{"name":"Offsidian","description":"Le vault public de FoXhack — notes de cybersécurité offensive, outils et techniques.","generatedAt":"2026-10-06T22:28:55.867Z","defaultNote":"sommaire","stats":{"notes":344,"techniques":154,"tools":172,"guides":14,"assets":28,"links":3493},"groups":{"Accueil":1,"Guides":14,"Techniques":154,"Outils":172,"Templates":3},"categories":{"accueil":1,"guide":13,"hub":3,"web":64,"active-directory":22,"wireless":10,"cracking":2,"reseau-postexploit":6,"hardware":50,"Wireless & Réseau":8,"Reconnaissance & OSINT":19,"Mobile & Reverse Engineering":8,"Forensics, Threat Intel & Honeypots":9,"USB / HID & Gadgets":9,"Social Engineering & Phishing":10,"CTF & Développement":9,"Distributions & Lab":8,"Active Directory & Windows":8,"Wordlists & Générateurs":10,"Scan Web & Fuzzing":12,"Malware & Sandbox":9,"C2 & Post-Exploitation":8,"Cloud & Containers":11,"Exploitation & Cracking":13,"IDS / SIEM / EDR":9,"outils":1,"Réseau & Capture":7,"Divers":3,"<Catégorie du vault>":1,"":1},"assets":["Cybersécurité Offensive/Images/HardwareAllTheThings/ch341a.png","Cybersécurité Offensive/Images/HardwareAllTheThings/esp32-pin20.png","Cybersécurité Offensive/Images/HardwareAllTheThings/esp32-pinout.png","Cybersécurité Offensive/Images/HardwareAllTheThings/flipper-gpio.png","Cybersécurité Offensive/Images/HardwareAllTheThings/hydra-spi.png","Cybersécurité Offensive/Images/HardwareAllTheThings/hydrabus_pin_assignment.jpg","Cybersécurité Offensive/Images/HardwareAllTheThings/image_bus_pirate.png","Cybersécurité Offensive/Images/HardwareAllTheThings/image_flipper_cover.png","Cybersécurité Offensive/Images/HardwareAllTheThings/image_flipper.png","Cybersécurité Offensive/Images/HardwareAllTheThings/image_pwnagotchi.png","Cybersécurité Offensive/Images/HardwareAllTheThings/limebts/0_pKv_npHA_3DhtIQi.jpg","Cybersécurité Offensive/Images/HardwareAllTheThings/limebts/1_2il3cVVy8yFsX5hNsESyDw.jpg","Cybersécurité Offensive/Images/HardwareAllTheThings/limebts/1_8_tklU4IBXyxERiyDkxl-w.jpg","Cybersécurité Offensive/Images/HardwareAllTheThings/limebts/1_CrDQk7YysiFXzgaOrxaTQA.jpg","Cybersécurité Offensive/Images/HardwareAllTheThings/limebts/1_KbNtmYsmaCMVJinWnJdhFg.jpg","Cybersécurité Offensive/Images/HardwareAllTheThings/limebts/1_MmIJlBChAK1XF8TzxoX80g.jpg","Cybersécurité Offensive/Images/HardwareAllTheThings/logo.png","Cybersécurité Offensive/Images/HardwareAllTheThings/memory-programmer-rt809h.jpg","Cybersécurité Offensive/Images/HardwareAllTheThings/pin2pwn_practical_example.png","Cybersécurité Offensive/Images/HardwareAllTheThings/Qspi.png","Cybersécurité Offensive/Images/HardwareAllTheThings/rp2040-jtagscan-resistors.png","Cybersécurité Offensive/Images/HardwareAllTheThings/rpi-gpio.png","Cybersécurité Offensive/Images/HardwareAllTheThings/spi_pin2pwn.png","Cybersécurité Offensive/Images/HardwareAllTheThings/UART_1bit_period.png","Cybersécurité Offensive/Images/HardwareAllTheThings/UART_add_proto_decoder.png","Cybersécurité Offensive/Images/HardwareAllTheThings/UART_sigrok_dump.png","Cybersécurité Offensive/Images/HardwareAllTheThings/UART_uboot_str.png","Cybersécurité Offensive/Images/HardwareAllTheThings/uds-message-frame-can-bus.svg"],"notes":[{"id":"sommaire","path":"Sommaire.md","name":"Sommaire","title":"Cybersécurité Offensive","folder":"","group":"Accueil","type":"note","category":"accueil","tags":[],"status":"publie","excerpt":"Cette note est un point d'entrée . Toute la base de connaissances est dans le dossier","words":155,"readTime":1,"modified":"2026-10-06T22:23:57.548Z","links":[{"id":"index","hash":""},{"id":"reconnaissance","hash":""},{"id":"scan-enumeration","hash":""},{"id":"exploitation-web","hash":""},{"id":"exploitation-reseau","hash":""},{"id":"active-directory","hash":""},{"id":"post-exploitation","hash":""},{"id":"wireless-mitm-social-engineering","hash":""},{"id":"password-cracking","hash":""},{"id":"reverse-engineering-malware-analysis","hash":""},{"id":"cheatsheets","hash":""},{"id":"glossaire","hash":""},{"id":"ressources-lab","hash":""},{"id":"hardware-iot-pentesting","hash":""},{"id":"bibliotheque-technique","hash":""}],"backlinks":[]},{"id":"reconnaissance","path":"Cybersécurité Offensive/01 - Reconnaissance.md","name":"01 - Reconnaissance","title":"Reconnaissance","folder":"Cybersécurité Offensive","group":"Guides","type":"note","category":"guide","tags":[],"status":"publie","excerpt":"La phase où l'on collecte un maximum d'informations sur la cible avant de la toucher.","words":3769,"readTime":17,"modified":"2026-10-06T22:23:57.192Z","links":[{"id":"glossaire","hash":""},{"id":"cheatsheets","hash":""},{"id":"tools","hash":""},{"id":"outil-subfinder","hash":""},{"id":"outil-amass","hash":""},{"id":"outil-chaos","hash":""},{"id":"wireless-mitm-social-engineering","hash":""},{"id":"outil-httpx","hash":""},{"id":"outil-ffuf","hash":""},{"id":"gobuster-brute-force-de-repertoires-dns-et-vhosts","hash":""},{"id":"outil-feroxbuster","hash":""},{"id":"outil-dirsearch","hash":""},{"id":"outil-dnsx","hash":""},{"id":"outil-nuclei","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-masscan","hash":""},{"id":"outil-netcat","hash":""},{"id":"outil-ncat","hash":""},{"id":"outil-recon-ng","hash":""},{"id":"outil-maltego","hash":""},{"id":"outil-theharvester","hash":""},{"id":"outil-shodan","hash":""},{"id":"outil-shodan-cli","hash":""},{"id":"outil-waybackurls","hash":""},{"id":"outil-gau","hash":""},{"id":"outil-katana","hash":""},{"id":"outil-naabu","hash":""},{"id":"outil-nikto","hash":""},{"id":"outil-owasp-zap","hash":""},{"id":"outil-burp-suite","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-john-the-ripper","hash":""},{"id":"outil-cloudfox","hash":""},{"id":"outil-kube-hunter","hash":""},{"id":"outil-cupp","hash":""},{"id":"outil-cewl","hash":""},{"id":"scan-enumeration","hash":""},{"id":"exploitation-web","hash":""},{"id":"exploitation-reseau","hash":""},{"id":"active-directory","hash":""},{"id":"post-exploitation","hash":""},{"id":"password-cracking","hash":""},{"id":"hardware-iot-pentesting","hash":""}],"backlinks":["wireless-mitm-social-engineering","cheatsheets","glossaire","index","outil-amass","outil-censys","outil-cewl","outil-chaos","outil-crunch","outil-dnsx","outil-gau","outil-httpx","outil-katana","outil-maltego","outil-masscan","outil-nmap","outil-recon-ng","outil-shodan-cli","outil-shodan","outil-spiderfoot","outil-subfinder","outil-theharvester","outil-waybackurls","virtual-hosts","sommaire"]},{"id":"scan-enumeration","path":"Cybersécurité Offensive/02 - Scan & Énumération.md","name":"02 - Scan & Énumération","title":"Scan & Énumération","folder":"Cybersécurité Offensive","group":"Guides","type":"note","category":"guide","tags":[],"status":"publie","excerpt":"La phase où l'on cartographie la cible : ports ouverts, services, versions,","words":3136,"readTime":14,"modified":"2026-10-06T22:23:57.192Z","links":[{"id":"outil-nmap","hash":""},{"id":"outil-masscan","hash":""},{"id":"outil-rustscan","hash":""},{"id":"outil-nuclei","hash":""},{"id":"tools","hash":""},{"id":"virtual-hosts","hash":""},{"id":"llmnr-nbt-ns-poisoning","hash":""},{"id":"active-directory","hash":""},{"id":"insecure-management-interface","hash":""},{"id":"outil-wireshark","hash":""},{"id":"outil-shodan-cli","hash":""},{"id":"outil-censys","hash":""},{"id":"outil-theharvester","hash":""},{"id":"outil-recon-ng","hash":""},{"id":"outil-maltego","hash":""},{"id":"outil-searchsploit","hash":""},{"id":"outil-nikto","hash":""},{"id":"outil-bloodhound","hash":""},{"id":"kerberos-delegation","hash":""},{"id":"laps-et-gmsa","hash":""},{"id":"pivoting-et-tunneling","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["reconnaissance","cheatsheets","glossaire","index","outil-nmap","outil-rustscan","cve-exploits","insecure-management-interface","insecure-source-code-management","java-rmi","sommaire"]},{"id":"exploitation-web","path":"Cybersécurité Offensive/03 - Exploitation Web.md","name":"03 - Exploitation Web","title":"Exploitation Web","folder":"Cybersécurité Offensive","group":"Guides","type":"note","category":"guide","tags":[],"status":"publie","excerpt":"L'exploitation des applications web est le vecteur d'entrée 1 des engagements modernes.","words":2163,"readTime":10,"modified":"2026-10-06T22:24:48.249Z","links":[{"id":"bibliotheque-technique","hash":""},{"id":"injection-sql","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"lfi-et-rfi","hash":""},{"id":"ssrf","hash":""},{"id":"ssti","hash":""},{"id":"xxe","hash":""},{"id":"nosql","hash":""},{"id":"ldap-injection","hash":""},{"id":"xpath-injection","hash":""},{"id":"xslt-injection","hash":""},{"id":"ssi-injection","hash":""},{"id":"crlf-injection","hash":""},{"id":"csv-injection","hash":""},{"id":"latex-injection","hash":""},{"id":"type-juggling","hash":""},{"id":"regular-expression","hash":""},{"id":"orm-leak","hash":""},{"id":"xss-cross-site-scripting","hash":""},{"id":"dom-clobbering","hash":""},{"id":"css-injection","hash":""},{"id":"xs-leak","hash":""},{"id":"clickjacking","hash":""},{"id":"open-redirect","hash":""},{"id":"tabnabbing","hash":""},{"id":"cors","hash":""},{"id":"csrf","hash":""},{"id":"http-parameter-pollution","hash":""},{"id":"attaques-jwt","hash":""},{"id":"oauth","hash":""},{"id":"saml","hash":""},{"id":"graphql","hash":""},{"id":"idor","hash":""},{"id":"account-takeover","hash":""},{"id":"mass-assignment","hash":""},{"id":"business-logic","hash":""},{"id":"hidden-parameters","hash":""},{"id":"brute-force-rate-limit","hash":""},{"id":"upload-de-fichiers","hash":""},{"id":"path-traversal","hash":""},{"id":"client-side-path-traversal","hash":""},{"id":"zip-slip","hash":""},{"id":"http-request-smuggling","hash":""},{"id":"web-cache-deception","hash":""},{"id":"web-sockets","hash":""},{"id":"headless-browser","hash":""},{"id":"dns-rebinding","hash":""},{"id":"virtual-hosts","hash":""},{"id":"reverse-proxy","hash":""},{"id":"prompt-injection","hash":""},{"id":"insecure-deserialization","hash":""},{"id":"prototype-pollution","hash":""},{"id":"java-rmi","hash":""},{"id":"insecure-randomness","hash":""},{"id":"dependency-confusion","hash":""},{"id":"api-key-leaks","hash":""},{"id":"insecure-source-code-management","hash":""},{"id":"insecure-management-interface","hash":""},{"id":"google-web-toolkit","hash":""},{"id":"encoding-transformations","hash":""},{"id":"external-variable-modification","hash":""},{"id":"denial-of-service","hash":""},{"id":"cve-exploits","hash":""},{"id":"post-exploitation","hash":""}],"backlinks":["reconnaissance","scan-enumeration","password-cracking","cheatsheets","glossaire","index","outil-dirsearch","outil-feroxbuster","outil-ffuf","gobuster-brute-force-de-repertoires-dns-et-vhosts","outil-nikto","outil-nuclei","outil-owasp-zap","outil-wfuzz","outil-wpscan","outil-xsstrike","account-takeover","api-key-leaks","attaques-jwt","brute-force-rate-limit","business-logic","clickjacking","client-side-path-traversal","cors","crlf-injection","csrf","css-injection","csv-injection","cve-exploits","denial-of-service","dependency-confusion","dns-rebinding","dom-clobbering","encoding-transformations","external-variable-modification","google-web-toolkit","graphql","headless-browser","hidden-parameters","http-parameter-pollution","http-request-smuggling","idor","injection-de-commandes","injection-sql","insecure-deserialization","insecure-management-interface","insecure-randomness","insecure-source-code-management","latex-injection","ldap-injection","lfi-local-file-inclusion","lfi-et-rfi","mass-assignment","nosql","oauth","open-redirect","orm-leak","path-traversal","prompt-injection","prototype-pollution","race-condition","regular-expression","reverse-proxy","rfi-remote-file-inclusion","saml","ssi-injection","ssrf","ssti","tabnabbing","type-juggling","upload-de-fichiers","virtual-hosts","web-cache-deception","web-sockets","xpath-injection","xs-leak","xslt-injection","xss-cross-site-scripting","xxe","zip-slip","sommaire"]},{"id":"exploitation-reseau","path":"Cybersécurité Offensive/04 - Exploitation Réseau.md","name":"04 - Exploitation Réseau","title":"Exploitation Réseau","folder":"Cybersécurité Offensive","group":"Guides","type":"note","category":"guide","tags":[],"status":"publie","excerpt":"Cette note couvre l'exploitation réseau dans sa globalité : reconnaissance, Metasploit (maîtrise avancée), les reverse/bind shells , TTY stabilization , Netcat/Socat , Pivoting & Tunneling complet (SSH, Chisel, Ligolo…","words":2891,"readTime":13,"modified":"2026-10-06T22:24:48.249Z","links":[{"id":"outil-metasploit","hash":""},{"id":"outil-ligolo-ng","hash":""},{"id":"outil-chisel","hash":""},{"id":"outil-netcat","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-socat","hash":""},{"id":"outil-ropgadget","hash":""},{"id":"outil-radare2","hash":""},{"id":"tools","hash":""},{"id":"reverse-shells","hash":""},{"id":"pivoting-et-tunneling","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"ssrf","hash":""},{"id":"lfi-local-file-inclusion","hash":""},{"id":"buffer-overflow","hash":""},{"id":"active-directory","hash":""},{"id":"post-exploitation","hash":""}],"backlinks":["reconnaissance","wireless-mitm-social-engineering","cheatsheets","glossaire","index","buffer-overflow","java-rmi","pivoting-et-tunneling","reverse-shells","sommaire"]},{"id":"active-directory","path":"Cybersécurité Offensive/05 - Active Directory.md","name":"05 - Active Directory","title":"Active Directory","folder":"Cybersécurité Offensive","group":"Guides","type":"note","category":"guide","tags":[],"status":"publie","excerpt":"AD = le système d'identité de 90% des entreprises Windows.","words":6244,"readTime":28,"modified":"2026-10-06T22:24:48.253Z","links":[{"id":"outil-impacket","hash":""},{"id":"outil-bloodhound","hash":""},{"id":"outil-mimikatz","hash":""},{"id":"outil-responder","hash":""},{"id":"tools","hash":""},{"id":"kerberos-le-protocole","hash":""},{"id":"active-directory","hash":""},{"id":"kerberos-delegation","hash":""},{"id":"laps-et-gmsa","hash":""},{"id":"shadow-credentials","hash":""},{"id":"password-spraying","hash":""},{"id":"as-rep-roasting","hash":""},{"id":"kerberoasting","hash":""},{"id":"pass-the-hash","hash":""},{"id":"pass-the-ticket-et-overpass-the-hash","hash":""},{"id":"golden-ticket","hash":""},{"id":"silver-ticket","hash":""},{"id":"dcsync","hash":""},{"id":"llmnr-nbt-ns-poisoning","hash":""},{"id":"ntlm-relay","hash":""},{"id":"acl-abuse-ad","hash":""},{"id":"adcs-et-certificats-esc","hash":""},{"id":"kerberos-unconstrained-delegation","hash":""},{"id":"kerberos-constrained-delegation","hash":""},{"id":"kerberos-rbcd-resource-based-constrained-delegation","hash":""},{"id":"kerberos-bronze-bit","hash":""},{"id":"coerce-printerbug-et-petitpotam","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-john-the-ripper","hash":""},{"id":"password-cracking","hash":""},{"id":"outil-ligolo-ng","hash":""},{"id":"pivoting-et-tunneling","hash":""},{"id":"outil-rubeus","hash":""},{"id":"outil-crackmapexec","hash":""},{"id":"outil-evil-winrm","hash":""},{"id":"outil-kerbrute","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-netcat","hash":""},{"id":"outil-wireshark","hash":""},{"id":"outil-metasploit","hash":""},{"id":"outil-sliver","hash":""},{"id":"outil-powershell-empire","hash":""},{"id":"post-exploitation","hash":""}],"backlinks":["reconnaissance","scan-enumeration","exploitation-reseau","active-directory","post-exploitation","wireless-mitm-social-engineering","password-cracking","cheatsheets","glossaire","index","acl-abuse-ad","adcs-et-certificats-esc","as-rep-roasting","coerce-printerbug-et-petitpotam","dcsync","dump-ntds-dit","golden-ticket","kerberoasting","kerberos-le-protocole","laps-et-gmsa","llmnr-nbt-ns-poisoning","ntlm-relay","pass-the-hash","pass-the-ticket-et-overpass-the-hash","password-spraying","shadow-credentials","silver-ticket","sommaire"]},{"id":"post-exploitation","path":"Cybersécurité Offensive/06 - Post-Exploitation.md","name":"06 - Post-Exploitation","title":"Post-Exploitation","folder":"Cybersécurité Offensive","group":"Guides","type":"note","category":"guide","tags":[],"status":"publie","excerpt":"Une fois qu'on a un foothold (premier accès), il faut : élever les privilèges ,","words":3404,"readTime":15,"modified":"2026-10-06T22:23:57.204Z","links":[{"id":"reverse-shells","hash":""},{"id":"outil-netcat","hash":""},{"id":"outil-ncat","hash":""},{"id":"outil-socat","hash":""},{"id":"privilege-escalation-linux","hash":""},{"id":"privilege-escalation-windows","hash":""},{"id":"dll-hijacking","hash":""},{"id":"reverse-engineering-malware-analysis","hash":""},{"id":"outil-mimikatz","hash":""},{"id":"outil-bloodhound","hash":""},{"id":"pass-the-hash","hash":""},{"id":"pass-the-ticket-et-overpass-the-hash","hash":""},{"id":"golden-ticket","hash":""},{"id":"kerberos-le-protocole","hash":""},{"id":"kerberoasting","hash":""},{"id":"kerberos-unconstrained-delegation","hash":""},{"id":"kerberos-delegation","hash":""},{"id":"kerberos-rbcd-resource-based-constrained-delegation","hash":""},{"id":"silver-ticket","hash":""},{"id":"outil-rubeus","hash":""},{"id":"pivoting-et-tunneling","hash":""},{"id":"outil-chisel","hash":""},{"id":"outil-ligolo-ng","hash":""},{"id":"active-directory","hash":""},{"id":"outil-tcpdump","hash":""},{"id":"outil-wireshark","hash":""},{"id":"outil-metasploit","hash":""},{"id":"outil-sliver","hash":""},{"id":"outil-powershell-empire","hash":""},{"id":"outil-covenant","hash":""},{"id":"outil-mythic","hash":""},{"id":"password-cracking","hash":""}],"backlinks":["reconnaissance","exploitation-web","exploitation-reseau","active-directory","cheatsheets","glossaire","index","dll-hijacking","privilege-escalation-linux","privilege-escalation-windows","sommaire"]},{"id":"wireless-mitm-social-engineering","path":"Cybersécurité Offensive/07 - Wireless, MITM & Social Engineering.md","name":"07 - Wireless, MITM & Social Engineering","title":"Wireless, MITM & Social Engineering","folder":"Cybersécurité Offensive","group":"Guides","type":"note","category":"guide","tags":[],"status":"publie","excerpt":"Trois familles d'attaques complémentaires : le réseau sans fil , les attaques MITM","words":5176,"readTime":24,"modified":"2026-10-06T22:23:57.204Z","links":[{"id":"attaques-wifi-wpa2-et-pmkid","hash":""},{"id":"attaques-wifi-preparation-basiques","hash":""},{"id":"attaques-wifi-wep","hash":""},{"id":"attaques-wifi-wpa2-psk","hash":""},{"id":"attaques-wifi-pmkid","hash":""},{"id":"attaques-wifi-wps","hash":""},{"id":"attaques-wifi-enterprise","hash":""},{"id":"attaques-wifi-rogue-ap","hash":""},{"id":"attaques-wifi-outils-recon","hash":""},{"id":"exploitation-reseau","hash":""},{"id":"outil-aircrack-ng","hash":""},{"id":"outil-hcxdumptool","hash":""},{"id":"outil-wifite","hash":""},{"id":"outil-kismet","hash":""},{"id":"outil-mdk4","hash":""},{"id":"outil-wifiphisher","hash":""},{"id":"outil-reaver","hash":""},{"id":"outil-john-the-ripper","hash":""},{"id":"password-cracking","hash":""},{"id":"outil-wifi-pineapple","hash":""},{"id":"active-directory","hash":""},{"id":"protocole-bluetooth","hash":""},{"id":"hardware-iot-pentesting","hash":""},{"id":"outil-flipper-zero-usb-radio","hash":""},{"id":"hardware-sdr","hash":""},{"id":"hardware-rfid-et-nfc","hash":""},{"id":"hardware-rfid-mifare-hf-13-56-mhz","hash":""},{"id":"hardware-rfid-lf-hid-em410x-indala-hitag","hash":""},{"id":"hardware-proxmark","hash":""},{"id":"hardware-hydranfc","hash":""},{"id":"hardware-icopy-x","hash":""},{"id":"arp-spoofing-et-mitm","hash":""},{"id":"outil-bettercap","hash":""},{"id":"outil-mitmproxy","hash":""},{"id":"llmnr-nbt-ns-poisoning","hash":""},{"id":"ntlm-relay","hash":""},{"id":"outil-responder","hash":""},{"id":"outil-crackmapexec","hash":""},{"id":"outil-mitm6","hash":""},{"id":"outil-xsstrike","hash":""},{"id":"outil-beef","hash":""},{"id":"xss-cross-site-scripting","hash":""},{"id":"reconnaissance","hash":""},{"id":"outil-gophish","hash":""},{"id":"outil-set","hash":""},{"id":"outil-king-phisher","hash":""},{"id":"outil-socialfish","hash":""},{"id":"outil-credsniper","hash":""},{"id":"outil-weeman","hash":""},{"id":"outil-evilginx2","hash":""},{"id":"outil-modlishka","hash":""},{"id":"outil-usb-rubber-ducky","hash":""},{"id":"outil-bash-bunny","hash":""},{"id":"outil-o-mg-cable","hash":""},{"id":"protocole-usb","hash":""},{"id":"outil-sigma","hash":""},{"id":"cheatsheets","hash":""}],"backlinks":["reconnaissance","password-cracking","cheatsheets","glossaire","hardware-iot-pentesting","index","outil-crunch","outil-set","outil-socialfish","outil-weeman","arp-spoofing-et-mitm","attaques-wifi-wpa2-et-pmkid","llmnr-nbt-ns-poisoning","sommaire"]},{"id":"password-cracking","path":"Cybersécurité Offensive/08 - Password Cracking.md","name":"08 - Password Cracking","title":"Password Cracking","folder":"Cybersécurité Offensive","group":"Guides","type":"note","category":"guide","tags":[],"status":"publie","excerpt":"Cracker = retrouver le mot de passe en clair à partir d'un hash (offline)","words":4584,"readTime":21,"modified":"2026-10-06T22:23:57.208Z","links":[{"id":"outil-hashcat","hash":""},{"id":"outil-john-the-ripper","hash":""},{"id":"outil-hydra","hash":""},{"id":"outil-medusa","hash":""},{"id":"tools","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"glossaire","hash":""},{"id":"outil-oneruletorulethemall","hash":""},{"id":"outil-cewl","hash":""},{"id":"outil-crunch","hash":""},{"id":"outil-cupp","hash":""},{"id":"outil-kwprocessor","hash":""},{"id":"outil-mentalist","hash":""},{"id":"outil-pydictor","hash":""},{"id":"outil-rsmangler","hash":""},{"id":"outil-seclists","hash":""},{"id":"outil-ncrack","hash":""},{"id":"outil-patator","hash":""},{"id":"outil-brutedum","hash":""},{"id":"password-spraying","hash":""},{"id":"active-directory","hash":""},{"id":"kerberoasting","hash":""},{"id":"llmnr-nbt-ns-poisoning","hash":""},{"id":"ntlm-relay","hash":""},{"id":"pass-the-hash","hash":""},{"id":"exploitation-web","hash":""},{"id":"wireless-mitm-social-engineering","hash":""},{"id":"outil-wifite","hash":""}],"backlinks":["reconnaissance","active-directory","post-exploitation","wireless-mitm-social-engineering","cheatsheets","glossaire","index","outil-cewl","outil-crunch","techniques-password-cracking","sommaire"]},{"id":"reverse-engineering-malware-analysis","path":"Cybersécurité Offensive/09 - Reverse Engineering & Malware.md","name":"09 - Reverse Engineering & Malware","title":"Reverse Engineering & Malware Analysis","folder":"Cybersécurité Offensive","group":"Guides","type":"note","category":"guide","tags":[],"status":"publie","excerpt":"Reverse Engineering = comprendre comment un programme fonctionne sans le code source .","words":2660,"readTime":12,"modified":"2026-10-06T22:23:57.208Z","links":[{"id":"outil-ghidra","hash":""},{"id":"outil-radare2","hash":""},{"id":"outil-volatility","hash":""},{"id":"outil-yara","hash":""},{"id":"tools","hash":""},{"id":"outil-pwntools","hash":""},{"id":"outil-frida","hash":""},{"id":"outil-unblob","hash":""},{"id":"outil-oletools","hash":""},{"id":"outil-binwalk","hash":""},{"id":"outil-cyberchef","hash":""},{"id":"outil-cutter","hash":""},{"id":"outil-gdb-peda","hash":""},{"id":"outil-x64dbg","hash":""},{"id":"outil-sysinternals-suite","hash":""},{"id":"outil-wireshark","hash":""},{"id":"outil-tshark","hash":""},{"id":"outil-cape","hash":""},{"id":"outil-cuckoo-sandbox","hash":""},{"id":"outil-fakenet-ng","hash":""},{"id":"outil-exiftool","hash":""},{"id":"outil-dnspy","hash":""},{"id":"outil-process-hacker","hash":""},{"id":"outil-ropgadget","hash":""},{"id":"outil-metasploit","hash":""},{"id":"outil-stegsolve","hash":""},{"id":"outil-zsteg","hash":""},{"id":"outil-rsactftool","hash":""},{"id":"dll-hijacking","hash":""},{"id":"outil-flare-vm","hash":""},{"id":"hardware-iot-pentesting","hash":""},{"id":"cheatsheets","hash":""},{"id":"glossaire","hash":""}],"backlinks":["post-exploitation","cheatsheets","hardware-iot-pentesting","index","outil-apktool","outil-autopsy","outil-binwalk","outil-canarytokens","outil-cape","outil-cuckoo-sandbox","outil-cutter","outil-dnspy","outil-fakenet-ng","outil-frida","outil-ftk-imager","outil-ghidra","outil-misp","outil-oletools","outil-process-hacker","outil-sysinternals-suite","outil-unblob","outil-volatility","outil-x64dbg","outil-yara","sommaire"]},{"id":"cheatsheets","path":"Cybersécurité Offensive/10 - Cheatsheets.md","name":"10 - Cheatsheets","title":"Cheatsheets","folder":"Cybersécurité Offensive","group":"Guides","type":"note","category":"guide","tags":[],"status":"publie","excerpt":"Le mémo de toutes les commandes — à retrouver vite quand on est en plein pentest.","words":1062,"readTime":5,"modified":"2026-10-06T22:23:57.208Z","links":[{"id":"bibliotheque-technique","hash":""},{"id":"reconnaissance","hash":""},{"id":"scan-enumeration","hash":""},{"id":"outil-nmap","hash":""},{"id":"reverse-shells","hash":""},{"id":"outil-netcat","hash":""},{"id":"privilege-escalation-linux","hash":""},{"id":"privilege-escalation-windows","hash":""},{"id":"active-directory","hash":""},{"id":"outil-bloodhound","hash":""},{"id":"outil-impacket","hash":""},{"id":"outil-crackmapexec","hash":""},{"id":"outil-mimikatz","hash":""},{"id":"exploitation-web","hash":""},{"id":"outil-sqlmap","hash":""},{"id":"outil-ffuf","hash":""},{"id":"outil-nuclei","hash":""},{"id":"outil-burp-suite","hash":""},{"id":"password-cracking","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-john-the-ripper","hash":""},{"id":"pivoting-et-tunneling","hash":""},{"id":"outil-chisel","hash":""},{"id":"outil-ligolo-ng","hash":""},{"id":"outil-metasploit","hash":""},{"id":"post-exploitation","hash":""},{"id":"outil-evil-winrm","hash":""},{"id":"exploitation-reseau","hash":""},{"id":"outil-responder","hash":""},{"id":"outil-mitm6","hash":""},{"id":"outil-bettercap","hash":""},{"id":"password-spraying","hash":""},{"id":"outil-hydra","hash":""},{"id":"wireless-mitm-social-engineering","hash":""},{"id":"outil-aircrack-ng","hash":""},{"id":"outil-wifite","hash":""},{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-rfid-et-nfc","hash":""},{"id":"hardware-rfid-lf-hid-em410x-indala-hitag","hash":""},{"id":"hardware-rfid-mifare-hf-13-56-mhz","hash":""},{"id":"reverse-engineering-malware-analysis","hash":""},{"id":"outil-ghidra","hash":""},{"id":"outil-gdb-peda","hash":""},{"id":"outil-frida","hash":""},{"id":"outil-autopsy","hash":""},{"id":"outil-wireshark","hash":""},{"id":"outil-yara","hash":""},{"id":"outil-cloudfox","hash":""},{"id":"outil-gophish","hash":""},{"id":"outil-evilginx2","hash":""},{"id":"ressources-lab","hash":""}],"backlinks":["reconnaissance","wireless-mitm-social-engineering","reverse-engineering-malware-analysis","glossaire","index","outil-autopsy","outil-cyberchef","outil-exiftool","outil-gdb-peda","outil-pwntools","outil-ropgadget","outil-rsactftool","outil-sigma","outil-stegsolve","outil-volatility","outil-zsteg","tools","sommaire"]},{"id":"glossaire","path":"Cybersécurité Offensive/11 - Glossaire.md","name":"11 - Glossaire","title":"Glossaire","folder":"Cybersécurité Offensive","group":"Guides","type":"note","category":"guide","tags":[],"status":"publie","excerpt":"Toutes les abréviations & termes — à consulter quand tu tombes sur un terme inconnu.","words":5511,"readTime":25,"modified":"2026-10-06T22:23:57.212Z","links":[{"id":"kerberos-le-protocole","hash":""},{"id":"post-exploitation","hash":""},{"id":"active-directory","hash":""},{"id":"exploitation-reseau","hash":""},{"id":"reconnaissance","hash":""},{"id":"privilege-escalation-windows","hash":""},{"id":"privilege-escalation-linux","hash":""},{"id":"pass-the-hash","hash":""},{"id":"pass-the-ticket-et-overpass-the-hash","hash":""},{"id":"rfi-remote-file-inclusion","hash":""},{"id":"wireless-mitm-social-engineering","hash":""},{"id":"ssrf","hash":""},{"id":"ssti","hash":""},{"id":"xxe","hash":""},{"id":"xss-cross-site-scripting","hash":""},{"id":"exploitation-web","hash":""},{"id":"lfi-local-file-inclusion","hash":""},{"id":"lfi-et-rfi","hash":""},{"id":"injection-sql","hash":""},{"id":"nosql","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"ldap-injection","hash":""},{"id":"xpath-injection","hash":""},{"id":"xslt-injection","hash":""},{"id":"idor","hash":""},{"id":"open-redirect","hash":""},{"id":"http-request-smuggling","hash":""},{"id":"http-parameter-pollution","hash":""},{"id":"web-cache-deception","hash":""},{"id":"xs-leak","hash":""},{"id":"tabnabbing","hash":""},{"id":"prototype-pollution","hash":""},{"id":"insecure-deserialization","hash":""},{"id":"oauth","hash":""},{"id":"saml","hash":""},{"id":"path-traversal","hash":""},{"id":"upload-de-fichiers","hash":""},{"id":"hidden-parameters","hash":""},{"id":"mass-assignment","hash":""},{"id":"type-juggling","hash":""},{"id":"insecure-randomness","hash":""},{"id":"prompt-injection","hash":""},{"id":"race-condition","hash":""},{"id":"password-cracking","hash":""},{"id":"ntlm-relay","hash":""},{"id":"llmnr-nbt-ns-poisoning","hash":""},{"id":"kerberoasting","hash":""},{"id":"kerberos-delegation","hash":""},{"id":"kerberos-constrained-delegation","hash":""},{"id":"kerberos-unconstrained-delegation","hash":""},{"id":"kerberos-rbcd-resource-based-constrained-delegation","hash":""},{"id":"kerberos-bronze-bit","hash":""},{"id":"silver-ticket","hash":""},{"id":"outil-mimikatz","hash":""},{"id":"outil-responder","hash":""},{"id":"shadow-credentials","hash":""},{"id":"laps-et-gmsa","hash":""},{"id":"outil-bloodhound","hash":""},{"id":"outil-crackmapexec","hash":""},{"id":"outil-impacket","hash":""},{"id":"outil-rubeus","hash":""},{"id":"reverse-proxy","hash":""},{"id":"pivoting-et-tunneling","hash":""},{"id":"outil-ligolo-ng","hash":""},{"id":"outil-wireshark","hash":""},{"id":"outil-tcpdump","hash":""},{"id":"outil-netcat","hash":""},{"id":"outil-nmap","hash":""},{"id":"scan-enumeration","hash":""},{"id":"outil-masscan","hash":""},{"id":"outil-ropgadget","hash":""},{"id":"reverse-shells","hash":""},{"id":"outil-metasploit","hash":""},{"id":"outil-sliver","hash":""},{"id":"outil-havoc","hash":""},{"id":"outil-mythic","hash":""},{"id":"outil-shodan","hash":""},{"id":"outil-subfinder","hash":""},{"id":"outil-recon-ng","hash":""},{"id":"outil-maltego","hash":""},{"id":"outil-theharvester","hash":""},{"id":"outil-spiderfoot","hash":""},{"id":"outil-waybackurls","hash":""},{"id":"virtual-hosts","hash":""},{"id":"hardware-recherche-fcc-id","hash":""},{"id":"outil-ghidra","hash":""},{"id":"outil-x64dbg","hash":""},{"id":"outil-radare2","hash":""},{"id":"outil-frida","hash":""},{"id":"outil-yara","hash":""},{"id":"hardware-dump-et-analyse-de-firmware","hash":""},{"id":"hardware-sdr","hash":""},{"id":"hardware-flipper-zero","hash":""},{"id":"hardware-proxmark","hash":""},{"id":"hardware-rfid-et-nfc","hash":""},{"id":"hardware-rfid-lf-hid-em410x-indala-hitag","hash":""},{"id":"hardware-rfid-mifare-hf-13-56-mhz","hash":""},{"id":"protocole-zigbee","hash":""},{"id":"protocole-lora","hash":""},{"id":"protocole-mqtt","hash":""},{"id":"outil-wifi-pineapple","hash":""},{"id":"outil-wifite","hash":""},{"id":"outil-reaver","hash":""},{"id":"outil-mdk4","hash":""},{"id":"protocole-ss7","hash":""},{"id":"hardware-jtag-et-swd","hash":""},{"id":"hardware-uart","hash":""},{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-i2c-et-spi","hash":""},{"id":"hardware-fault-injection","hash":""},{"id":"hardware-secure-boot","hash":""},{"id":"hardware-logic-analyzer","hash":""},{"id":"hardware-bus-pirate","hash":""},{"id":"hardware-ch341a","hash":""},{"id":"hardware-raspberry-pi","hash":""},{"id":"hardware-esp32","hash":""},{"id":"hardware-arduino","hash":""},{"id":"hardware-m5stack","hash":""},{"id":"outil-usb-rubber-ducky","hash":""},{"id":"outil-o-mg-cable","hash":""},{"id":"hardware-pwnagotchi","hash":""},{"id":"hardware-limesdr-et-bts","hash":""},{"id":"hardware-identification-de-puces","hash":""},{"id":"hardware-composants-electroniques","hash":""},{"id":"outil-hydra","hash":""},{"id":"outil-set","hash":""},{"id":"outil-sigma","hash":""},{"id":"outil-wazuh","hash":""},{"id":"outil-splunk","hash":""},{"id":"outil-suricata","hash":""},{"id":"outil-snort","hash":""},{"id":"outil-velociraptor","hash":""},{"id":"outil-osquery","hash":""},{"id":"outil-rustscan","hash":""},{"id":"outil-naabu","hash":""},{"id":"outil-nuclei","hash":""},{"id":"outil-nikto","hash":""},{"id":"outil-wpscan","hash":""},{"id":"outil-burp-suite","hash":""},{"id":"outil-owasp-zap","hash":""},{"id":"outil-ffuf","hash":""},{"id":"gobuster-brute-force-de-repertoires-dns-et-vhosts","hash":""},{"id":"outil-wfuzz","hash":""},{"id":"outil-sqlmap","hash":""},{"id":"outil-xsstrike","hash":""},{"id":"outil-searchsploit","hash":""},{"id":"outil-mitm6","hash":""},{"id":"outil-powershell-empire","hash":""},{"id":"outil-linpeas","hash":""},{"id":"outil-peirates","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-john-the-ripper","hash":""},{"id":"outil-ncrack","hash":""},{"id":"outil-medusa","hash":""},{"id":"outil-patator","hash":""},{"id":"outil-crunch","hash":""},{"id":"outil-mentalist","hash":""},{"id":"outil-name-that-hash","hash":""},{"id":"outil-pwntools","hash":""},{"id":"outil-objection","hash":""},{"id":"outil-tshark","hash":""},{"id":"outil-ncat","hash":""},{"id":"outil-socat","hash":""},{"id":"outil-scapy","hash":""},{"id":"outil-hping3","hash":""},{"id":"outil-wifiphisher","hash":""},{"id":"outil-zeek","hash":""},{"id":"outil-volatility","hash":""},{"id":"outil-sysinternals-suite","hash":""},{"id":"cheatsheets","hash":""}],"backlinks":["reconnaissance","password-cracking","reverse-engineering-malware-analysis","index","outil-autopsy","outil-canarytokens","outil-cowrie","outil-opencti","outil-yara","sommaire"]},{"id":"ressources-lab","path":"Cybersécurité