ip route add 172.10.1.0/24 via 10.10.10.10(VPN Gateway)
If you don’t know what the VPN gateway is then try it with every host that is up in the network.If you want external sources for routing/pivoting, you can look at this one I found somewhere in the depths of Reddit (Don’t ask me why Shaq is on it).
If you’re stuck at vulnerability assessment or don’t know how to tackle something you can check here for some kind of push.
Hacktricks
Was this page helpful?
{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"Paul Kadali's Blog | Kaiser's Blog","colors":{"primary":"#6495ED","light":"#A9C8FF","dark":"#3A6FCF"},"logo":{"light":"https://mintcdn.com/paulkadali/dMik65LCQnAL6wNA/logo/kaiser.jpg?fit=max\u0026auto=format\u0026n=dMik65LCQnAL6wNA\u0026q=85\u0026s=724f3335dc5ef675679d96d39c1c4508","dark":"https://mintcdn.com/paulkadali/dMik65LCQnAL6wNA/logo/kaiser.jpg?fit=max\u0026auto=format\u0026n=dMik65LCQnAL6wNA\u0026q=85\u0026s=724f3335dc5ef675679d96d39c1c4508"},"favicon":"/logo/kaiser.jpg","navbar":{"primary":{"type":"button","label":"Github","href":"https://github.com/Kaiser784/"}},"footer":{"socials":{"x":"https://x.com/chewnot2chew","github":"https://github.com/Kaiser784","linkedin":"https://www.linkedin.com/in/paul-kadali"}},"seo":{"indexing":"all"},"contextual":{"options":["copy","view","chatgpt","mcp"],"display":"header"},"interaction":{"drilldown":true},"metadata":{"timestamp":true},"styling":{"latex":true},"navigation":{"global":{"anchors":[{"anchor":"Github","icon":"book-open-cover","href":"https://github.com/Kaiser784"},{"anchor":"LinkedIN","icon":"newspaper","href":"https://www.linkedin.com/in/paul-kadali"}]},"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"paulkadali","hasAudioNarration":false,"actualSubdomain":"paulkadali","customDomains":["paulkadali.com"],"gitSource":{"type":"github","owner":"kaiser784","repo":"docs","deployBranch":"main","contentDirectory":"","isPrivate":false,"mountPath":"","label":""},"chroma":{"liveDeploymentHistoryId":"6a21e8b38d1fcd719df0984f","collectionId":"ebfd3631-a04d-442b-9303-cd46aba57fdb","schemaVersion":"v2"},"feedback":{"thumbs":true},"entitlements":{},"buildId":"6a21e8b38d1fcd719df0984f:success","clientVersion":"0.0.3926","searchFilterCounts":[{"language":"default","tag":"Blog","count":22},{"language":"default","tag":"CTF Writeups","count":9},{"language":"default","tag":"Certifications","count":7},{"language":"default","tag":"eJPT","count":6},{"language":"default","tag":"Getting started","count":4},{"language":"default","tag":"WIZ Security Challenges","count":4},{"language":"default","tag":"Ghost in the Shell","count":2}]},"assistantConfig":{"enableStarterQuestions":false},"hasChatPermissions":false,"hasWebMcpPermissions":false,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-v7-file-tree","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"pause-universal-search-reconcile","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"per-site-search-delta","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-private-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-nav-generations","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"vite-origin","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"byok-sep-25","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-agent-model-picker","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"isAtlas":false,"googleFontsInlined":false},"customCss":[],"page":{"pagePath":"certs/ejpt/ejpt-notes","slug":"/certs/ejpt/ejpt-notes","pageMetadata":{"title":"Cheatsheet/Notes","description":"These