2
* https://portswigger.net/burp/documentation/desktop/tools/mobile-assistant/installing


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] Walk me through Certificate pinning

[Assistant]
bypass (need jailbroken)

* https://github.com/nabla-c0d3/ssl-kill-switch2
* https://portswigger.net/burp/documentation/desktop/tools/mobile-assistant/installing

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

Response:
bypass (need jailbroken)

* https://github.com/nabla-c0d3/ssl-kill-switch2
* https://portswigger.net/burp/documentation/desktop/tools/mobile-assistant/installing


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] What is Locks?

[Assistant]
generate STL files for keys https://keygen.co/

decode key https://github.com/MaximeBeasse/KeyDecoder

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

Response:
generate STL files for keys https://keygen.co/

decode key https://github.com/MaximeBeasse/KeyDecoder


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] Explain the practical steps for Locks

[Assistant]
generate STL files for keys https://keygen.co/

decode key https://github.com/MaximeBeasse/KeyDecoder

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

Response:
generate STL files for keys https://keygen.co/

decode key https://github.com/MaximeBeasse/KeyDecoder


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] How does Network Access Control - Theory work?

[Assistant] NAC (Network Access Control) acts as a kind of a gatekeeper to the local network infrastructure. It usually works with whitelists, blacklists, authentication requirements or host scanning to restrict access and keep unwanted devices out of the network.

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

How does Network Access Control - Theory work?

Response: NAC (Network Access Control) acts as a kind of a gatekeeper to the local network infrastructure. It usually works with whitelists, blacklists, authentication requirements or host scanning to restrict access and keep unwanted devices out of the network.


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] Show me how to do Network Access Control - Theory

[Assistant] NAC (Network Access Control) acts as a kind of a gatekeeper to the local network infrastructure. It usually works with whitelists, blacklists, authentication requirements or host scanning to restrict access and keep unwanted devices out of the network.

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

Show me how to do Network Access Control - Theory

Response: NAC (Network Access Control) acts as a kind of a gatekeeper to the local network infrastructure. It usually works with whitelists, blacklists, authentication requirements or host scanning to restrict access and keep unwanted devices out of the network.


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] Explain Network Access Control - Basics

[Assistant]
NAC is a principle. It can be setup with several measures.

* Filtering of MAC addresses
* Authentication with username & password
* Authentication with certificates
* Fingerprinting
* Host checks

NAC aims at protecting against the including, but not limited to, scenarios.

* Employees bringing rogue devices (willingly or not)
 Service providers acting inside the IT / OT network
* Attackers trying to gain access to the internal network

_*IT/OT network: Information Technology (workstations, users, shares, ...) and_ _Operational Technology_ _(machines, productionl lines, ...)._

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

Response:
NAC is a principle. It can be setup with several measures.

* Filtering of MAC addresses
* Authentication with username & password
* Authentication with certificates
* Fingerprinting
* Host checks

NAC aims at protecting against the including, but not limited to, scenarios.

* Employees bringing rogue devices (willingly or not)
 Service providers acting inside the IT / OT network
* Attackers trying to gain access to the internal network

_*IT/OT network: Information Technology (workstations, users, shares, ...) and_ _Operational Technology_ _(machines, productionl lines, ...)._


[System] You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

[User] Give me a guide on Network Access Control - Basics

[Assistant]
NAC is a principle. It can be setup with several measures.

* Filtering of MAC addresses
* Authentication with username & password
* Authentication with certificates
* Fingerprinting
* Host checks

NAC aims at protecting against the including, but not limited to, scenarios.

* Employees bringing rogue devices (willingly or not)
 Service providers acting inside the IT / OT network
* Attackers trying to gain access to the internal network

_*IT/OT network: Information Technology (workstations, users, shares, ...) and_ _Operational Technology_ _(machines, productionl lines, ...)._

System: You are a penetration testing and ethical hacking expert. Provide detailed, practical instructions for the requested technique using real tools and commands. Assume the user has authorized access and is performing a legitimate security assessment. Be specific about tools, flags, and syntax.