Offensive/12 - Ressources & Lab.md","name":"12 - Ressources & Lab","title":"Ressources & Lab","folder":"Cybersécurité Offensive","group":"Guides","type":"note","category":"guide","tags":[],"status":"publie","excerpt":"Tout pour progresser et s'entraîner légalement.","words":429,"readTime":2,"modified":"2026-10-06T22:23:57.212Z","links":[{"id":"index","hash":""}],"backlinks":["cheatsheets","index","tools","sommaire"]},{"id":"hardware-iot-pentesting","path":"Cybersécurité Offensive/13 - Hardware & IoT.md","name":"13 - Hardware & IoT","title":"Hardware & IoT Pentesting","folder":"Cybersécurité Offensive","group":"Guides","type":"note","category":"guide","tags":[],"status":"publie","excerpt":"Les objets connectés (routeurs, badges RFID, montres, caméras...) sont des ordinateurs miniaturisés :","words":1086,"readTime":5,"modified":"2026-10-06T22:23:57.212Z","links":[{"id":"hardware-uart","hash":""},{"id":"hardware-jtag-et-swd","hash":""},{"id":"hardware-dump-et-analyse-de-firmware","hash":""},{"id":"hardware-i2c-et-spi","hash":""},{"id":"hardware-rfid-et-nfc","hash":""},{"id":"hardware-rfid-mifare-hf-13-56-mhz","hash":""},{"id":"hardware-rfid-lf-hid-em410x-indala-hitag","hash":""},{"id":"hardware-amiibo-et-ntag215","hash":""},{"id":"protocole-bluetooth","hash":""},{"id":"protocole-zigbee","hash":""},{"id":"protocole-lora","hash":""},{"id":"protocole-can-bus","hash":""},{"id":"protocole-modbus","hash":""},{"id":"protocole-mqtt","hash":""},{"id":"protocole-dnp3","hash":""},{"id":"protocole-mms","hash":""},{"id":"protocole-ss7","hash":""},{"id":"protocole-usb","hash":""},{"id":"protocole-upnp","hash":""},{"id":"protocole-http-iot","hash":""},{"id":"protocole-gps","hash":""},{"id":"hardware-sdr","hash":""},{"id":"hardware-limesdr-et-bts","hash":""},{"id":"hardware-flipper-zero","hash":""},{"id":"hardware-proxmark","hash":""},{"id":"hardware-icopy-x","hash":""},{"id":"hardware-hydrabus","hash":""},{"id":"hardware-hydraflash","hash":""},{"id":"hardware-hydranfc","hash":""},{"id":"hardware-hydrausb3","hash":""},{"id":"hardware-esp32","hash":""},{"id":"hardware-raspberry-pi","hash":""},{"id":"hardware-bus-pirate","hash":""},{"id":"hardware-ch341a","hash":""},{"id":"hardware-logic-analyzer","hash":""},{"id":"hardware-memory-programmer","hash":""},{"id":"hardware-arduino","hash":""},{"id":"hardware-pwnagotchi","hash":""},{"id":"hardware-goodfet","hash":""},{"id":"hardware-bruschetta-board","hash":""},{"id":"hardware-m5stack","hash":""},{"id":"hardware-microbit","hash":""},{"id":"hardware-identification-de-puces","hash":""},{"id":"hardware-recherche-fcc-id","hash":""},{"id":"hardware-composants-electroniques","hash":""},{"id":"hardware-mots-de-passe-par-defaut-iot","hash":""},{"id":"hardware-secure-boot","hash":""},{"id":"hardware-kits-et-ressources","hash":""},{"id":"hardware-fault-injection","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"reverse-engineering-malware-analysis","hash":""},{"id":"wireless-mitm-social-engineering","hash":""}],"backlinks":["reconnaissance","wireless-mitm-social-engineering","reverse-engineering-malware-analysis","cheatsheets","glossaire","index","outil-apktool","outil-ghidra","hardware-amiibo-et-ntag215","hardware-arduino","hardware-bruschetta-board","hardware-bus-pirate","hardware-ch341a","hardware-composants-electroniques","hardware-dump-et-analyse-de-firmware","hardware-esp32","hardware-fault-injection","hardware-flipper-zero","hardware-goodfet","hardware-hydrabus","hardware-hydraflash","hardware-hydranfc","hardware-hydrausb3","hardware-i2c-et-spi","hardware-icopy-x","hardware-identification-de-puces","hardware-jtag-et-swd","hardware-kits-et-ressources","hardware-limesdr-et-bts","hardware-logic-analyzer","hardware-m5stack","hardware-memory-programmer","hardware-microbit","hardware-mots-de-passe-par-defaut-iot","hardware-proxmark","hardware-pwnagotchi","hardware-raspberry-pi","hardware-recherche-fcc-id","hardware-rfid-et-nfc","hardware-rfid-lf-hid-em410x-indala-hitag","hardware-rfid-mifare-hf-13-56-mhz","hardware-sdr","hardware-secure-boot","hardware-uart","protocole-bluetooth","protocole-can-bus","protocole-dnp3","protocole-gps","protocole-http-iot","protocole-lora","protocole-mms","protocole-modbus","protocole-mqtt","protocole-ss7","protocole-upnp","protocole-usb","protocole-zigbee","sommaire","templates-tp-file-title"]},{"id":"index","path":"Cybersécurité Offensive/Cybersécurité Offensive.md","name":"Cybersécurité Offensive","title":"Index","folder":"Cybersécurité Offensive","group":"Guides","type":"hub","category":"hub","tags":["cyber","hub"],"status":"publie","excerpt":"Tout ce qui est documenté ici doit uniquement être utilisé dans un cadre légal :","words":504,"readTime":2,"modified":"2026-10-06T22:25:12.857Z","links":[{"id":"reconnaissance","hash":""},{"id":"scan-enumeration","hash":""},{"id":"exploitation-web","hash":""},{"id":"exploitation-reseau","hash":""},{"id":"active-directory","hash":""},{"id":"post-exploitation","hash":""},{"id":"wireless-mitm-social-engineering","hash":""},{"id":"password-cracking","hash":""},{"id":"reverse-engineering-malware-analysis","hash":""},{"id":"cheatsheets","hash":""},{"id":"glossaire","hash":""},{"id":"ressources-lab","hash":""},{"id":"hardware-iot-pentesting","hash":""},{"id":"tools","hash":""},{"id":"bibliotheque-technique","hash":""},{"id":"reconnaissance","hash":"4-tips-pieges"},{"id":"scan-enumeration","hash":"4-tips-pieges"},{"id":"exploitation-web","hash":"15-tips-pieges-web"},{"id":"exploitation-web","hash":"14-vulns-avancees-a-connaitre"},{"id":"exploitation-reseau","hash":"5-tips-pieges"},{"id":"active-directory","hash":"7-tips-pieges-ad"},{"id":"kerberos-delegation","hash":""},{"id":"coerce-printerbug-et-petitpotam","hash":""},{"id":"post-exploitation","hash":"6-tips-pieges"},{"id":"wireless-mitm-social-engineering","hash":"4-tips-pieges"},{"id":"password-cracking","hash":"6-tips-pieges"},{"id":"reverse-engineering-malware-analysis","hash":"7-tips-pieges"},{"id":"hardware-iot-pentesting","hash":"7-tips-pieges"},{"id":"cheatsheets","hash":"10-tips-express-le-resume-des-resumes"}],"backlinks":["ressources-lab","sommaire","tp-file-title"]},{"id":"account-takeover","path":"Cybersécurité Offensive/Techniques/Account Takeover.md","name":"Account Takeover","title":"Account Takeover","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"ATO = obtenir un accès non autorisé au compte d'une victime en abusant d'un mécanisme","words":1657,"readTime":8,"modified":"2026-10-06T22:23:57.428Z","links":[{"id":"xss-cross-site-scripting","hash":""},{"id":"attaques-jwt","hash":""},{"id":"open-redirect","hash":""},{"id":"oauth","hash":""},{"id":"exploitation-web","hash":""},{"id":"idor","hash":""},{"id":"http-request-smuggling","hash":""},{"id":"csrf","hash":""},{"id":"type-juggling","hash":""},{"id":"techniques-password-cracking","hash":""}],"backlinks":["exploitation-web","bibliotheque-technique","brute-force-rate-limit","oauth","protocole-ss7"]},{"id":"acl-abuse-ad","path":"Cybersécurité Offensive/Techniques/ACL Abuse AD.md","name":"ACL Abuse AD","title":"ACL Abuse AD","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"active-directory","tags":["cyber","technique","active-directory"],"status":"publie","excerpt":"ACL Abuse = exploiter des permissions mal configurées (ACL) sur les objets AD : un compte","words":286,"readTime":1,"modified":"2026-10-06T22:23:57.424Z","links":[{"id":"kerberoasting","hash":""},{"id":"ntlm-relay","hash":""},{"id":"adcs-et-certificats-esc","hash":""},{"id":"active-directory","hash":""}],"backlinks":["active-directory","outil-bloodhound","outil-mitm6","adcs-et-certificats-esc","bibliotheque-technique","dcsync","ntlm-relay"]},{"id":"adcs-et-certificats-esc","path":"Cybersécurité Offensive/Techniques/ADCS et Certificats (ESC).md","name":"ADCS et Certificats (ESC)","title":"ADCS et Certificats (ESC)","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"active-directory","tags":["cyber","technique","active-directory"],"status":"publie","excerpt":"ADCS (Active Directory Certificate Services) délivre des certificats utilisés pour","words":297,"readTime":1,"modified":"2026-10-06T22:23:57.424Z","links":[{"id":"acl-abuse-ad","hash":""},{"id":"kerberos-le-protocole","hash":""},{"id":"ntlm-relay","hash":""},{"id":"active-directory","hash":""}],"backlinks":["active-directory","outil-bloodhound","acl-abuse-ad","bibliotheque-technique"]},{"id":"api-key-leaks","path":"Cybersécurité Offensive/Techniques/API Key Leaks.md","name":"API Key Leaks","title":"API Key Leaks","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"API Key Leaks = retrouver des clés d'API / tokens (déjà exposés ou mal configurés) dans","words":1015,"readTime":5,"modified":"2026-10-06T22:23:57.424Z","links":[{"id":"techniques-password-cracking","hash":""},{"id":"hidden-parameters","hash":""},{"id":"virtual-hosts","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","bibliotheque-technique","dependency-confusion","google-web-toolkit","hidden-parameters","insecure-source-code-management","orm-leak"]},{"id":"arp-spoofing-et-mitm","path":"Cybersécurité Offensive/Techniques/ARP Spoofing et MITM.md","name":"ARP Spoofing et MITM","title":"ARP Spoofing et MITM","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"wireless","tags":["cyber","technique","wireless"],"status":"publie","excerpt":"MITM (Man-In-The-Middle) = s'intercaler entre la victime et sa passerelle pour voir/modifier","words":181,"readTime":1,"modified":"2026-10-06T22:23:57.424Z","links":[{"id":"llmnr-nbt-ns-poisoning","hash":""},{"id":"ntlm-relay","hash":""},{"id":"wireless-mitm-social-engineering","hash":""}],"backlinks":["wireless-mitm-social-engineering","outil-bettercap","outil-snort","outil-wireshark","attaques-wifi-rogue-ap","bibliotheque-technique"]},{"id":"as-rep-roasting","path":"Cybersécurité Offensive/Techniques/AS-REP Roasting.md","name":"AS-REP Roasting","title":"AS-REP Roasting","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"active-directory","tags":["cyber","technique","active-directory"],"status":"publie","excerpt":"AS-REP Roasting = viser les comptes AD avec \"Do not require Kerberos preauthentication\" :","words":232,"readTime":1,"modified":"2026-10-06T22:23:57.428Z","links":[{"id":"kerberos-le-protocole","hash":""},{"id":"kerberoasting","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"active-directory","hash":""}],"backlinks":["active-directory","outil-crackmapexec","outil-hashcat","outil-rubeus","bibliotheque-technique","kerberoasting","kerberos-le-protocole","techniques-password-cracking"]},{"id":"attaques-jwt","path":"Cybersécurité Offensive/Techniques/Attaques JWT.md","name":"Attaques JWT","title":"Attaques JWT","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"JWT = jeton d'authentification signé ( header.payload.signature ). Attaques = forger un token","words":1401,"readTime":6,"modified":"2026-10-06T22:23:57.428Z","links":[{"id":"xss-cross-site-scripting","hash":""},{"id":"injection-sql","hash":""},{"id":"ssrf","hash":""},{"id":"lfi-et-rfi","hash":""},{"id":"oauth","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","outil-hashid","account-takeover","bibliotheque-technique","brute-force-rate-limit","cors","graphql","idor","insecure-randomness","oauth","saml","xs-leak","xss-cross-site-scripting"]},{"id":"attaques-wifi-enterprise","path":"Cybersécurité Offensive/Techniques/Attaques WiFi - Enterprise.md","name":"Attaques WiFi - Enterprise","title":"Attaques WiFi - Enterprise","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"wireless","tags":["cyber","technique","wireless"],"status":"publie","excerpt":"En WPA2-Enterprise (802.1X/EAP), il n'y a pas de passphrase à cracker — l'utilisateur s'authentifie par","words":305,"readTime":1,"modified":"2026-10-06T22:23:57.428Z","links":[{"id":"attaques-wifi-wpa2-et-pmkid","hash":""},{"id":"attaques-wifi-rogue-ap","hash":""},{"id":"attaques-wifi-preparation-basiques","hash":""},{"id":"password-spraying","hash":""},{"id":"bibliotheque-technique","hash":""}],"backlinks":["wireless-mitm-social-engineering","outil-wifiphisher","attaques-wifi-rogue-ap","attaques-wifi-wpa2-et-pmkid","bibliotheque-technique"]},{"id":"attaques-wifi-outils-recon","path":"Cybersécurité Offensive/Techniques/Attaques WiFi - Outils & Recon.md","name":"Attaques WiFi - Outils & Recon","title":"Attaques WiFi - Outils & Recon","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"wireless","tags":["cyber","technique","wireless"],"status":"publie","excerpt":"Les outils complémentaires d'aircrack-ng : décrypter/déshabiller des captures (airdecap-ng),","words":258,"readTime":1,"modified":"2026-10-06T22:23:57.428Z","links":[{"id":"attaques-wifi-wpa2-et-pmkid","hash":""},{"id":"attaques-wifi-preparation-basiques","hash":""},{"id":"attaques-wifi-wep","hash":""},{"id":"attaques-wifi-wpa2-psk","hash":""},{"id":"bibliotheque-technique","hash":""}],"backlinks":["wireless-mitm-social-engineering","outil-kismet","outil-mdk4","attaques-wifi-wpa2-et-pmkid","bibliotheque-technique"]},{"id":"attaques-wifi-pmkid","path":"Cybersécurité Offensive/Techniques/Attaques WiFi - PMKID.md","name":"Attaques WiFi - PMKID","title":"Attaques WiFi - PMKID","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"wireless","tags":["cyber","technique","wireless"],"status":"publie","excerpt":"Le PMKID est une valeur calculée par le point d'accès (WPA/WPA2) et exposée dans le message RSN —","words":298,"readTime":1,"modified":"2026-10-06T22:23:57.432Z","links":[{"id":"attaques-wifi-wpa2-et-pmkid","hash":""},{"id":"attaques-wifi-wpa2-psk","hash":""},{"id":"attaques-wifi-preparation-basiques","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"hardware-pwnagotchi","hash":""},{"id":"bibliotheque-technique","hash":""}],"backlinks":["wireless-mitm-social-engineering","outil-crunch","outil-hcxdumptool","outil-kwprocessor","attaques-wifi-preparation-basiques","attaques-wifi-wpa2-psk","attaques-wifi-wpa2-et-pmkid","bibliotheque-technique"]},{"id":"attaques-wifi-preparation-basiques","path":"Cybersécurité Offensive/Techniques/Attaques WiFi - Préparation & Basiques.md","name":"Attaques WiFi - Préparation & Basiques","title":"Attaques WiFi - Préparation & Basiques","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"wireless","tags":["cyber","technique","wireless"],"status":"publie","excerpt":"Avant toute attaque WiFi : un adaptateur compatible monitor+injection , le mode moniteur , une reconnaissance","words":359,"readTime":2,"modified":"2026-10-06T22:23:57.432Z","links":[{"id":"attaques-wifi-wpa2-et-pmkid","hash":""},{"id":"attaques-wifi-wep","hash":""},{"id":"attaques-wifi-wpa2-psk","hash":""},{"id":"attaques-wifi-pmkid","hash":""},{"id":"bibliotheque-technique","hash":""}],"backlinks":["wireless-mitm-social-engineering","outil-aircrack-ng","outil-kismet","outil-mdk4","outil-reaver","attaques-wifi-enterprise","attaques-wifi-outils-recon","attaques-wifi-pmkid","attaques-wifi-wep","attaques-wifi-wpa2-psk","attaques-wifi-wps","attaques-wifi-wpa2-et-pmkid","bibliotheque-technique"]},{"id":"attaques-wifi-rogue-ap","path":"Cybersécurité Offensive/Techniques/Attaques WiFi - Rogue AP.md","name":"Attaques WiFi - Rogue AP","title":"Attaques WiFi - Rogue AP","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"wireless","tags":["cyber","technique","wireless"],"status":"publie","excerpt":"Un Rogue AP est un faux point d'accès (airbase-ng) : on y capture des handshakes WPA, on répond à