are condensed notes from the INE course and other blogs and articles.","href":"/certs/ejpt/ejpt-notes","hidden":false},"description":{"compiledSource":"\"use strict\";\nconst {jsx: _jsx} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsx(_components.p, {\n children: \"These are condensed notes from the INE course and other blogs and articles.\"\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx,jsxs:_jsxs}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){const _components={a:`a`,code:`code`,p:`p`,pre:`pre`,span:`span`,tbody:`tbody`,td:`td`,th:`th`,thead:`thead`,tr:`tr`,..._provideComponents(),...props.components},{Card,Check,CodeBlock,Heading,OptimizedImage,Table}=_components;if(!Card)_missingMdxReference(`Card`,true);if(!Check)_missingMdxReference(`Check`,true);if(!CodeBlock)_missingMdxReference(`CodeBlock`,true);if(!Heading)_missingMdxReference(`Heading`,true);if(!OptimizedImage)_missingMdxReference(`OptimizedImage`,true);if(!Table)_missingMdxReference(`Table`,true);return _jsxs(_Fragment,{children:[_jsx(Heading,{level:`2`,id:`subnet-guide`,children:`Subnet Guide`}),`\n`,_jsx(OptimizedImage,{src:`https://mintcdn.com/paulkadali/W6ZEAEwGYgKrXkXF/images/subnet.avif?fit=max\u0026auto=format\u0026n=W6ZEAEwGYgKrXkXF\u0026q=85\u0026s=bdb86d61b2b6c8d1c68e4315ebcb7f35`,alt:`Subnet Avi`,\"data-og-width\":`768`,width:`768`,\"data-og-height\":`389`,height:`389`,\"data-path\":`images/subnet.avif`,\"data-optimize\":`true`,\"data-opv\":`3`,srcset:`https://mintcdn.com/paulkadali/W6ZEAEwGYgKrXkXF/images/subnet.avif?w=280\u0026fit=max\u0026auto=format\u0026n=W6ZEAEwGYgKrXkXF\u0026q=85\u0026s=dbb1387a62b1851c3bbfc64f173407d9 280w, https://mintcdn.com/paulkadali/W6ZEAEwGYgKrXkXF/images/subnet.avif?w=560\u0026fit=max\u0026auto=format\u0026n=W6ZEAEwGYgKrXkXF\u0026q=85\u0026s=4b3d0481db5a507bbc9cf4a03de3df39 560w, https://mintcdn.com/paulkadali/W6ZEAEwGYgKrXkXF/images/subnet.avif?w=840\u0026fit=max\u0026auto=format\u0026n=W6ZEAEwGYgKrXkXF\u0026q=85\u0026s=4e80a0f95e9930228b3808556f8829a7 840w, https://mintcdn.com/paulkadali/W6ZEAEwGYgKrXkXF/images/subnet.avif?w=1100\u0026fit=max\u0026auto=format\u0026n=W6ZEAEwGYgKrXkXF\u0026q=85\u0026s=8bc9a54ee1c317c8ea3d62ca4bb60eb1 1100w, https://mintcdn.com/paulkadali/W6ZEAEwGYgKrXkXF/images/subnet.avif?w=1650\u0026fit=max\u0026auto=format\u0026n=W6ZEAEwGYgKrXkXF\u0026q=85\u0026s=39898a1bf1100812dd5d5375237068e0 1650w, https://mintcdn.com/paulkadali/W6ZEAEwGYgKrXkXF/images/subnet.avif?w=2500\u0026fit=max\u0026auto=format\u0026n=W6ZEAEwGYgKrXkXF\u0026q=85\u0026s=e392bb160837bca2e5b761859d5d589c 2500w`}),`\n`,_jsx(OptimizedImage,{src:`https://mintcdn.com/paulkadali/W6ZEAEwGYgKrXkXF/images/table.png?fit=max\u0026auto=format\u0026n=W6ZEAEwGYgKrXkXF\u0026q=85\u0026s=139b55e34812e715736af5d585cc6240`,alt:`Table Pn`,\"data-og-width\":`789`,width:`789`,\"data-og-height\":`464`,height:`464`,\"data-path\":`images/table.png`,\"data-optimize\":`true`,\"data-opv\":`3`,srcset:`https://mintcdn.com/paulkadali/W6ZEAEwGYgKrXkXF/images/table.png?w=280\u0026fit=max\u0026auto=format\u0026n=W6ZEAEwGYgKrXkXF\u0026q=85\u0026s=696af292260778dbb1ea9aecdaa995ad 