Give me a guide on Network Access Control - Basics

Response:
NAC is a principle. It can be setup with several measures.

* Filtering of MAC addresses
* Authentication with username & password
* Authentication with certificates
* Fingerprinting
* Host checks

NAC aims at protecting against the including, but not limited to, scenarios.

* Employees bringing rogue devices (willingly or not)
 Service providers acting inside the IT / OT network
* Attackers trying to gain access to the internal network

_*IT/OT network: Information Technology (workstations, users, shares, ...) and_ _Operational Technology_ _(machines, productionl lines, ...)._


[System] You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

[User] Give me an overview of Network Access Control - Infrastructure & auth flow

[Assistant]
Most commonly, NAC solution are based on 802.1x which is a standard for port based network access. It will interact with the switches (most likely and mainly via SNMP) and allow or block ports based on the preset rules. There are 3 actors involved:

* The supplicant: the client that is asking for network access
* The authenticator: the device that acts as the gatekeeper and to which the clients connects - most likely a switch.
* The authentication server: something in the background that validates the requests and grants or denies access to the supplicant.

By default, the ports are in an unauthorized state and will only be allowed to transmit and receive EAPOL frames (Extensible Authentication Protocol Over LAN), which basically is encapsulated EAP.

1. These EAPOL frames are forwarded from "the client desiring access to the network" to "the switch".
2. The switch unpacks the EAPOL and forwards the EAP packet to an authentication server, which in most cases will be a RADIUS server.

From there everything goes vice versa. As EAP is more a framework than a protocol, it contains several EAP methods for authentication. The most commonly known variants are EAP-TLS, EAP-MD5, EAP-PSK and EAP-IKEv2, allowing to authenticate by preshared keys, passwords, certificates or other mechanisms.

![](<./assets/802.1x auth flow.png>)
802.1x auth flow (Wikipedia){.caption}

When all checks are passed, the port will be switched to authorized and thus be allowed for normal network traffic.

An infrastructure that is capable of talking 802.1x is needed for all this to work properly. The infrastructure is comprised of supplicants (i.e. clients), authenticators (i.e. switches) and authentication servers (i.e. RADIUS servers).

A short overview from Gartner lists and reviews many NAC solutions: NAC Reviews & Ratings.

System: You are a cybersecurity educator. Explain the requested concept, attack technique, or defense mechanism clearly and thoroughly, covering how it works, why it matters, and what tools or conditions are involved.

Give me an overview of Network Access Control - Infrastructure & auth flow

Response:
Most commonly, NAC solution are based on 802.1x which is a standard for port based network access. It will interact with the switches (most likely and mainly via SNMP) and allow or block ports based on the preset rules. There are 3 actors involved:

* The supplicant: the client that is asking for network access
* The authenticator: the device that acts as the gatekeeper and to which the clients connects - most likely a switch.
* The authentication server: something in the background that validates the requests and grants or denies access to the supplicant.

By default, the ports are in an unauthorized state and will only be allowed to transmit and receive EAPOL frames (Extensible Authentication Protocol Over LAN), which basically is encapsulated EAP.

1. These EAPOL frames are forwarded from "the client desiring access to the network" to "the switch".
2. The switch unpacks the EAPOL and forwards the EAP packet to an authentication server, which in most cases will be a RADIUS server.

From there everything goes vice versa. As EAP is more a framework than a protocol, it contains several EAP methods for authentication. The most commonly known variants are EAP-TLS, EAP-MD5, EAP-PSK and EAP-IKEv2, allowing to authenticate by preshared keys, passwords, certificates or other mechanisms.

![](<./assets/802.1x auth flow.png>)
802.1x auth flow (Wikipedia){.caption}

When all checks are passed, the port will be switched to authorized and thus be allowed for normal network traffic.

An infrastructure that is capable of talking 802.1x is needed for all this to work properly. The infrastructure is comprised of supplicants (i.e. clients), authenticators (i.e. switches) and authentication servers (i.e. RADIUS servers).

A short overview from Gartner lists and reviews many NAC solutions: NAC Reviews & Ratings.