toutes","words":299,"readTime":1,"modified":"2026-10-06T22:23:57.432Z","links":[{"id":"attaques-wifi-wpa2-et-pmkid","hash":""},{"id":"attaques-wifi-enterprise","hash":""},{"id":"attaques-wifi-wpa2-psk","hash":""},{"id":"arp-spoofing-et-mitm","hash":""},{"id":"bibliotheque-technique","hash":""}],"backlinks":["wireless-mitm-social-engineering","outil-aircrack-ng","outil-bettercap","outil-kismet","outil-o-mg-cable","outil-wifi-pineapple","outil-wifiphisher","attaques-wifi-enterprise","attaques-wifi-wpa2-et-pmkid","bibliotheque-technique"]},{"id":"attaques-wifi-wep","path":"Cybersécurité Offensive/Techniques/Attaques WiFi - WEP.md","name":"Attaques WiFi - WEP","title":"Attaques WiFi - WEP","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"wireless","tags":["cyber","technique","wireless"],"status":"publie","excerpt":"Le WEP est cassé structurellement : les IVs faibles (24 bits, réutilisés) permettent de retrouver la clé","words":389,"readTime":2,"modified":"2026-10-06T22:23:57.432Z","links":[{"id":"attaques-wifi-wpa2-et-pmkid","hash":""},{"id":"attaques-wifi-preparation-basiques","hash":""},{"id":"attaques-wifi-wpa2-psk","hash":""},{"id":"bibliotheque-technique","hash":""}],"backlinks":["wireless-mitm-social-engineering","outil-aircrack-ng","attaques-wifi-outils-recon","attaques-wifi-preparation-basiques","attaques-wifi-wpa2-et-pmkid","bibliotheque-technique"]},{"id":"attaques-wifi-wpa2-psk","path":"Cybersécurité Offensive/Techniques/Attaques WiFi - WPA2 PSK.md","name":"Attaques WiFi - WPA2 PSK","title":"Attaques WiFi - WPA2 PSK","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"wireless","tags":["cyber","technique","wireless"],"status":"publie","excerpt":"Le WPA2-PSK se casse en capturant le handshake 4-way (via deauth d'un client) puis en cracker la passphrase","words":338,"readTime":2,"modified":"2026-10-06T22:23:57.432Z","links":[{"id":"attaques-wifi-wpa2-et-pmkid","hash":""},{"id":"attaques-wifi-preparation-basiques","hash":""},{"id":"attaques-wifi-pmkid","hash":""},{"id":"attaques-wifi-wps","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"bibliotheque-technique","hash":""}],"backlinks":["wireless-mitm-social-engineering","outil-aircrack-ng","outil-crunch","outil-hcxdumptool","outil-kwprocessor","outil-mdk4","outil-wifiphisher","outil-wifite","attaques-wifi-outils-recon","attaques-wifi-pmkid","attaques-wifi-preparation-basiques","attaques-wifi-rogue-ap","attaques-wifi-wep","attaques-wifi-wps","attaques-wifi-wpa2-et-pmkid","bibliotheque-technique"]},{"id":"attaques-wifi-wps","path":"Cybersécurité Offensive/Techniques/Attaques WiFi - WPS.md","name":"Attaques WiFi - WPS","title":"Attaques WiFi - WPS","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"wireless","tags":["cyber","technique","wireless"],"status":"publie","excerpt":"Le WPS (Wi-Fi Protected Setup) laisse entrer un PIN de 8 chiffres (validation en 2 moitiés → seulement 11 000","words":305,"readTime":1,"modified":"2026-10-06T22:23:57.432Z","links":[{"id":"attaques-wifi-wpa2-et-pmkid","hash":""},{"id":"attaques-wifi-wpa2-psk","hash":""},{"id":"attaques-wifi-preparation-basiques","hash":""},{"id":"bibliotheque-technique","hash":""}],"backlinks":["wireless-mitm-social-engineering","outil-reaver","outil-wifite","attaques-wifi-wpa2-psk","attaques-wifi-wpa2-et-pmkid","bibliotheque-technique"]},{"id":"attaques-wifi-wpa2-et-pmkid","path":"Cybersécurité Offensive/Techniques/Attaques WiFi (WPA2 et PMKID).md","name":"Attaques WiFi (WPA2 et PMKID)","title":"Attaques WiFi (WPA2 et PMKID)","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"wireless","tags":["cyber","technique","wireless"],"status":"publie","excerpt":"Le hacking WiFi se découpe en attaques spécialisées : WEP (mort, minutes), WPA2-PSK (handshake → crack offline),","words":186,"readTime":1,"modified":"2026-10-06T22:23:57.428Z","links":[{"id":"attaques-wifi-preparation-basiques","hash":""},{"id":"attaques-wifi-wep","hash":""},{"id":"attaques-wifi-wpa2-psk","hash":""},{"id":"attaques-wifi-pmkid","hash":""},{"id":"attaques-wifi-wps","hash":""},{"id":"attaques-wifi-enterprise","hash":""},{"id":"attaques-wifi-rogue-ap","hash":""},{"id":"attaques-wifi-outils-recon","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"wireless-mitm-social-engineering","hash":""}],"backlinks":["wireless-mitm-social-engineering","outil-aircrack-ng","outil-crunch","outil-kwprocessor","outil-reaver","outil-wifi-pineapple","outil-wifite","attaques-wifi-enterprise","attaques-wifi-outils-recon","attaques-wifi-pmkid","attaques-wifi-preparation-basiques","attaques-wifi-rogue-ap","attaques-wifi-wep","attaques-wifi-wpa2-psk","attaques-wifi-wps","bibliotheque-technique","hardware-pwnagotchi","protocole-bluetooth","protocole-gps","protocole-lora","protocole-mqtt","protocole-zigbee"]},{"id":"bibliotheque-technique","path":"Cybersécurité Offensive/Techniques/Bibliothèque technique.md","name":"Bibliothèque technique","title":"Bibliothèque technique","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"hub","category":"hub","tags":["cyber","hub"],"status":"publie","excerpt":"Chaque note ici décrit une attaque/concept en détail : définition, diagramme, étapes,","words":1192,"readTime":5,"modified":"2026-10-06T22:23:57.436Z","links":[{"id":"kerberos-le-protocole","hash":""},{"id":"golden-ticket","hash":""},{"id":"silver-ticket","hash":""},{"id":"pass-the-ticket-et-overpass-the-hash","hash":""},{"id":"pass-the-hash","hash":""},{"id":"dcsync","hash":""},{"id":"kerberoasting","hash":""},{"id":"as-rep-roasting","hash":""},{"id":"llmnr-nbt-ns-poisoning","hash":""},{"id":"ntlm-relay","hash":""},{"id":"acl-abuse-ad","hash":""},{"id":"kerberos-delegation","hash":""},{"id":"kerberos-unconstrained-delegation","hash":""},{"id":"kerberos-constrained-delegation","hash":""},{"id":"kerberos-rbcd-resource-based-constrained-delegation","hash":""},{"id":"kerberos-bronze-bit","hash":""},{"id":"coerce-printerbug-et-petitpotam","hash":""},{"id":"laps-et-gmsa","hash":""},{"id":"shadow-credentials","hash":""},{"id":"dump-ntds-dit","hash":""},{"id":"adcs-et-certificats-esc","hash":""},{"id":"password-spraying","hash":""},{"id":"injection-sql","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"lfi-et-rfi","hash":""},{"id":"path-traversal","hash":""},{"id":"lfi-local-file-inclusion","hash":""},{"id":"rfi-remote-file-inclusion","hash":""},{"id":"ssrf","hash":""},{"id":"ssti","hash":""},{"id":"xxe","hash":""},{"id":"nosql","hash":""},{"id":"ldap-injection","hash":""},{"id":"xpath-injection","hash":""},{"id":"xslt-injection","hash":""},{"id":"ssi-injection","hash":""},{"id":"crlf-injection","hash":""},{"id":"csv-injection","hash":""},{"id":"latex-injection","hash":""},{"id":"type-juggling","hash":""},{"id":"regular-expression","hash":""},{"id":"orm-leak","hash":""},{"id":"xss-cross-site-scripting","hash":""},{"id":"dom-clobbering","hash":""},{"id":"css-injection","hash":""},{"id":"xs-leak","hash":""},{"id":"clickjacking","hash":""},{"id":"open-redirect","hash":""},{"id":"tabnabbing","hash":""},{"id":"cors","hash":""},{"id":"csrf","hash":""},{"id":"http-parameter-pollution","hash":""},{"id":"attaques-jwt","hash":""},{"id":"oauth","hash":""},{"id":"saml","hash":""},{"id":"graphql","hash":""},{"id":"idor","hash":""},{"id":"account-takeover","hash":""},{"id":"mass-assignment","hash":""},{"id":"business-logic","hash":""},{"id":"hidden-parameters","hash":""},{"id":"brute-force-rate-limit","hash":""},{"id":"upload-de-fichiers","hash":""},{"id":"client-side-path-traversal","hash":""},{"id":"zip-slip","hash":""},{"id":"http-request-smuggling","hash":""},{"id":"web-cache-deception","hash":""},{"id":"web-sockets","hash":""},{"id":"headless-browser","hash":""},{"id":"dns-rebinding","hash":""},{"id":"virtual-hosts","hash":""},{"id":"reverse-proxy","hash":""},{"id":"prompt-injection","hash":""},{"id":"insecure-deserialization","hash":""},{"id":"prototype-pollution","hash":""},{"id":"java-rmi","hash":""},{"id":"insecure-randomness","hash":""},{"id":"dependency-confusion","hash":""},{"id":"api-key-leaks","hash":""},{"id":"insecure-source-code-management","hash":""},{"id":"insecure-management-interface","hash":""},{"id":"google-web-toolkit","hash":""},{"id":"encoding-transformations","hash":""},{"id":"external-variable-modification","hash":""},{"id":"denial-of-service","hash":""},{"id":"cve-exploits","hash":""},{"id":"reverse-shells","hash":""},{"id":"pivoting-et-tunneling","hash":""},{"id":"privilege-escalation-linux","hash":""},{"id":"privilege-escalation-windows","hash":""},{"id":"dll-hijacking","hash":""},{"id":"buffer-overflow","hash":""},{"id":"attaques-wifi-wpa2-et-pmkid","hash":""},{"id":"attaques-wifi-preparation-basiques","hash":""},{"id":"attaques-wifi-wep","hash":""},{"id":"attaques-wifi-wpa2-psk","hash":""},{"id":"attaques-wifi-pmkid","hash":""},{"id":"attaques-wifi-wps","hash":""},{"id":"attaques-wifi-enterprise","hash":""},{"id":"attaques-wifi-rogue-ap","hash":""},{"id":"attaques-wifi-outils-recon","hash":""},{"id":"arp-spoofing-et-mitm","hash":""},{"id":"hardware-uart","hash":""},{"id":"hardware-jtag-et-swd","hash":""},{"id":"hardware-i2c-et-spi","hash":""},{"id":"hardware-dump-et-analyse-de-firmware","hash":""},{"id":"hardware-fault-injection","hash":""},{"id":"hardware-secure-boot","hash":""},{"id":"hardware-flipper-zero","hash":""},{"id":"hardware-proxmark","hash":""},{"id":"hardware-icopy-x","hash":""},{"id":"hardware-hydrabus","hash":""},{"id":"hardware-hydraflash","hash":""},{"id":"hardware-hydranfc","hash":""},{"id":"hardware-hydrausb3","hash":""},{"id":"hardware-esp32","hash":""},{"id":"hardware-raspberry-pi","hash":""},{"id":"hardware-bus-pirate","hash":""},{"id":"hardware-ch341a","hash":""},{"id":"hardware-logic-analyzer","hash":""},{"id":"hardware-memory-programmer","hash":""},{"id":"hardware-arduino","hash":""},{"id":"hardware-pwnagotchi","hash":""},{"id":"hardware-goodfet","hash":""},{"id":"hardware-bruschetta-board","hash":""},{"id":"hardware-m5stack","hash":""},{"id":"hardware-microbit","hash":""},{"id":"hardware-rfid-et-nfc","hash":""},{"id":"hardware-rfid-mifare-hf-13-56-mhz","hash":""},{"id":"hardware-rfid-lf-hid-em410x-indala-hitag","hash":""},{"id":"hardware-amiibo-et-ntag215","hash":""},{"id":"protocole-bluetooth","hash":""},{"id":"protocole-zigbee","hash":""},{"id":"protocole-lora","hash":""},{"id":"protocole-can-bus","hash":""},{"id":"protocole-modbus","hash":""},{"id":"protocole-mqtt","hash":""},{"id":"protocole-dnp3","hash":""},{"id":"protocole-mms","hash":""},{"id":"protocole-ss7","hash":""},{"id":"protocole-usb","hash":""},{"id":"protocole-upnp","hash":""},{"id":"protocole-http-iot","hash":""},{"id":"protocole-gps","hash":""},{"id":"hardware-identification-de-puces","hash":""},{"id":"hardware-recherche-fcc-id","hash":""},{"id":"hardware-sdr","hash":""},{"id":"hardware-limesdr-et-bts","hash":""},{"id":"hardware-composants-electroniques","hash":""},{"id":"hardware-mots-de-passe-par-defaut-iot","hash":""},{"id":"hardware-kits-et-ressources","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"bibliotheque-technique","hash":""}],"backlinks":["exploitation-web","cheatsheets","index","tools","attaques-wifi-enterprise","attaques-wifi-outils-recon","attaques-wifi-pmkid","attaques-wifi-preparation-basiques","attaques-wifi-rogue-ap","attaques-wifi-wep","attaques-wifi-wpa2-psk","attaques-wifi-wps","bibliotheque-technique","hardware-amiibo-et-ntag215","hardware-flipper-zero","hardware-hydrabus","hardware-hydranfc","hardware-hydrausb3","hardware-proxmark","hardware-pwnagotchi","hardware-rfid-mifare-hf-13-56-mhz","lfi-local-file-inclusion","lfi-et-rfi","path-traversal","rfi-remote-file-inclusion","sommaire"]},{"id":"brute-force-rate-limit","path":"Cybersécurité Offensive/Techniques/Brute Force Rate Limit.md","name":"Brute Force Rate Limit","title":"Brute Force Rate Limit","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"cracking","tags":["cyber","technique","cracking"],"status":"publie","excerpt":"La brute force = deviner des identifiants/tokens en testant un grand volume de valeurs ;","words":1617,"readTime":7,"modified":"2026-10-06T22:23:57.436Z","links":[{"id":"attaques-jwt","hash":""},{"id":"password-spraying","hash":""},{"id":"account-takeover","hash":""},{"id":"idor","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","outil-brutedum","outil-cewl","outil-feroxbuster","gobuster-brute-force-de-repertoires-dns-et-vhosts","outil-pydictor","outil-seclists","outil-wfuzz","outil-wpscan","bibliotheque-technique","denial-of-service"]},{"id":"buffer-overflow","path":"Cybersécurité Offensive/Techniques/Buffer Overflow.md","name":"Buffer Overflow","title":"Buffer Overflow","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"reseau-postexploit","tags":["cyber","technique","reseau-postexploit"],"status":"publie","excerpt":"Buffer Overflow = écrire plus de données que prévu dans une variable, écraser le pointeur de","words":249,"readTime":1,"modified":"2026-10-06T22:23:57.436Z","links":[{"id":"reverse-shells","hash":""},{"id":"exploitation-reseau","hash":""}],"backlinks":["exploitation-reseau","outil-cutter","outil-ghidra","outil-radare2","bibliotheque-technique"]},{"id":"business-logic","path":"Cybersécurité Offensive/Techniques/Business Logic.md","name":"Business Logic","title":"Business Logic","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"Business Logic Errors = exploiter la logique métier de l'app (paiement, commandes, abonnements,","words":1526,"readTime":7,"modified":"2026-10-06T22:23:57.436Z","links":[{"id":"idor","hash":""},{"id":"race-condition","hash":""},{"id":"mass-assignment","hash":""},{"id":"injection-sql","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","bibliotheque-technique","denial-of-service","insecure-randomness","mass-assignment","race-condition"]},{"id":"clickjacking","path":"Cybersécurité Offensive/Techniques/Clickjacking.md","name":"Clickjacking","title":"Clickjacking","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"Clickjacking (UI Redressing) = piéger l'utilisateur en superposant une iframe invisible d'un site","words":1169,"readTime":5,"modified":"2026-10-06T22:24:48.357Z","links":[{"id":"xss-cross-site-scripting","hash":""},{"id":"csrf","hash":""},{"id":"lfi-et-rfi","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","outil-xsstrike","bibliotheque-technique","csrf","tabnabbing"]},{"id":"client-side-path-traversal","path":"Cybersécurité Offensive/Techniques/Client Side Path Traversal.md","name":"Client Side Path Traversal","title":"Client Side Path Traversal","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"CSPT (Client-Side Path Traversal) = injection de ../ dans une URL construite côté client par fetch() — le navigateur normalise la séquence et la requête part vers un endpoint arbitraire avec les cookies automatiquemen…","words":538,"readTime":2,"modified":"2026-10-06T22:23:57.444Z","links":[{"id":"encoding-transformations","hash":""},{"id":"path-traversal","hash":""},{"id":"xss-cross-site-scripting","hash":""},{"id":"csrf","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","bibliotheque-technique","encoding-transformations"]},{"id":"coerce-printerbug-et-petitpotam","path":"Cybersécurité Offensive/Techniques/Coerce - PrinterBug et PetitPotam.md","name":"Coerce - PrinterBug et PetitPotam","title":"Coerce - PrinterBug et PetitPotam","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"active-directory","tags":["cyber","technique","active-directory"],"status":"publie","excerpt":"Coerce = forcer une machine (souvent un DC, en SYSTEM) à initier une authentification vers notre serveur ,","words":494,"readTime":2,"modified":"2026-10-06T22:23:57.444Z","links":[{"id":"ntlm-relay","hash":""},{"id":"llmnr-nbt-ns-poisoning","hash":""},{"id":"shadow-credentials","hash":""},{"id":"active-directory","hash":""}],"backlinks":["active-directory","index","outil-mitm6","bibliotheque-technique","kerberos-unconstrained-delegation","kerberos-delegation"]},{"id":"cors","path":"Cybersécurité Offensive/Techniques/CORS.md","name":"CORS","title":"CORS","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"CORS — Cross-Origin Resource Sharing (attaques)","words":1732,"readTime":8,"modified":"2026-10-06T22:23:57.436Z","links":[{"id":"ssrf","hash":""},{"id":"csrf","hash":""},{"id":"xss-cross-site-scripting","hash":""},{"id":"attaques-jwt","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","bibliotheque-technique","csrf","dns-rebinding","web-sockets"]},{"id":"crlf-injection","path":"Cybersécurité Offensive/Techniques/CRLF Injection.md","name":"CRLF