280w, https://mintcdn.com/paulkadali/W6ZEAEwGYgKrXkXF/images/table.png?w=560\u0026fit=max\u0026auto=format\u0026n=W6ZEAEwGYgKrXkXF\u0026q=85\u0026s=2b0d99ede8b34b8aef5b2ab5ee0637c5 560w, https://mintcdn.com/paulkadali/W6ZEAEwGYgKrXkXF/images/table.png?w=840\u0026fit=max\u0026auto=format\u0026n=W6ZEAEwGYgKrXkXF\u0026q=85\u0026s=b779d1061152a6e8e44e7780534d1b70 840w, https://mintcdn.com/paulkadali/W6ZEAEwGYgKrXkXF/images/table.png?w=1100\u0026fit=max\u0026auto=format\u0026n=W6ZEAEwGYgKrXkXF\u0026q=85\u0026s=8c164af7a446d587c47b1386cc93b5f2 1100w, https://mintcdn.com/paulkadali/W6ZEAEwGYgKrXkXF/images/table.png?w=1650\u0026fit=max\u0026auto=format\u0026n=W6ZEAEwGYgKrXkXF\u0026q=85\u0026s=1b761d4de45fee6d68ec57d55c3d5f66 1650w, https://mintcdn.com/paulkadali/W6ZEAEwGYgKrXkXF/images/table.png?w=2500\u0026fit=max\u0026auto=format\u0026n=W6ZEAEwGYgKrXkXF\u0026q=85\u0026s=d7d87daa958abec18df3cd94ab5d008b 2500w`}),`\n`,_jsx(Heading,{level:`2`,id:`routing`,children:`Routing`}),`\n`,_jsx(Check,{children:_jsx(_components.p,{children:`This part is pretty important😉`})}),`\n`,_jsx(CodeBlock,{filename:``,numberOfLines:`1`,language:`shellscript`,children:_jsx(_components.pre,{className:`shiki shiki-themes github-light-default dark-plus`,style:{backgroundColor:`#ffffff`,\"--shiki-dark-bg\":`#0B0C0E`,color:`#1f2328`,\"--shiki-dark\":`#D4D4D4`},language:`shellscript`,children:_jsxs(_components.code,{language:`shellscript`,numberOfLines:`1`,children:[_jsxs(_components.span,{className:`line`,children:[_jsx(_components.span,{style:{color:`#953800`,\"--shiki-dark\":`#DCDCAA`},children:`ip`}),_jsx(_components.span,{style:{color:`#0A3069`,\"--shiki-dark\":`#CE9178`},children:` route`}),_jsx(_components.span,{style:{color:`#0A3069`,\"--shiki-dark\":`#CE9178`},children:` add`}),_jsx(_components.span,{style:{color:`#0A3069`,\"--shiki-dark\":`#CE9178`},children:` 172.10.1.0/24`}),_jsx(_components.span,{style:{color:`#0A3069`,\"--shiki-dark\":`#CE9178`},children:` via`}),_jsx(_components.span,{style:{color:`#0550AE`,\"--shiki-dark\":`#B5CEA8`},children:` 10.10.10.10`}),_jsx(_components.span,{style:{color:`#1F2328`,\"--shiki-dark\":`#D4D4D4`},children:`(`}),_jsx(_components.span,{style:{color:`#953800`,\"--shiki-dark\":`#DCDCAA`},children:`VPN`}),_jsx(_components.span,{style:{color:`#0A3069`,\"--shiki-dark\":`#CE9178`},children:` Gateway`}),_jsx(_components.span,{style:{color:`#1F2328`,\"--shiki-dark\":`#D4D4D4`},children:`)`})]}),`\n`]})})}),`\n`,_jsx(_components.p,{children:`If you don’t know what the VPN gateway is then try it with every host that is up in the network.`}),`\n`,_jsx(_components.p,{children:`If you want external sources for routing/pivoting, you can look at this one I found somewhere in the depths of Reddit (Don’t ask me why Shaq is on it).`}),`\n`,_jsx(Card,{title:`Explore Hidden Networks With Double Pivoting`,icon:`chart-network`,href:`https://pentest.blog/explore-hidden-networks-with-double-pivoting/`,cta:`Check it out`}),`\n`,_jsx(Heading,{level:`2`,id:`interactive-shells`,children:`Interactive Shells`}),`\n`,_jsx(CodeBlock,{filename:``,numberOfLines:`8`,language:`shellscript`,children:_jsx(_components.pre,{className:`shiki shiki-themes github-light-default