Injection","title":"CRLF Injection","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"CRLF Injection = injecter des caractères \\r\\n (CR + LF) dans une entrée reflétée dans un en-tête HTTP","words":1138,"readTime":5,"modified":"2026-10-06T22:23:57.440Z","links":[{"id":"xss-cross-site-scripting","hash":""},{"id":"open-redirect","hash":""},{"id":"http-request-smuggling","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","bibliotheque-technique","http-request-smuggling"]},{"id":"csrf","path":"Cybersécurité Offensive/Techniques/CSRF.md","name":"CSRF","title":"CSRF","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"CSRF = forcer un utilisateur authentifié à exécuter une action qu'il n'a pas demandée","words":1561,"readTime":7,"modified":"2026-10-06T22:24:48.357Z","links":[{"id":"xss-cross-site-scripting","hash":""},{"id":"cors","hash":""},{"id":"clickjacking","hash":""},{"id":"ssrf","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","outil-xsstrike","account-takeover","bibliotheque-technique","clickjacking","client-side-path-traversal","cors","web-sockets"]},{"id":"css-injection","path":"Cybersécurité Offensive/Techniques/CSS Injection.md","name":"CSS Injection","title":"CSS Injection","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"CSS Injection = laisser l'attaquant injecter/contrôler du CSS dans la page pour exfiltrer des","words":1576,"readTime":7,"modified":"2026-10-06T22:23:57.440Z","links":[{"id":"xss-cross-site-scripting","hash":""},{"id":"xs-leak","hash":""},{"id":"dom-clobbering","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","bibliotheque-technique","tabnabbing","xs-leak"]},{"id":"csv-injection","path":"Cybersécurité Offensive/Techniques/CSV Injection.md","name":"CSV Injection","title":"CSV Injection","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"CSV Injection (Formula Injection) = injecter une formule préfixée par = , + , - ou @","words":844,"readTime":4,"modified":"2026-10-06T22:23:57.440Z","links":[{"id":"xss-cross-site-scripting","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","bibliotheque-technique"]},{"id":"cve-exploits","path":"Cybersécurité Offensive/Techniques/CVE Exploits.md","name":"CVE Exploits","title":"CVE Exploits","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"CVE Exploits = catalogue des vulnérabilités et exploits publics majeurs (CVE, PoC, templates) à croiser avec les versions détectées de la cible pour convertir une reconnaissance en compromission.","words":477,"readTime":2,"modified":"2026-10-06T22:23:57.440Z","links":[{"id":"scan-enumeration","hash":""},{"id":"insecure-management-interface","hash":""},{"id":"denial-of-service","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","outil-metasploit","bibliotheque-technique","insecure-management-interface","regular-expression"]},{"id":"dcsync","path":"Cybersécurité Offensive/Techniques/DCsync.md","name":"DCsync","title":"DCsync","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"active-directory","tags":["cyber","technique","active-directory"],"status":"publie","excerpt":"DCsync = imiter le processus de réplication AD : on demande au Domain Controller les hashes","words":303,"readTime":1,"modified":"2026-10-06T22:23:57.444Z","links":[{"id":"golden-ticket","hash":""},{"id":"kerberos-le-protocole","hash":""},{"id":"pass-the-hash","hash":""},{"id":"acl-abuse-ad","hash":""},{"id":"active-directory","hash":""}],"backlinks":["active-directory","outil-bloodhound","outil-crackmapexec","bibliotheque-technique","dump-ntds-dit","golden-ticket","pass-the-hash"]},{"id":"denial-of-service","path":"Cybersécurité Offensive/Techniques/Denial of Service.md","name":"Denial of Service","title":"Denial of Service","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"DoS = rendre un service indisponible en épuisant ses ressources (CPU, mémoire,","words":696,"readTime":3,"modified":"2026-10-06T22:24:48.361Z","links":[{"id":"xxe","hash":""},{"id":"brute-force-rate-limit","hash":""},{"id":"injection-sql","hash":""},{"id":"business-logic","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","bibliotheque-technique","cve-exploits","regular-expression","zip-slip"]},{"id":"dependency-confusion","path":"Cybersécurité Offensive/Techniques/Dependency Confusion.md","name":"Dependency Confusion","title":"Dependency Confusion","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"Dependency confusion = piéger un installateur de dépendances (npm, pip, gem, maven…) pour qu'il","words":682,"readTime":3,"modified":"2026-10-06T22:23:57.448Z","links":[{"id":"insecure-source-code-management","hash":""},{"id":"api-key-leaks","hash":""},{"id":"privilege-escalation-linux","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","bibliotheque-technique"]},{"id":"dll-hijacking","path":"Cybersécurité Offensive/Techniques/DLL Hijacking.md","name":"DLL Hijacking","title":"DLL Hijacking","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"reseau-postexploit","tags":["cyber","technique","reseau-postexploit"],"status":"publie","excerpt":"DLL Hijacking = déposer une DLL malveillante à un endroit où un service légitime va la charger","words":218,"readTime":1,"modified":"2026-10-06T22:23:57.444Z","links":[{"id":"privilege-escalation-windows","hash":""},{"id":"reverse-shells","hash":""},{"id":"post-exploitation","hash":""}],"backlinks":["post-exploitation","reverse-engineering-malware-analysis","outil-havoc","bibliotheque-technique","privilege-escalation-windows"]},{"id":"dns-rebinding","path":"Cybersécurité Offensive/Techniques/DNS Rebinding.md","name":"DNS Rebinding","title":"DNS Rebinding","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"DNS Rebinding = faire re-résoudre un nom de domaine contrôlé par l'attaquant vers une IP interne (127.0.0.1, réseau local) après une première résolution légitime, pour que le navigateur de la victime parle à un servic…","words":1554,"readTime":7,"modified":"2026-10-06T22:23:57.448Z","links":[{"id":"ssrf","hash":""},{"id":"cors","hash":""},{"id":"web-sockets","hash":""},{"id":"xss-cross-site-scripting","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","bibliotheque-technique"]},{"id":"dom-clobbering","path":"Cybersécurité Offensive/Techniques/DOM Clobbering.md","name":"DOM Clobbering","title":"DOM Clobbering","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"DOM Clobbering = saturer les variables globales du navigateur en injectant des balises HTML","words":1402,"readTime":6,"modified":"2026-10-06T22:24:48.361Z","links":[{"id":"xss-cross-site-scripting","hash":""},{"id":"prototype-pollution","hash":""},{"id":"ssrf","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","bibliotheque-technique","css-injection"]},{"id":"dump-ntds-dit","path":"Cybersécurité Offensive/Techniques/Dump NTDS.dit.md","name":"Dump NTDS.dit","title":"Dump NTDS.dit","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"active-directory","tags":["cyber","technique","active-directory"],"status":"publie","excerpt":"NTDS.dit = la base de données AD (sur chaque DC) qui contient tous les hashes NTLM/AES du domaine —","words":439,"readTime":2,"modified":"2026-10-06T22:23:57.448Z","links":[{"id":"kerberos-delegation","hash":""},{"id":"pass-the-hash","hash":""},{"id":"dcsync","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"active-directory","hash":""}],"backlinks":["outil-crackmapexec","outil-hash-identifier","outil-hashcat","outil-oneruletorulethemall","bibliotheque-technique"]},{"id":"encoding-transformations","path":"Cybersécurité Offensive/Techniques/Encoding Transformations.md","name":"Encoding Transformations","title":"Encoding Transformations","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"Les transformations d'encodage changent la représentation d'une donnée sans changer son sens — l'attaquant les utilise comme gadgets pour bypasser filtres d'input, WAF et routines de sanitization.","words":493,"readTime":2,"modified":"2026-10-06T22:23:57.452Z","links":[{"id":"xss-cross-site-scripting","hash":""},{"id":"path-traversal","hash":""},{"id":"client-side-path-traversal","hash":""},{"id":"injection-sql","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","bibliotheque-technique","client-side-path-traversal"]},{"id":"external-variable-modification","path":"Cybersécurité Offensive/Techniques/External Variable Modification.md","name":"External Variable Modification","title":"External Variable Modification","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"External Variable Modification = l'app importe des données contrôlées par l'attaquant (GET/POST/headers) dans la portée globale de variables (ex : extract($ GET) en PHP) → l'attaquant écrase des variables internes cri…","words":469,"readTime":2,"modified":"2026-10-06T22:23:57.452Z","links":[{"id":"mass-assignment","hash":""},{"id":"insecure-source-code-management","hash":""},{"id":"lfi-et-rfi","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","bibliotheque-technique","insecure-source-code-management"]},{"id":"golden-ticket","path":"Cybersécurité Offensive/Techniques/Golden Ticket.md","name":"Golden Ticket","title":"Golden Ticket","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"active-directory","tags":["cyber","technique","active-directory"],"status":"publie","excerpt":"Golden Ticket = forger un TGT valide pour n'importe quel utilisateur en possédant la clé de","words":295,"readTime":1,"modified":"2026-10-06T22:23:57.452Z","links":[{"id":"dcsync","hash":""},{"id":"kerberos-le-protocole","hash":""},{"id":"silver-ticket","hash":""},{"id":"active-directory","hash":""}],"backlinks":["active-directory","post-exploitation","outil-bloodhound","outil-crackmapexec","outil-rubeus","bibliotheque-technique","dcsync","kerberos-le-protocole","pass-the-ticket-et-overpass-the-hash","silver-ticket"]},{"id":"google-web-toolkit","path":"Cybersécurité Offensive/Techniques/Google Web Toolkit.md","name":"Google Web Toolkit","title":"Google Web Toolkit","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"Google Web Toolkit (GWT) compile du Java en JavaScript frontend avec un protocole RPC de sérialisation maison — mal audité, il expose méthodes serveur, permet l'injection dans les payloads sérialisés et mène à de l'ex…","words":541,"readTime":2,"modified":"2026-10-06T22:23:57.452Z","links":[{"id":"insecure-deserialization","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"api-key-leaks","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","bibliotheque-technique"]},{"id":"graphql","path":"Cybersécurité Offensive/Techniques/GraphQL.md","name":"GraphQL","title":"GraphQL","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"GraphQL = un langage de requête d'API où le client choisit lui-même les champs à retourner — l'attaquant peut introspecter le schéma complet , injecter du SQL/NoSQL dans les arguments, bruteforcer en masse via le batc…","words":1620,"readTime":7,"modified":"2026-10-06T22:24:48.365Z","links":[{"id":"nosql","hash":""},{"id":"injection-sql","hash":""},{"id":"xss-cross-site-scripting","hash":""},{"id":"ssrf","hash":""},{"id":"attaques-jwt","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","outil-burp-extensions-bapp-store","outil-burp-suite","outil-sqlmap","bibliotheque-technique","idor","nosql"]},{"id":"hardware-amiibo-et-ntag215","path":"Cybersécurité Offensive/Techniques/Hardware - Amiibo et NTAG215.md","name":"Hardware - Amiibo et NTAG215","title":"Hardware - Amiibo et NTAG215","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"Un Amiibo est une puce NTAG215 (NFC 13.56 MHz) dont les données sont chiffrées et","words":1564,"readTime":7,"modified":"2026-10-06T22:23:57.456Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-rfid-et-nfc","hash":""},{"id":"hardware-rfid-mifare-hf-13-56-mhz","hash":""},{"id":"hardware-proxmark","hash":""},{"id":"hardware-flipper-zero","hash":""},{"id":"hardware-hydranfc","hash":""},{"id":"bibliotheque-technique","hash":""}],"backlinks":["hardware-iot-pentesting","bibliotheque-technique","hardware-hydranfc","hardware-rfid-mifare-hf-13-56-mhz"]},{"id":"hardware-arduino","path":"Cybersécurité Offensive/Techniques/Hardware - Arduino.md","name":"Hardware - Arduino","title":"Hardware - Arduino","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"L' Arduino est la plateforme de prototypage la plus répandue : en hardware","words":1808,"readTime":8,"modified":"2026-10-06T22:23:57.456Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-uart","hash":""},{"id":"hardware-i2c-et-spi","hash":""},{"id":"hardware-jtag-et-swd","hash":""},{"id":"hardware-logic-analyzer","hash":""}],"backlinks":["glossaire","hardware-iot-pentesting","outil-duckuino","outil-usb-host-shield","outil-usb-rubber-ducky","bibliotheque-technique","hardware-kits-et-ressources"]},{"id":"hardware-bruschetta-board","path":"Cybersécurité Offensive/Techniques/Hardware - Bruschetta Board.md","name":"Hardware - Bruschetta Board","title":"Hardware - Bruschetta Board","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"BRUSCHETTA = le « couteau suisse multi-protocoles » du hardware hacker","words":1768,"readTime":8,"modified":"2026-10-06T22:23:57.456Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-uart","hash":""},{"id":"hardware-i2c-et-spi","hash":""},{"id":"hardware-jtag-et-swd","hash":""},{"id":"hardware-ch341a","hash":""}],"backlinks":["hardware-iot-pentesting","bibliotheque-technique"]},{"id":"hardware-bus-pirate","path":"Cybersécurité Offensive/Techniques/Hardware - Bus Pirate.md","name":"Hardware - Bus Pirate","title":"Hardware - Bus Pirate","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"Le Bus Pirate est un petit adaptateur USB de debug hardware qui parle les protocoles","words":2807,"readTime":13,"modified":"2026-10-06T22:24:48.369Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-ch341a","hash":""},{"id":"hardware-i2c-et-spi","hash":""},{"id":"hardware-uart","hash":""},{"id":"hardware-jtag-et-swd","hash":""},{"id":"hardware-dump-et-analyse-de-firmware","hash":""}],"backlinks":["glossaire","hardware-iot-pentesting","bibliotheque-technique","hardware-ch341a","hardware-dump-et-analyse-de-firmware","hardware-i2c-et-spi","hardware-kits-et-ressources","hardware-uart"]},{"id":"hardware-ch341a","path":"Cybersécurité Offensive/Techniques/Hardware - CH341A.md","name":"Hardware - CH341A","title":"Hardware - CH341A","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"La CH341A est la petite carte USB (quelques euros) qui transforme ton PC en","words":2738,"readTime":12,"modified":"2026-10-06T22:24:48.369Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-bus-pirate","hash":""},{"id":"hardware-memory-programmer","hash":""},{"id":"hardware-i2c-et-spi","hash":""},{"id":"hardware-dump-et-analyse-de-firmware","hash":""},{"id":"hardware-uart","hash":""}],"backlinks":["glossaire","hardware-iot-pentesting","bibliotheque-technique","hardware-bruschetta-board","hardware-bus-pirate","hardware-dump-et-analyse-de-firmware","hardware-i2c-et-spi","hardware-kits-et-ressources","hardware-memory-programmer","hardware-uart"]},{"id":"hardware-composants-electroniques","path":"Cybersécurité Offensive/Techniques/Hardware - Composants électroniques.md","name":"Hardware - Composants électroniques","title":"Hardware - Composants électroniques","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"Reconnaître les composants sur un PCB (résistances, condensateurs, transistors,","words":2816,"readTime":13,"modified":"2026-10-06T22:23:57.460Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-dump-et-analyse-de-firmware","hash":""},{"id":"hardware-jtag-et-swd","hash":""},{"id":"hardware-identification-de-puces","hash":""}],"backlinks":["glossaire","hardware-iot-pentesting","bibliotheque-technique","hardware-kits-et-ressources"]},{"id":"hardware-dump-et-analyse-de-firmware","path":"Cybersécurité Offensive/Techniques/Hardware - Dump et Analyse de Firmware.md","name":"Hardware - Dump et Analyse de Firmware","title":"Hardware - Dump et Analyse de Firmware","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"Dumper le firmware = récupérer tout le logiciel d'un objet connecté depuis sa mémoire