dark-plus`,style:{backgroundColor:`#ffffff`,\"--shiki-dark-bg\":`#0B0C0E`,color:`#1f2328`,\"--shiki-dark\":`#D4D4D4`},language:`shellscript`,children:_jsxs(_components.code,{language:`shellscript`,numberOfLines:`8`,children:[_jsxs(_components.span,{className:`line`,children:[_jsx(_components.span,{style:{color:`#953800`,\"--shiki-dark\":`#DCDCAA`},children:`bash`}),_jsx(_components.span,{style:{color:`#0550AE`,\"--shiki-dark\":`#569CD6`},children:` -i`})]}),`\n`,_jsxs(_components.span,{className:`line`,children:[_jsx(_components.span,{style:{color:`#953800`,\"--shiki-dark\":`#DCDCAA`},children:`python`}),_jsx(_components.span,{style:{color:`#0550AE`,\"--shiki-dark\":`#569CD6`},children:` -c`}),_jsx(_components.span,{style:{color:`#0A3069`,\"--shiki-dark\":`#CE9178`},children:` 'import pty; pty.spawn(\"/bin/sh\")'`})]}),`\n`,_jsxs(_components.span,{className:`line`,children:[_jsx(_components.span,{style:{color:`#0550AE`,\"--shiki-dark\":`#DCDCAA`},children:`echo`}),_jsx(_components.span,{style:{color:`#0A3069`,\"--shiki-dark\":`#CE9178`},children:` os.system`}),_jsx(_components.span,{style:{color:`#1F2328`,\"--shiki-dark\":`#D4D4D4`},children:`(`}),_jsx(_components.span,{style:{color:`#953800`,\"--shiki-dark\":`#DCDCAA`},children:`'/bin/bash'`}),_jsx(_components.span,{style:{color:`#1F2328`,\"--shiki-dark\":`#D4D4D4`},children:`)`})]}),`\n`,_jsxs(_components.span,{className:`line`,children:[_jsx(_components.span,{style:{color:`#953800`,\"--shiki-dark\":`#DCDCAA`},children:`/bin/sh`}),_jsx(_components.span,{style:{color:`#0550AE`,\"--shiki-dark\":`#569CD6`},children:` -i`})]}),`\n`,_jsxs(_components.span,{className:`line`,children:[_jsx(_components.span,{style:{color:`#953800`,\"--shiki-dark\":`#DCDCAA`},children:`perl`}),_jsx(_components.span,{style:{color:`#0550AE`,\"--shiki-dark\":`#569CD6`},children:` -e`}),_jsx(_components.span,{style:{color:`#0A3069`,\"--shiki-dark\":`#CE9178`},children:` 'exec \"/bin/sh\";'`})]}),`\n`,_jsxs(_components.span,{className:`line`,children:[_jsx(_components.span,{style:{color:`#953800`,\"--shiki-dark\":`#DCDCAA`},children:`perl:`}),_jsx(_components.span,{style:{color:`#0A3069`,\"--shiki-dark\":`#CE9178`},children:` exec`}),_jsx(_components.span,{style:{color:`#0A3069`,\"--shiki-dark\":`#CE9178`},children:` \"/bin/sh\"`}),_jsx(_components.span,{style:{color:`#1F2328`,\"--shiki-dark\":`#D4D4D4`},children:`;`})]}),`\n`,_jsxs(_components.span,{className:`line`,children:[_jsx(_components.span,{style:{color:`#953800`,\"--shiki-dark\":`#DCDCAA`},children:`ruby:`}),_jsx(_components.span,{style:{color:`#0A3069`,\"--shiki-dark\":`#CE9178`},children:` exec`}),_jsx(_components.span,{style:{color:`#0A3069`,\"--shiki-dark\":`#CE9178`},children:` \"/bin/sh\"`})]}),`\n`,_jsxs(_components.span,{className:`line`,children:[_jsx(_components.span,{style:{color:`#953800`,\"--shiki-dark\":`#DCDCAA`},children:`lua:`}),_jsx(_components.span,{style:{color:`#0A3069`,\"--shiki-dark\":`#CE9178`},children:` os.execute`}),_jsx(_components.span,{style:{color:`#1F2328`,\"--shiki-dark\":`#D4D4D4`},children:`(`}),_jsx(_components.span,{style:{color:`#953800`,\"--shiki-dark\":`#DCDCAA`},children:`'/bin/sh'`}),_jsx(_components.span,{style:{color:`#1F2328`,\"--shiki-dark\":`#D4D4D4`},children:`)`})]}),`\n`]})})}),`\n`,_jsx(Heading,{level:`2`,id:`recommended-shells`,children:`Recommended Shells`}),`\n`,_jsxs(Table,{children:[_jsx(_components.thead,{children:_jsxs(_components.tr,{children:[_jsx(_components.th,{children:`Server`}),_jsx(_components.th,{children:`Web Shell`})]})}),_jsxs(_components.tbody,{children:[_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Windows`}),_jsx(_components.td,{children:`ASP`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Apache TomCat`}),_jsx(_components.td,{children:`JSP`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Apache`}),_jsx(_components.td,{children:`PHP`})]})]})]}),`\n`,_jsx(Heading,{level:`3`,id:`reverse-shells`,children:`Reverse Shells`}),`\n`,_jsx(_components.p,{children:_jsx(_components.a,{href:`https://pentestmonkey.net/cheat-sheet/shells/reverse-shell-cheat-sheet`,children:`Pentest Monkey Cheatsheet`})}),`\n`,_jsx(Heading,{level:`2`,id:`hacktricks`,children:`Hacktricks`}),`\n`,_jsx(_components.p,{children:`If you’re stuck at vulnerability assessment or don’t know how to tackle something you can check here for some kind of push.`}),`\n`,_jsx(Card,{title:`Hacktricks`,icon:`book`,href:`book.hacktricks.wiki`,cta:`book.hacktricks.wiki`})]})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent};function _missingMdxReference(id,component){throw new Error(`Expected `+(component?`component`:`object`)+\" `\"+id+\"` to be defined: you likely forgot to import, pass, or provide it.\")}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"Cheatsheet/Notes","description":"These are condensed notes from the INE course and other blogs and articles.","href":"/certs/ejpt/ejpt-notes","hidden":false}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[{"title":"Subnet Guide","slug":"subnet-guide","depth":2,"children":[]},{"title":"Routing","slug":"routing","depth":2,"children":[]},{"title":"Interactive Shells","slug":"interactive-shells","depth":2,"children":[]},{"title":"Recommended Shells","slug":"recommended-shells","depth":2,"children":[{"title":"Reverse Shells","slug":"reverse-shells","depth":3,"children":[]}]},{"title":"Hacktricks","slug":"hacktricks","depth":2,"children":[]}],"codeExamples":{}},"jsLinks":[],"subdomain":"paulkadali","siteName":"Paul Kadali's Blog | Kaiser's Blog","title":"Cheatsheet/Notes - Paul Kadali's Blog | Kaiser's Blog","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"originalFileLocation":"certs/ejpt/ejpt-notes.mdx"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"system\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"These are condensed notes from the INE course and other blogs and articles.\">\u003cmeta data-mint-head name=\"application-name\" content=\"Paul Kadali\u0026#x27;s Blog | Kaiser\u0026#x27;s Blog\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/paulkadali/XX1Z2oo1xQZDrqwa/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/paulkadali/XX1Z2oo1xQZDrqwa/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/paulkadali/XX1Z2oo1xQZDrqwa/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/paulkadali/XX1Z2oo1xQZDrqwa/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/paulkadali/XX1Z2oo1xQZDrqwa/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/paulkadali/XX1Z2oo1xQZDrqwa/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/paulkadali/XX1Z2oo1xQZDrqwa/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/paulkadali/XX1Z2oo1xQZDrqwa/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/paulkadali/XX1Z2oo1xQZDrqwa/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"Cheatsheet/Notes - Paul Kadali\u0026#x27;s Blog | Kaiser\u0026#x27;s Blog\">\u003cmeta data-mint-head property=\"og:description\" content=\"These are condensed notes from the INE course and other blogs and articles.