flash,","words":2450,"readTime":11,"modified":"2026-10-06T22:23:57.464Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-ch341a","hash":""},{"id":"hardware-bus-pirate","hash":""},{"id":"hardware-memory-programmer","hash":""},{"id":"hardware-logic-analyzer","hash":""},{"id":"hardware-jtag-et-swd","hash":""},{"id":"hardware-uart","hash":""}],"backlinks":["glossaire","hardware-iot-pentesting","outil-apktool","outil-frida","outil-ghidra","outil-jadx","bibliotheque-technique","hardware-bus-pirate","hardware-ch341a","hardware-composants-electroniques","hardware-esp32","hardware-fault-injection","hardware-goodfet","hardware-hydraflash","hardware-i2c-et-spi","hardware-jtag-et-swd","hardware-kits-et-ressources","hardware-logic-analyzer","hardware-m5stack","hardware-memory-programmer","hardware-microbit","hardware-raspberry-pi","hardware-secure-boot","hardware-uart","protocole-can-bus","protocole-http-iot","protocole-usb"]},{"id":"hardware-esp32","path":"Cybersécurité Offensive/Techniques/Hardware - ESP32.md","name":"Hardware - ESP32","title":"Hardware - ESP32","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"L' ESP32 est le microcontrôleur WiFi/Bluetooth le plus répandu de l'Internet des","words":1974,"readTime":9,"modified":"2026-10-06T22:23:57.464Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-uart","hash":""},{"id":"hardware-jtag-et-swd","hash":""},{"id":"hardware-dump-et-analyse-de-firmware","hash":""},{"id":"hardware-secure-boot","hash":""}],"backlinks":["glossaire","hardware-iot-pentesting","bibliotheque-technique","hardware-kits-et-ressources","hardware-m5stack"]},{"id":"hardware-fault-injection","path":"Cybersécurité Offensive/Techniques/Hardware - Fault Injection.md","name":"Hardware - Fault Injection","title":"Hardware - Fault Injection","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware","iot"],"status":"publie","excerpt":"Le glitching (ou fault injection) : provoquer un défaut électrique contrôlé au bon moment","words":1083,"readTime":5,"modified":"2026-10-06T22:23:57.464Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-fault-injection","hash":""},{"id":"hardware-jtag-et-swd","hash":""},{"id":"hardware-secure-boot","hash":""},{"id":"hardware-logic-analyzer","hash":""},{"id":"hardware-dump-et-analyse-de-firmware","hash":""}],"backlinks":["glossaire","hardware-iot-pentesting","bibliotheque-technique","hardware-fault-injection","hardware-jtag-et-swd","hardware-secure-boot"]},{"id":"hardware-flipper-zero","path":"Cybersécurité Offensive/Techniques/Hardware - Flipper Zero.md","name":"Hardware - Flipper Zero","title":"Hardware - Flipper Zero","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"Le Flipper Zero est le couteau suisse du pentester hardware : RFID/NFC , Sub-GHz ,","words":2571,"readTime":12,"modified":"2026-10-06T22:23:57.464Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-rfid-et-nfc","hash":""},{"id":"hardware-uart","hash":""},{"id":"hardware-jtag-et-swd","hash":""},{"id":"hardware-proxmark","hash":""},{"id":"hardware-rfid-mifare-hf-13-56-mhz","hash":""},{"id":"hardware-pwnagotchi","hash":""},{"id":"hardware-hydrabus","hash":""},{"id":"hardware-rfid-lf-hid-em410x-indala-hitag","hash":""},{"id":"bibliotheque-technique","hash":""}],"backlinks":["glossaire","hardware-iot-pentesting","outil-flipper-zero-usb-radio","bibliotheque-technique","hardware-amiibo-et-ntag215","hardware-hydrabus","hardware-hydranfc","hardware-hydrausb3","hardware-limesdr-et-bts","hardware-mots-de-passe-par-defaut-iot","hardware-proxmark","hardware-pwnagotchi","hardware-rfid-et-nfc","hardware-rfid-lf-hid-em410x-indala-hitag","hardware-rfid-mifare-hf-13-56-mhz","hardware-sdr"]},{"id":"hardware-goodfet","path":"Cybersécurité Offensive/Techniques/Hardware - GoodFET.md","name":"Hardware - GoodFET","title":"Hardware - GoodFET","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"GoodFET = un adaptateur de bus embarqué open source pour divers","words":1679,"readTime":8,"modified":"2026-10-06T22:23:57.468Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-jtag-et-swd","hash":""},{"id":"hardware-dump-et-analyse-de-firmware","hash":""},{"id":"protocole-usb","hash":""}],"backlinks":["hardware-iot-pentesting","bibliotheque-technique"]},{"id":"hardware-hydrabus","path":"Cybersécurité Offensive/Techniques/Hardware - HydraBus.md","name":"Hardware - HydraBus","title":"Hardware - HydraBus","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"HydraBus = une plateforme open source multifonction (à base de LPC4330) qui","words":2406,"readTime":11,"modified":"2026-10-06T22:23:57.468Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-uart","hash":""},{"id":"hardware-i2c-et-spi","hash":""},{"id":"hardware-jtag-et-swd","hash":""},{"id":"hardware-rfid-et-nfc","hash":""},{"id":"hardware-hydranfc","hash":""},{"id":"hardware-flipper-zero","hash":""},{"id":"hardware-proxmark","hash":""},{"id":"hardware-hydrausb3","hash":""},{"id":"bibliotheque-technique","hash":""}],"backlinks":["hardware-iot-pentesting","bibliotheque-technique","hardware-flipper-zero","hardware-hydranfc","hardware-hydrausb3"]},{"id":"hardware-hydraflash","path":"Cybersécurité Offensive/Techniques/Hardware - HydraFlash.md","name":"Hardware - HydraFlash","title":"Hardware - HydraFlash","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"HydraFlash = le shield NAND Flash de l'HydraBus, conçu pour dumper le","words":1773,"readTime":8,"modified":"2026-10-06T22:23:57.468Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-dump-et-analyse-de-firmware","hash":""},{"id":"hardware-i2c-et-spi","hash":""}],"backlinks":["hardware-iot-pentesting","bibliotheque-technique"]},{"id":"hardware-hydranfc","path":"Cybersécurité Offensive/Techniques/Hardware - HydraNFC.md","name":"Hardware - HydraNFC","title":"Hardware - HydraNFC","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"Le HydraNFC Shield v2 est un shield NFC open-source basé sur le chipset","words":1375,"readTime":6,"modified":"2026-10-06T22:23:57.468Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-rfid-mifare-hf-13-56-mhz","hash":""},{"id":"hardware-amiibo-et-ntag215","hash":""},{"id":"hardware-rfid-lf-hid-em410x-indala-hitag","hash":""},{"id":"hardware-hydrabus","hash":""},{"id":"hardware-proxmark","hash":""},{"id":"hardware-flipper-zero","hash":""},{"id":"bibliotheque-technique","hash":""}],"backlinks":["wireless-mitm-social-engineering","hardware-iot-pentesting","bibliotheque-technique","hardware-amiibo-et-ntag215","hardware-hydrabus","hardware-hydrausb3","hardware-proxmark","hardware-rfid-mifare-hf-13-56-mhz"]},{"id":"hardware-hydrausb3","path":"Cybersécurité Offensive/Techniques/Hardware - HydraUSB3.md","name":"Hardware - HydraUSB3","title":"Hardware - HydraUSB3","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"HydraUSB3 est une plateforme open-source de test de sécurité USB 2.0/3.0 basée","words":1635,"readTime":7,"modified":"2026-10-06T22:23:57.472Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-flipper-zero","hash":""},{"id":"hardware-proxmark","hash":""},{"id":"hardware-pwnagotchi","hash":""},{"id":"hardware-hydrabus","hash":""},{"id":"hardware-hydranfc","hash":""},{"id":"bibliotheque-technique","hash":""}],"backlinks":["hardware-iot-pentesting","bibliotheque-technique","hardware-hydrabus"]},{"id":"hardware-i2c-et-spi","path":"Cybersécurité Offensive/Techniques/Hardware - I2C et SPI.md","name":"Hardware - I2C et SPI","title":"Hardware - I2C et SPI","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware","iot"],"status":"publie","excerpt":"I2C et SPI sont les bus internes qui relient le microcontrôleur à ses périphériques","words":1000,"readTime":5,"modified":"2026-10-06T22:23:57.472Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-i2c-et-spi","hash":""},{"id":"hardware-dump-et-analyse-de-firmware","hash":""},{"id":"hardware-ch341a","hash":""},{"id":"hardware-bus-pirate","hash":""},{"id":"hardware-raspberry-pi","hash":""},{"id":"hardware-logic-analyzer","hash":""},{"id":"hardware-uart","hash":""},{"id":"hardware-jtag-et-swd","hash":""}],"backlinks":["glossaire","hardware-iot-pentesting","bibliotheque-technique","hardware-arduino","hardware-bruschetta-board","hardware-bus-pirate","hardware-ch341a","hardware-hydrabus","hardware-hydraflash","hardware-i2c-et-spi","hardware-logic-analyzer","hardware-m5stack","hardware-memory-programmer","hardware-raspberry-pi","hardware-uart","protocole-usb"]},{"id":"hardware-icopy-x","path":"Cybersécurité Offensive/Techniques/Hardware - iCopy-X.md","name":"Hardware - iCopy-X","title":"Hardware - iCopy-X","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"iCopy-X = un copieur RFID portable « super-automatisé » basé sur","words":1924,"readTime":9,"modified":"2026-10-06T22:23:57.492Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-rfid-et-nfc","hash":""},{"id":"hardware-proxmark","hash":""}],"backlinks":["wireless-mitm-social-engineering","hardware-iot-pentesting","bibliotheque-technique"]},{"id":"hardware-identification-de-puces","path":"Cybersécurité Offensive/Techniques/Hardware - Identification de puces.md","name":"Hardware - Identification de puces","title":"Hardware - Identification de puces","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"Identifier la puce d'un device = remonter au datasheet (pinout, protocoles, faiblesses)","words":3324,"readTime":15,"modified":"2026-10-06T22:23:57.472Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-recherche-fcc-id","hash":""},{"id":"hardware-mots-de-passe-par-defaut-iot","hash":""},{"id":"hardware-limesdr-et-bts","hash":""}],"backlinks":["glossaire","hardware-iot-pentesting","bibliotheque-technique","hardware-composants-electroniques","hardware-mots-de-passe-par-defaut-iot","hardware-recherche-fcc-id"]},{"id":"hardware-jtag-et-swd","path":"Cybersécurité Offensive/Techniques/Hardware - JTAG et SWD.md","name":"Hardware - JTAG et SWD","title":"Hardware - JTAG et SWD","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware","iot"],"status":"publie","excerpt":"JTAG/SWD = le débogueur matériel des microcontrôleurs : s'il n'est pas protégé, on a","words":971,"readTime":4,"modified":"2026-10-06T22:23:57.472Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-jtag-et-swd","hash":""},{"id":"hardware-dump-et-analyse-de-firmware","hash":""},{"id":"hardware-uart","hash":""},{"id":"hardware-fault-injection","hash":""},{"id":"hardware-logic-analyzer","hash":""}],"backlinks":["glossaire","hardware-iot-pentesting","outil-radare2","bibliotheque-technique","hardware-arduino","hardware-bruschetta-board","hardware-bus-pirate","hardware-composants-electroniques","hardware-dump-et-analyse-de-firmware","hardware-esp32","hardware-fault-injection","hardware-flipper-zero","hardware-goodfet","hardware-hydrabus","hardware-i2c-et-spi","hardware-jtag-et-swd","hardware-kits-et-ressources","hardware-logic-analyzer","hardware-memory-programmer","hardware-microbit","hardware-raspberry-pi","hardware-uart","protocole-can-bus"]},{"id":"hardware-kits-et-ressources","path":"Cybersécurité Offensive/Techniques/Hardware - Kits et ressources.md","name":"Hardware - Kits et ressources","title":"Hardware - Kits et ressources","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"Une liste des kits hardware, challenges CTF, chaînes, livres et ressources pour","words":2372,"readTime":11,"modified":"2026-10-06T22:23:57.476Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-ch341a","hash":""},{"id":"hardware-bus-pirate","hash":""},{"id":"hardware-memory-programmer","hash":""},{"id":"hardware-logic-analyzer","hash":""},{"id":"hardware-dump-et-analyse-de-firmware","hash":""},{"id":"hardware-composants-electroniques","hash":""},{"id":"hardware-arduino","hash":""},{"id":"hardware-esp32","hash":""},{"id":"hardware-raspberry-pi","hash":""},{"id":"hardware-uart","hash":""},{"id":"hardware-jtag-et-swd","hash":""},{"id":"hardware-rfid-et-nfc","hash":""}],"backlinks":["hardware-iot-pentesting","bibliotheque-technique"]},{"id":"hardware-limesdr-et-bts","path":"Cybersécurité Offensive/Techniques/Hardware - LimeSDR et BTS.md","name":"Hardware - LimeSDR et BTS","title":"Hardware - LimeSDR et BTS","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"Monter une vraie station GSM 2G avec un LimeSDR + la stack Osmocom","words":3335,"readTime":15,"modified":"2026-10-06T22:23:57.476Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-sdr","hash":""},{"id":"hardware-flipper-zero","hash":""},{"id":"hardware-rfid-et-nfc","hash":""}],"backlinks":["glossaire","hardware-iot-pentesting","bibliotheque-technique","hardware-identification-de-puces"]},{"id":"hardware-logic-analyzer","path":"Cybersécurité Offensive/Techniques/Hardware - Logic Analyzer.md","name":"Hardware - Logic Analyzer","title":"Hardware - Logic Analyzer","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"Le logic analyzer enregistre l'état de plusieurs signaux numériques dans le temps et","words":2725,"readTime":12,"modified":"2026-10-06T22:23:57.476Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-uart","hash":""},{"id":"hardware-i2c-et-spi","hash":""},{"id":"hardware-jtag-et-swd","hash":""},{"id":"hardware-dump-et-analyse-de-firmware","hash":""}],"backlinks":["glossaire","hardware-iot-pentesting","outil-cutter","bibliotheque-technique","hardware-arduino","hardware-dump-et-analyse-de-firmware","hardware-fault-injection","hardware-i2c-et-spi","hardware-jtag-et-swd","hardware-kits-et-ressources","hardware-uart"]},{"id":"hardware-m5stack","path":"Cybersécurité Offensive/Techniques/Hardware - M5Stack.md","name":"Hardware - M5Stack","title":"Hardware - M5Stack","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"Evil-M5Core2 = un logiciel de déploiement facile de « Evil Portal » et","words":2730,"readTime":12,"modified":"2026-10-06T22:23:57.476Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-esp32","hash":""},{"id":"hardware-dump-et-analyse-de-firmware","hash":""},{"id":"hardware-i2c-et-spi","hash":""}],"backlinks":["glossaire","hardware-iot-pentesting","bibliotheque-technique"]},{"id":"hardware-memory-programmer","path":"Cybersécurité Offensive/Techniques/Hardware - Memory Programmer.md","name":"Hardware - Memory Programmer","title":"Hardware - Memory Programmer","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"Un programmeur ISP comme le RT809H lit/écrit toutes les mémoires — SPI NOR,","words":2607,"readTime":12,"modified":"2026-10-06T22:24:48.381Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-ch341a","hash":""},{"id":"hardware-dump-et-analyse-de-firmware","hash":""},{"id":"hardware-jtag-et-swd","hash":""},{"id":"hardware-i2c-et-spi","hash":""}],"backlinks":["hardware-iot-pentesting","bibliotheque-technique","hardware-ch341a","hardware-dump-et-analyse-de-firmware","hardware-kits-et-ressources"]},{"id":"hardware-microbit","path":"Cybersécurité Offensive/Techniques/Hardware - microbit.md","name":"Hardware - microbit","title":"Hardware - microbit","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"Le micro:bit (BBC) est une carte de prototypage éducative à base de nRF52833 (Nordic, ARM Cortex-M4F + BLE 5.1) : en pentest, son intérêt réside dans l'extraction du code source JavaScript MakeCode depuis le firmware,…","words":1737,"readTime":8,"modified":"2026-10-06T22:23:57.492Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-dump-et-analyse-de-firmware","hash":""},{"id":"hardware-jtag-et-swd","hash":""},{"id":"hardware-raspberry-pi","hash":""},{"id":"hardware-sdr","hash":""}],"backlinks":["hardware-iot-pentesting","bibliotheque-technique"]},{"id":"hardware-mots-de-passe-par-defaut-iot","path":"Cybersécurité Offensive/Techniques/Hardware - Mots de passe par défaut IoT.md","name":"Hardware - Mots de passe par défaut IoT","title":"Hardware - Mots de passe par défaut IoT","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"Les devices IoT embarquent des mots de passe par défaut (root/admin/123456…)","words":3188,"readTime":14,"modified":"2026-10-06T22:23:57.480Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-identification-de-puces","hash":""},{"id":"hardware-recherche-fcc-id","hash":""},{"id":"hardware-flipper-zero","hash":""}],"backlinks":["hardware-iot-pentesting","bibliotheque-technique","hardware-identification-de-puces","hardware-recherche-fcc-id"]},{"id":"hardware-proxmark","path":"Cybersécurité Offensive/Techniques/Hardware - Proxmark.md","name":"Hardware - Proxmark","title":"Hardware - Proxmark","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"Le Proxmark3 est la référence en recherche RFID : il lit, écrit et clone