\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Paul Kadali\u0026#x27;s Blog | Kaiser\u0026#x27;s Blog\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://paulkadali.com/certs/ejpt/ejpt-notes\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://paulkadali.mintlify.app/_mintlify/api/og/v2?division=eJPT\u0026amp;title=Cheatsheet%2FNotes\u0026amp;description=These+are+condensed+notes+from+the+INE+course+and+other+blogs+and+articles.\u0026amp;theme=bd731fa61255a353cabe60f3\u0026amp;signature=1256957f4894bdddd66b4798586a021296106b07dc59e621dd22a60bef8e337d\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"Cheatsheet/Notes - Paul Kadali\u0026#x27;s Blog | Kaiser\u0026#x27;s Blog\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"These are condensed notes from the INE course and other blogs and articles.\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://paulkadali.mintlify.app/_mintlify/api/og/v2?division=eJPT\u0026amp;title=Cheatsheet%2FNotes\u0026amp;description=These+are+condensed+notes+from+the+INE+course+and+other+blogs+and+articles.\u0026amp;theme=bd731fa61255a353cabe60f3\u0026amp;signature=1256957f4894bdddd66b4798586a021296106b07dc59e621dd22a60bef8e337d\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/paulkadali/XX1Z2oo1xQZDrqwa/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Paul Kadali\u0026#x27;s Blog | Kaiser\u0026#x27;s Blog\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#6495ED\">\u003clink data-mint-head rel=\"canonical\" href=\"https://paulkadali.com/certs/ejpt/ejpt-notes\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/certs/ejpt/ejpt-notes.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://paulkadali.com/#organization\",\"name\":\"Paul Kadali's Blog | Kaiser's Blog\",\"url\":\"https://paulkadali.com\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/paulkadali/dMik65LCQnAL6wNA/logo/kaiser.jpg?fit=max\u0026auto=format\u0026n=dMik65LCQnAL6wNA\u0026q=85\u0026s=724f3335dc5ef675679d96d39c1c4508\"}},{\"@type\":\"WebSite\",\"@id\":\"https://paulkadali.com#website\",\"name\":\"Paul Kadali's Blog | Kaiser's Blog\",\"url\":\"https://paulkadali.com\",\"publisher\":{\"@id\":\"https://paulkadali.com/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://paulkadali.com/certs/ejpt/ejpt-notes#webpage\",\"url\":\"https://paulkadali.com/certs/ejpt/ejpt-notes\",\"name\":\"Cheatsheet/Notes\",\"description\":\"These are condensed notes from the INE course and other blogs and articles.\",\"isPartOf\":{\"@id\":\"https://paulkadali.com#website\"},\"breadcrumb\":{\"@id\":\"https://paulkadali.com/certs/ejpt/ejpt-notes#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://paulkadali.com/certs/ejpt/ejpt-notes#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Certifications\",\"item\":\"https://paulkadali.com/certs/dante\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"eJPT\",\"item\":\"https://paulkadali.com/certs/ejpt/eJPT\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Cheatsheet/Notes\",\"item\":\"https://paulkadali.com/certs/ejpt/ejpt-notes\"}]},{\"@type\":[\"Article\",\"TechArticle\"],\"@id\":\"https://paulkadali.com/certs/ejpt/ejpt-notes#article\",\"headline\":\"Cheatsheet/Notes\",\"name\":\"Cheatsheet/Notes\",\"description\":\"These are condensed notes from the INE course and other blogs and articles.