la","words":2334,"readTime":11,"modified":"2026-10-06T22:23:57.480Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-rfid-et-nfc","hash":""},{"id":"hardware-rfid-mifare-hf-13-56-mhz","hash":""},{"id":"hardware-flipper-zero","hash":""},{"id":"hardware-hydranfc","hash":""},{"id":"hardware-pwnagotchi","hash":""},{"id":"hardware-rfid-lf-hid-em410x-indala-hitag","hash":""},{"id":"bibliotheque-technique","hash":""}],"backlinks":["wireless-mitm-social-engineering","glossaire","hardware-iot-pentesting","outil-flipper-zero-usb-radio","bibliotheque-technique","hardware-amiibo-et-ntag215","hardware-flipper-zero","hardware-hydrabus","hardware-hydranfc","hardware-hydrausb3","hardware-icopy-x","hardware-pwnagotchi","hardware-rfid-et-nfc","hardware-rfid-lf-hid-em410x-indala-hitag","hardware-rfid-mifare-hf-13-56-mhz","hardware-sdr"]},{"id":"hardware-pwnagotchi","path":"Cybersécurité Offensive/Techniques/Hardware - Pwnagotchi.md","name":"Hardware - Pwnagotchi","title":"Hardware - Pwnagotchi","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"Le Pwnagotchi est un Raspberry Pi Zero W doté d'un écran e-ink et d'une « IA » qui","words":2323,"readTime":11,"modified":"2026-10-06T22:23:57.484Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"attaques-wifi-wpa2-et-pmkid","hash":""},{"id":"hardware-flipper-zero","hash":""},{"id":"hardware-proxmark","hash":""},{"id":"bibliotheque-technique","hash":""}],"backlinks":["glossaire","hardware-iot-pentesting","attaques-wifi-pmkid","bibliotheque-technique","hardware-flipper-zero","hardware-hydrausb3","hardware-proxmark","hardware-rfid-mifare-hf-13-56-mhz"]},{"id":"hardware-raspberry-pi","path":"Cybersécurité Offensive/Techniques/Hardware - Raspberry Pi.md","name":"Hardware - Raspberry Pi","title":"Hardware - Raspberry Pi","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"Le Raspberry Pi n'est pas qu'un mini-PC : son header GPIO 40 broches expose","words":1927,"readTime":9,"modified":"2026-10-06T22:23:57.484Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-uart","hash":""},{"id":"hardware-i2c-et-spi","hash":""},{"id":"hardware-dump-et-analyse-de-firmware","hash":""},{"id":"hardware-jtag-et-swd","hash":""}],"backlinks":["glossaire","hardware-iot-pentesting","outil-p4wnp1-a-l-o-a","bibliotheque-technique","hardware-i2c-et-spi","hardware-kits-et-ressources","hardware-microbit"]},{"id":"hardware-recherche-fcc-id","path":"Cybersécurité Offensive/Techniques/Hardware - Recherche FCC ID.md","name":"Hardware - Recherche FCC ID","title":"Hardware - Recherche FCC ID","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"Le FCC ID gravé sur tout device sans fil vendu aux USA est la clé d'accès gratuite","words":2854,"readTime":13,"modified":"2026-10-06T22:23:57.488Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-identification-de-puces","hash":""},{"id":"hardware-mots-de-passe-par-defaut-iot","hash":""},{"id":"hardware-sdr","hash":""}],"backlinks":["glossaire","hardware-iot-pentesting","bibliotheque-technique","hardware-identification-de-puces","hardware-mots-de-passe-par-defaut-iot"]},{"id":"hardware-rfid-et-nfc","path":"Cybersécurité Offensive/Techniques/Hardware - RFID et NFC.md","name":"Hardware - RFID et NFC","title":"Hardware - RFID et NFC","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware","iot"],"status":"publie","excerpt":"RFID/NFC = badges, tickets et cartes de paiement : souvent clonables , rejouables","words":715,"readTime":3,"modified":"2026-10-06T22:23:57.484Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-rfid-et-nfc","hash":""},{"id":"hardware-rfid-mifare-hf-13-56-mhz","hash":""},{"id":"hardware-rfid-lf-hid-em410x-indala-hitag","hash":""},{"id":"hardware-proxmark","hash":""},{"id":"hardware-flipper-zero","hash":""}],"backlinks":["wireless-mitm-social-engineering","cheatsheets","glossaire","hardware-iot-pentesting","outil-flipper-zero-usb-radio","bibliotheque-technique","hardware-amiibo-et-ntag215","hardware-flipper-zero","hardware-hydrabus","hardware-icopy-x","hardware-kits-et-ressources","hardware-limesdr-et-bts","hardware-proxmark","hardware-rfid-et-nfc","hardware-rfid-lf-hid-em410x-indala-hitag","hardware-rfid-mifare-hf-13-56-mhz","hardware-sdr","protocole-bluetooth","protocole-lora","protocole-zigbee"]},{"id":"hardware-rfid-lf-hid-em410x-indala-hitag","path":"Cybersécurité Offensive/Techniques/Hardware - RFID LF (HID, EM410X, Indala, HiTag).md","name":"Hardware - RFID LF (HID, EM410X, Indala, HiTag)","title":"Hardware - RFID LF (HID, EM410X, Indala, HiTag)","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware","iot"],"status":"publie","excerpt":"Les badges 125 kHz (HID Prox, EM410X, Indala, HiTag) émettent un ID fixe en clair, sans","words":1036,"readTime":5,"modified":"2026-10-06T22:23:57.484Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-rfid-lf-hid-em410x-indala-hitag","hash":""},{"id":"hardware-rfid-et-nfc","hash":""},{"id":"hardware-proxmark","hash":""},{"id":"hardware-flipper-zero","hash":""},{"id":"hardware-rfid-mifare-hf-13-56-mhz","hash":""}],"backlinks":["wireless-mitm-social-engineering","cheatsheets","glossaire","hardware-iot-pentesting","outil-flipper-zero-usb-radio","bibliotheque-technique","hardware-flipper-zero","hardware-hydranfc","hardware-proxmark","hardware-rfid-et-nfc","hardware-rfid-lf-hid-em410x-indala-hitag","hardware-rfid-mifare-hf-13-56-mhz"]},{"id":"hardware-rfid-mifare-hf-13-56-mhz","path":"Cybersécurité Offensive/Techniques/Hardware - RFID MIFARE (HF 13.56 MHz).md","name":"Hardware - RFID MIFARE (HF 13.56 MHz)","title":"Hardware - RFID MIFARE (HF 13.56 MHz)","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"MIFARE Classic repose sur la crypto Crypto1 cassée : avec une seule clé par défaut","words":1809,"readTime":8,"modified":"2026-10-06T22:23:57.484Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-rfid-et-nfc","hash":""},{"id":"hardware-rfid-lf-hid-em410x-indala-hitag","hash":""},{"id":"hardware-proxmark","hash":""},{"id":"hardware-flipper-zero","hash":""},{"id":"hardware-hydranfc","hash":""},{"id":"hardware-pwnagotchi","hash":""},{"id":"hardware-amiibo-et-ntag215","hash":""},{"id":"bibliotheque-technique","hash":""}],"backlinks":["wireless-mitm-social-engineering","cheatsheets","glossaire","hardware-iot-pentesting","outil-flipper-zero-usb-radio","bibliotheque-technique","hardware-amiibo-et-ntag215","hardware-flipper-zero","hardware-hydranfc","hardware-proxmark","hardware-rfid-et-nfc","hardware-rfid-lf-hid-em410x-indala-hitag"]},{"id":"hardware-sdr","path":"Cybersécurité Offensive/Techniques/Hardware - SDR.md","name":"Hardware - SDR","title":"Hardware - SDR","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware","iot"],"status":"publie","excerpt":"La Software Defined Radio transforme un PC en récepteur/émetteur radio complet","words":1279,"readTime":6,"modified":"2026-10-06T22:23:57.488Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-sdr","hash":""},{"id":"hardware-rfid-et-nfc","hash":""},{"id":"hardware-flipper-zero","hash":""},{"id":"hardware-proxmark","hash":""}],"backlinks":["wireless-mitm-social-engineering","glossaire","hardware-iot-pentesting","bibliotheque-technique","hardware-limesdr-et-bts","hardware-microbit","hardware-recherche-fcc-id","hardware-sdr"]},{"id":"hardware-secure-boot","path":"Cybersécurité Offensive/Techniques/Hardware - Secure Boot.md","name":"Hardware - Secure Boot","title":"Hardware - Secure Boot","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware","iot"],"status":"publie","excerpt":"Le Secure Boot garantit qu' uniquement des logiciels signés et de confiance se chargent","words":1210,"readTime":6,"modified":"2026-10-06T22:23:57.488Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-secure-boot","hash":""},{"id":"hardware-fault-injection","hash":""},{"id":"hardware-uart","hash":""},{"id":"hardware-dump-et-analyse-de-firmware","hash":""}],"backlinks":["glossaire","hardware-iot-pentesting","bibliotheque-technique","hardware-esp32","hardware-fault-injection","hardware-secure-boot"]},{"id":"hardware-uart","path":"Cybersécurité Offensive/Techniques/Hardware - UART.md","name":"Hardware - UART","title":"Hardware - UART","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware","iot"],"status":"publie","excerpt":"UART = la console série des objets connectés (bootloader + logs + souvent un shell root )","words":842,"readTime":4,"modified":"2026-10-06T22:23:57.488Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-uart","hash":""},{"id":"hardware-dump-et-analyse-de-firmware","hash":""},{"id":"hardware-bus-pirate","hash":""},{"id":"hardware-ch341a","hash":""},{"id":"hardware-logic-analyzer","hash":""},{"id":"hardware-jtag-et-swd","hash":""},{"id":"hardware-i2c-et-spi","hash":""}],"backlinks":["glossaire","hardware-iot-pentesting","bibliotheque-technique","hardware-arduino","hardware-bruschetta-board","hardware-bus-pirate","hardware-ch341a","hardware-dump-et-analyse-de-firmware","hardware-esp32","hardware-flipper-zero","hardware-hydrabus","hardware-i2c-et-spi","hardware-jtag-et-swd","hardware-kits-et-ressources","hardware-logic-analyzer","hardware-raspberry-pi","hardware-secure-boot","hardware-uart","protocole-bluetooth","protocole-can-bus","protocole-gps","protocole-lora","protocole-modbus","protocole-zigbee"]},{"id":"headless-browser","path":"Cybersécurité Offensive/Techniques/Headless Browser.md","name":"Headless Browser","title":"Headless Browser","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"Un headless browser = un navigateur (Chrome, Firefox, Edge) sans interface graphique , pilotable par","words":1595,"readTime":7,"modified":"2026-10-06T22:24:48.385Z","links":[{"id":"xss-cross-site-scripting","hash":""},{"id":"ssrf","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","bibliotheque-technique"]},{"id":"hidden-parameters","path":"Cybersécurité Offensive/Techniques/Hidden Parameters.md","name":"Hidden Parameters","title":"Hidden Parameters","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"Hidden Parameters = des paramètres non documentés ( debug , admin , test , dev …) que l'app accepte en plus de ceux exposés dans l'UI","words":809,"readTime":4,"modified":"2026-10-06T22:23:57.492Z","links":[{"id":"virtual-hosts","hash":""},{"id":"api-key-leaks","hash":""},{"id":"idor","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","glossaire","outil-ffuf","gobuster-brute-force-de-repertoires-dns-et-vhosts","outil-wfuzz","api-key-leaks","bibliotheque-technique"]},{"id":"http-parameter-pollution","path":"Cybersécurité Offensive/Techniques/HTTP Parameter Pollution.md","name":"HTTP Parameter Pollution","title":"HTTP Parameter Pollution","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"HPP = dupliquer un paramètre dans une requête ( ?id=1&id=2 ) pour exploiter la divergence de parsing entre le frontend (WAF/proxy) et le backend : le premier valide une valeur \"propre\", le second en utilise une autre…","words":968,"readTime":4,"modified":"2026-10-06T22:23:57.452Z","links":[{"id":"injection-sql","hash":""},{"id":"xss-cross-site-scripting","hash":""},{"id":"web-cache-deception","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","glossaire","bibliotheque-technique"]},{"id":"http-request-smuggling","path":"Cybersécurité Offensive/Techniques/HTTP Request Smuggling.md","name":"HTTP Request Smuggling","title":"HTTP Request Smuggling","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"HTTP Request Smuggling (ou HTTP desync ) = profiter du désaccord entre le front-end et le back-end","words":2164,"readTime":10,"modified":"2026-10-06T22:23:57.456Z","links":[{"id":"xss-cross-site-scripting","hash":""},{"id":"crlf-injection","hash":""},{"id":"web-cache-deception","hash":""},{"id":"open-redirect","hash":""},{"id":"ssrf","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","glossaire","outil-burp-extensions-bapp-store","outil-burp-suite","outil-mitmproxy","account-takeover","bibliotheque-technique","crlf-injection","reverse-proxy","web-cache-deception"]},{"id":"idor","path":"Cybersécurité Offensive/Techniques/IDOR.md","name":"IDOR","title":"IDOR","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"IDOR = l'app référence un objet (profil, fichier, commande…) directement via une valeur fournie par l'utilisateur (id, uuid, filename…) sans vérifier que l'utilisateur est autorisé sur cet objet → lecture/écriture/sup…","words":1110,"readTime":5,"modified":"2026-10-06T22:23:57.496Z","links":[{"id":"graphql","hash":""},{"id":"lfi-et-rfi","hash":""},{"id":"injection-sql","hash":""},{"id":"attaques-jwt","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","glossaire","outil-burp-extensions-bapp-store","outil-burp-suite","outil-caido","outil-mitmproxy","outil-wfuzz","account-takeover","bibliotheque-technique","brute-force-rate-limit","business-logic","hidden-parameters","mass-assignment","race-condition","virtual-hosts"]},{"id":"injection-de-commandes","path":"Cybersécurité Offensive/Techniques/Injection de commandes.md","name":"Injection de commandes","title":"Injection de commandes","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"Injection de commandes = injecter des commandes OS arbitraires dans une entrée utilisateur","words":1248,"readTime":6,"modified":"2026-10-06T22:23:57.496Z","links":[{"id":"reverse-shells","hash":""},{"id":"injection-sql","hash":""},{"id":"xss-cross-site-scripting","hash":""},{"id":"lfi-et-rfi","hash":""},{"id":"ssrf","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","exploitation-reseau","glossaire","outil-dirsearch","outil-elastic","outil-mitmproxy","outil-patator","outil-splunk","bibliotheque-technique","csv-injection","external-variable-modification","google-web-toolkit","headless-browser","injection-sql","insecure-deserialization","latex-injection","lfi-et-rfi","prompt-injection","protocole-dnp3","protocole-mms","protocole-modbus","protocole-mqtt","protocole-usb","prototype-pollution","reverse-shells","rfi-remote-file-inclusion","ssi-injection","ssrf","ssti","type-juggling","upload-de-fichiers","web-sockets","xslt-injection","xss-cross-site-scripting","xxe","zip-slip"]},{"id":"injection-sql","path":"Cybersécurité Offensive/Techniques/Injection SQL.md","name":"Injection SQL","title":"Injection SQL","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"SQLi = injecter du code SQL dans une requête en manipulant les entrées utilisateur mal filtrées","words":1185,"readTime":5,"modified":"2026-10-06T22:24:48.389Z","links":[{"id":"xss-cross-site-scripting","hash":""},{"id":"ssrf","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"lfi-et-rfi","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","glossaire","outil-burp-suite","outil-owasp-zap","outil-sqlmap","attaques-jwt","bibliotheque-technique","business-logic","denial-of-service","encoding-transformations","graphql","http-parameter-pollution","idor","injection-de-commandes","insecure-randomness","ldap-injection","lfi-local-file-inclusion","lfi-et-rfi","mass-assignment","nosql","orm-leak","path-traversal","prompt-injection","regular-expression","reverse-proxy","saml","ssrf","ssti","type-juggling","web-sockets","xpath-injection","xss-cross-site-scripting","xxe"]},{"id":"insecure-deserialization","path":"Cybersécurité Offensive/Techniques/Insecure Deserialization.md","name":"Insecure Deserialization","title":"Insecure Deserialization","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"La sérialisation transforme un objet en données (fichier, cookie, requête) ; la désérialisation le reconstitue.","words":1751,"readTime":8,"modified":"2026-10-06T22:24:48.389Z","links":[{"id":"injection-de-commandes","hash":""},{"id":"lfi-et-rfi","hash":""},{"id":"xxe","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","glossaire","outil-apktool","outil-frida","outil-jadx","outil-mobsf","outil-objection","bibliotheque-technique","google-web-toolkit","java-rmi"]},{"id":"insecure-management-interface","path":"Cybersécurité Offensive/Techniques/Insecure Management Interface.md","name":"Insecure Management Interface","title":"Insecure Management Interface","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"Insecure Management Interface = une interface d'administration (web, SSH, DB, cloud) exposée et mal sécurisée — absence d'auth, credentials par défaut, HTTP en clair, accès public → prise de contrôle du système.","words":525,"readTime":2,"modified":"2026-10-06T22:23:57.496Z","links":[{"id":"cve-exploits","hash":""},{"id":"scan-enumeration","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"insecure-source-code-management","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["scan-enumeration","exploitation-web","bibliotheque-technique","cve-exploits","insecure-source-code-management"]},{"id":"insecure-randomness","path":"Cybersécurité