\",\"url\":\"https://paulkadali.com/certs/ejpt/ejpt-notes\",\"mainEntityOfPage\":{\"@id\":\"https://paulkadali.com/certs/ejpt/ejpt-notes#webpage\"},\"publisher\":{\"@id\":\"https://paulkadali.com/#organization\"},\"isPartOf\":{\"@id\":\"https://paulkadali.com#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"Paul Kadali's Blog | Kaiser's Blog\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","siteName":"Paul Kadali's Blog | Kaiser's Blog","nav":{"global":{"anchors":[{"anchor":"Github","icon":"book-open-cover","href":"https://github.com/Kaiser784"},{"anchor":"LinkedIN","icon":"newspaper","href":"https://www.linkedin.com/in/paul-kadali"}]},"tabs":[{"tab":"Blog","groups":[{"group":"Getting started","pages":[{"title":"whoami","mode":"wide","href":"/whoami"},{"title":"Ingress","href":"/blog/beginnings"},{"title":"Making a Boot2root machine with docker","href":"/blog/boot2root"},{"title":"Redirection","href":"/redirect"}]},{"group":"Ghost in the Shell","pages":[{"title":"Ghost in the Shell: Adversarial Entropy in the Era of Agentic Workflows","sidebarTitle":"Ghost in the Shell: Adversarial Entropy in Agents","href":"/blog/ghost-in-shell"},{"title":"Ghost in the Machine: Deep Dive into ML Model Storage Abuse","sidebarTitle":"Ghost in the Machine: ML Model Storage Abuse","href":"/blog/ghost-in-machine"}]},{"group":"Certifications","pages":[{"title":"Dante ProLabs (HackTheBox)","href":"/certs/dante"},{"group":"eJPT","pages":[{"title":"eJPT","description":"My Experience and Notes","href":"/certs/ejpt/eJPT"},{"title":"Cheatsheet/Notes","href":"/certs/ejpt/ejpt-notes"},{"title":"Enumeration","description":"Information Gathering and Footprinting \u0026 Scanning","href":"/certs/ejpt/enumeration"},{"title":"Web Attacks","href":"/certs/ejpt/web"},{"title":"System Attacks","href":"/certs/ejpt/system"},{"title":"Network Attacks","href":"/certs/ejpt/network"}]}]},{"group":"CTF Writeups","pages":[{"title":"Matrix - AI Security Challenge by Repello writeup","href":"/writeups/matrix-ai"},{"title":"Google InternetCTF writeup","href":"/writeups/internet-ctf"},{"title":"WithSecure AI Challenge - My LLM Doctor writeup","href":"/writeups/withsecure"},{"title":"Lakera Gandalf LLM Security","url":"https://gist.github.com/Kaiser784/e80e7ce8a679a3841466cc79f16f1550","href":"/writeups/lakera"},{"title":"OSPG Writeups","url":"https://github.com/Kaiser784/Offsec-Proving-Grounds","href":"/writeups/ospg"},{"group":"WIZ Security Challenges","pages":[{"title":"The BIG IAM Challenge writeup","href":"/writeups/wiz/bigiam"},{"title":"K8S LAN Party Writeup","href":"/writeups/wiz/k8slan"},{"title":"EKS Cluster Games Writeup","href":"/writeups/wiz/eks"},{"title":"Prompt Airlines Writeup","href":"/writeups/wiz/prompt"}]}]}]}]},"title":"Cheatsheet/Notes - Paul Kadali's Blog | Kaiser's Blog","buildId":"dpl_9DauxEjb9gzCtcuhPQFbquJvx7FJ","deploymentId":"dpl_9DauxEjb9gzCtcuhPQFbquJvx7FJ","dynamics":["a74be98ba7"],"chunks":["zoom-image-lightbox-D4WcYaf4.js","PlusIcon-CwhPVjTe.js","lightbox-handle-r17bVUz3.js"]}