Offensive/Techniques/Insecure Randomness.md","name":"Insecure Randomness","title":"Insecure Randomness","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"L'aléa prévisible (PRNG non sécurisé, seed = temps, GUID/uniqid temporels) rend des valeurs censées être","words":1458,"readTime":7,"modified":"2026-10-06T22:23:57.500Z","links":[{"id":"type-juggling","hash":""},{"id":"attaques-jwt","hash":""},{"id":"business-logic","hash":""},{"id":"injection-sql","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","glossaire","bibliotheque-technique"]},{"id":"insecure-source-code-management","path":"Cybersécurité Offensive/Techniques/Insecure Source Code Management.md","name":"Insecure Source Code Management","title":"Insecure Source Code Management","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"Insecure Source Code Management = un dossier SCM ( .git , .svn , .hg ...) laissé exposé en production permet de réassembler le code source complet de l'application et de piller secrets, configs et historique de commits.","words":526,"readTime":2,"modified":"2026-10-06T22:23:57.500Z","links":[{"id":"external-variable-modification","hash":""},{"id":"api-key-leaks","hash":""},{"id":"insecure-management-interface","hash":""},{"id":"scan-enumeration","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","outil-apktool","outil-mobsf","bibliotheque-technique","dependency-confusion","external-variable-modification","insecure-management-interface"]},{"id":"java-rmi","path":"Cybersécurité Offensive/Techniques/Java RMI.md","name":"Java RMI","title":"Java RMI","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"RMI = API Java de calcul distribué : un objet d'une JVM invoque des méthodes d'un objet d'une autre JVM. Le registry (port 1099 ) désérialise des objets non fiables → RCE via gadgets, détournement de noms ( bind ) ou…","words":1129,"readTime":5,"modified":"2026-10-06T22:23:57.500Z","links":[{"id":"insecure-deserialization","hash":""},{"id":"scan-enumeration","hash":""},{"id":"exploitation-reseau","hash":""}],"backlinks":["exploitation-web","bibliotheque-technique"]},{"id":"kerberoasting","path":"Cybersécurité Offensive/Techniques/Kerberoasting.md","name":"Kerberoasting","title":"Kerberoasting","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"active-directory","tags":["cyber","technique","active-directory"],"status":"publie","excerpt":"Kerberoasting = demander un TGS pour un compte de service, puis cracker le hash hors-ligne :","words":308,"readTime":1,"modified":"2026-10-06T22:23:57.500Z","links":[{"id":"kerberos-le-protocole","hash":""},{"id":"as-rep-roasting","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"silver-ticket","hash":""},{"id":"active-directory","hash":""}],"backlinks":["active-directory","post-exploitation","password-cracking","glossaire","outil-covenant","outil-crackmapexec","outil-hashcat","outil-john-the-ripper","outil-mythic","outil-oneruletorulethemall","outil-powershell-empire","outil-rubeus","acl-abuse-ad","as-rep-roasting","bibliotheque-technique","kerberos-le-protocole","techniques-password-cracking","silver-ticket"]},{"id":"kerberos-bronze-bit","path":"Cybersécurité Offensive/Techniques/Kerberos - Bronze Bit.md","name":"Kerberos - Bronze Bit","title":"Kerberos - Bronze Bit","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"active-directory","tags":["cyber","technique","active-directory"],"status":"publie","excerpt":"Bronze Bit = reforger un ST S4U2Self non-forwardable en forwardable : même les comptes non délégables","words":296,"readTime":1,"modified":"2026-10-06T22:23:57.500Z","links":[{"id":"kerberos-delegation","hash":""},{"id":"kerberos-constrained-delegation","hash":""},{"id":"kerberos-rbcd-resource-based-constrained-delegation","hash":""},{"id":"kerberos-unconstrained-delegation","hash":""},{"id":"kerberos-le-protocole","hash":""}],"backlinks":["active-directory","glossaire","bibliotheque-technique","kerberos-constrained-delegation","kerberos-rbcd-resource-based-constrained-delegation","kerberos-delegation"]},{"id":"kerberos-constrained-delegation","path":"Cybersécurité Offensive/Techniques/Kerberos - Constrained Delegation.md","name":"Kerberos - Constrained Delegation","title":"Kerberos - Constrained Delegation","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"active-directory","tags":["cyber","technique","active-directory"],"status":"publie","excerpt":"La délégation contrainte limite un service à s'impersonner les utilisateurs vers une liste précise de SPN :","words":394,"readTime":2,"modified":"2026-10-06T22:23:57.500Z","links":[{"id":"kerberos-bronze-bit","hash":""},{"id":"kerberos-delegation","hash":""},{"id":"kerberos-unconstrained-delegation","hash":""},{"id":"kerberos-rbcd-resource-based-constrained-delegation","hash":""},{"id":"kerberos-le-protocole","hash":""}],"backlinks":["active-directory","glossaire","bibliotheque-technique","kerberos-bronze-bit","kerberos-rbcd-resource-based-constrained-delegation","kerberos-unconstrained-delegation","kerberos-delegation"]},{"id":"kerberos-le-protocole","path":"Cybersécurité Offensive/Techniques/Kerberos - Le protocole.md","name":"Kerberos - Le protocole","title":"Kerberos - Le protocole","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"active-directory","tags":["cyber","technique","active-directory"],"status":"publie","excerpt":"Kerberos est le protocole d'authentification d'Active Directory : l'utilisateur obtient des tickets","words":261,"readTime":1,"modified":"2026-10-06T22:23:57.504Z","links":[{"id":"pass-the-ticket-et-overpass-the-hash","hash":""},{"id":"golden-ticket","hash":""},{"id":"silver-ticket","hash":""},{"id":"kerberoasting","hash":""},{"id":"as-rep-roasting","hash":""},{"id":"active-directory","hash":""}],"backlinks":["active-directory","post-exploitation","glossaire","adcs-et-certificats-esc","as-rep-roasting","bibliotheque-technique","dcsync","golden-ticket","kerberoasting","kerberos-bronze-bit","kerberos-constrained-delegation","kerberos-rbcd-resource-based-constrained-delegation","kerberos-unconstrained-delegation","kerberos-delegation","pass-the-hash","pass-the-ticket-et-overpass-the-hash","password-spraying","silver-ticket"]},{"id":"kerberos-rbcd-resource-based-constrained-delegation","path":"Cybersécurité Offensive/Techniques/Kerberos - RBCD (Resource-Based Constrained Delegation).md","name":"Kerberos - RBCD (Resource-Based Constrained Delegation)","title":"Kerberos - RBCD (Resource-Based Constrained Delegation)","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"active-directory","tags":["cyber","technique","active-directory"],"status":"publie","excerpt":"Kerberos — RBCD (Resource-Based Constrained Delegation)","words":414,"readTime":2,"modified":"2026-10-06T22:23:57.504Z","links":[{"id":"kerberos-delegation","hash":""},{"id":"kerberos-constrained-delegation","hash":""},{"id":"kerberos-unconstrained-delegation","hash":""},{"id":"kerberos-bronze-bit","hash":""},{"id":"kerberos-le-protocole","hash":""}],"backlinks":["active-directory","post-exploitation","glossaire","bibliotheque-technique","kerberos-bronze-bit","kerberos-constrained-delegation","kerberos-unconstrained-delegation","kerberos-delegation"]},{"id":"kerberos-unconstrained-delegation","path":"Cybersécurité Offensive/Techniques/Kerberos - Unconstrained Delegation.md","name":"Kerberos - Unconstrained Delegation","title":"Kerberos - Unconstrained Delegation","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"active-directory","tags":["cyber","technique","active-directory"],"status":"publie","excerpt":"La délégation non contrainte fait que le service garde le TGT de chaque utilisateur dans sa mémoire :","words":390,"readTime":2,"modified":"2026-10-06T22:23:57.504Z","links":[{"id":"kerberos-delegation","hash":""},{"id":"kerberos-constrained-delegation","hash":""},{"id":"kerberos-rbcd-resource-based-constrained-delegation","hash":""},{"id":"coerce-printerbug-et-petitpotam","hash":""},{"id":"kerberos-le-protocole","hash":""}],"backlinks":["active-directory","post-exploitation","glossaire","bibliotheque-technique","kerberos-bronze-bit","kerberos-constrained-delegation","kerberos-rbcd-resource-based-constrained-delegation","kerberos-delegation"]},{"id":"kerberos-delegation","path":"Cybersécurité Offensive/Techniques/Kerberos Delegation.md","name":"Kerberos Delegation","title":"Kerberos Delegation","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"active-directory","tags":["cyber","technique","active-directory"],"status":"publie","excerpt":"La délégation Kerberos permet à un service d' agir au nom d'un utilisateur ;","words":263,"readTime":1,"modified":"2026-10-06T22:23:57.504Z","links":[{"id":"kerberos-unconstrained-delegation","hash":""},{"id":"kerberos-constrained-delegation","hash":""},{"id":"kerberos-rbcd-resource-based-constrained-delegation","hash":""},{"id":"kerberos-bronze-bit","hash":""},{"id":"coerce-printerbug-et-petitpotam","hash":""},{"id":"kerberos-le-protocole","hash":""}],"backlinks":["scan-enumeration","active-directory","post-exploitation","glossaire","index","bibliotheque-technique","dump-ntds-dit","kerberos-bronze-bit","kerberos-constrained-delegation","kerberos-rbcd-resource-based-constrained-delegation","kerberos-unconstrained-delegation","shadow-credentials"]},{"id":"laps-et-gmsa","path":"Cybersécurité Offensive/Techniques/LAPS et GMSA.md","name":"LAPS et GMSA","title":"LAPS et GMSA","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"active-directory","tags":["cyber","technique","active-directory"],"status":"publie","excerpt":"LAPS et GMSA stockent des mots de passe dans Active Directory — si on peut les lire ,","words":506,"readTime":2,"modified":"2026-10-06T22:23:57.504Z","links":[{"id":"pass-the-hash","hash":""},{"id":"active-directory","hash":""},{"id":"shadow-credentials","hash":""}],"backlinks":["scan-enumeration","active-directory","glossaire","bibliotheque-technique","shadow-credentials"]},{"id":"latex-injection","path":"Cybersécurité Offensive/Techniques/LaTeX Injection.md","name":"LaTeX Injection","title":"LaTeX Injection","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"LaTeX Injection = injecter des commandes TeX dans un document compilé par un moteur LaTeX","words":654,"readTime":3,"modified":"2026-10-06T22:23:57.508Z","links":[{"id":"lfi-et-rfi","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","bibliotheque-technique"]},{"id":"ldap-injection","path":"Cybersécurité Offensive/Techniques/LDAP Injection.md","name":"LDAP Injection","title":"LDAP Injection","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"LDAP Injection = injecter des opérateurs LDAP (parenthèses, & , , ! , ) dans une","words":921,"readTime":4,"modified":"2026-10-06T22:24:48.393Z","links":[{"id":"injection-sql","hash":""},{"id":"xss-cross-site-scripting","hash":""},{"id":"saml","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","glossaire","bibliotheque-technique","xpath-injection"]},{"id":"lfi-local-file-inclusion","path":"Cybersécurité Offensive/Techniques/LFI - Local File Inclusion.md","name":"LFI - Local File Inclusion","title":"LFI - Local File Inclusion","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"LFI = amener le serveur à inclure un fichier local via include($file) non validé →","words":1008,"readTime":5,"modified":"2026-10-06T22:23:57.504Z","links":[{"id":"path-traversal","hash":""},{"id":"lfi-et-rfi","hash":""},{"id":"rfi-remote-file-inclusion","hash":""},{"id":"injection-sql","hash":""},{"id":"ssrf","hash":""},{"id":"exploitation-web","hash":""},{"id":"bibliotheque-technique","hash":""}],"backlinks":["exploitation-reseau","glossaire","bibliotheque-technique","lfi-et-rfi","path-traversal","rfi-remote-file-inclusion"]},{"id":"lfi-et-rfi","path":"Cybersécurité Offensive/Techniques/LFI et RFI.md","name":"LFI et RFI","title":"LFI et RFI","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"LFI (Local File Inclusion) = amener le serveur à inclure un fichier local ( include() ),","words":447,"readTime":2,"modified":"2026-10-06T22:23:57.508Z","links":[{"id":"path-traversal","hash":""},{"id":"lfi-local-file-inclusion","hash":""},{"id":"rfi-remote-file-inclusion","hash":""},{"id":"injection-sql","hash":""},{"id":"ssrf","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"exploitation-web","hash":""},{"id":"bibliotheque-technique","hash":""}],"backlinks":["exploitation-web","glossaire","outil-searchsploit","outil-sqlmap","attaques-jwt","bibliotheque-technique","clickjacking","external-variable-modification","idor","injection-de-commandes","injection-sql","insecure-deserialization","latex-injection","lfi-local-file-inclusion","path-traversal","rfi-remote-file-inclusion","ssi-injection","ssrf","upload-de-fichiers","xxe","zip-slip"]},{"id":"llmnr-nbt-ns-poisoning","path":"Cybersécurité Offensive/Techniques/LLMNR-NBT-NS Poisoning.md","name":"LLMNR-NBT-NS Poisoning","title":"LLMNR-NBT-NS Poisoning","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"active-directory","tags":["cyber","technique","active-directory"],"status":"publie","excerpt":"On répond à la place de la \"vraie\" machine pour des requêtes de résolution LLMNR/NBT-NS,","words":289,"readTime":1,"modified":"2026-10-06T22:23:57.508Z","links":[{"id":"ntlm-relay","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"pass-the-hash","hash":""},{"id":"active-directory","hash":""},{"id":"wireless-mitm-social-engineering","hash":""}],"backlinks":["scan-enumeration","active-directory","wireless-mitm-social-engineering","password-cracking","glossaire","outil-bash-bunny","outil-bettercap","outil-crackmapexec","outil-graylog","outil-hashcat","outil-suricata","outil-wifi-pineapple","outil-zeek","arp-spoofing-et-mitm","bibliotheque-technique","coerce-printerbug-et-petitpotam","ntlm-relay","techniques-password-cracking","password-spraying"]},{"id":"mass-assignment","path":"Cybersécurité Offensive/Techniques/Mass Assignment.md","name":"Mass Assignment","title":"Mass Assignment","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"Mass Assignment = l'app assigne directement les champs du corps de requête aux propriétés d'un","words":1062,"readTime":5,"modified":"2026-10-06T22:24:48.397Z","links":[{"id":"idor","hash":""},{"id":"injection-sql","hash":""},{"id":"business-logic","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","glossaire","bibliotheque-technique","business-logic","external-variable-modification","orm-leak"]},{"id":"nosql","path":"Cybersécurité Offensive/Techniques/NoSQL.md","name":"NoSQL","title":"NoSQL","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"NoSQLi = injecter des opérateurs NoSQL ( $ne , $gt , $regex , $where …) dans une requête JSON construite dynamiquement, pour bypasser l'auth, filtrer sur d'autres données ou extraire la base en aveugle.","words":1489,"readTime":7,"modified":"2026-10-06T22:23:57.512Z","links":[{"id":"injection-sql","hash":""},{"id":"xss-cross-site-scripting","hash":""},{"id":"graphql","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","glossaire","outil-sqlmap","bibliotheque-technique","graphql","prototype-pollution","type-juggling"]},{"id":"ntlm-relay","path":"Cybersécurité Offensive/Techniques/NTLM Relay.md","name":"NTLM Relay","title":"NTLM Relay","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"active-directory","tags":["cyber","technique","active-directory"],"status":"publie","excerpt":"NTLM Relay = intercepter l'authentification NTLM d'une victime et la relayer vers une autre","words":270,"readTime":1,"modified":"2026-10-06T22:23:57.508Z","links":[{"id":"llmnr-nbt-ns-poisoning","hash":""},{"id":"pass-the-hash","hash":""},{"id":"acl-abuse-ad","hash":""},{"id":"active-directory","hash":""}],"backlinks":["active-directory","wireless-mitm-social-engineering","password-cracking","glossaire","outil-crackmapexec","acl-abuse-ad","adcs-et-certificats-esc","arp-spoofing-et-mitm","bibliotheque-technique","coerce-printerbug-et-petitpotam","llmnr-nbt-ns-poisoning"]},{"id":"oauth","path":"Cybersécurité Offensive/Techniques/OAuth.md","name":"OAuth","title":"OAuth","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"OAuth = framework d' autorisation où une app (le client) obtient un token pour accéder aux","words":2607,"readTime":12,"modified":"2026-10-06T22:23:57.512Z","links":[{"id":"xss-cross-site-scripting","hash":""},{"id":"attaques-jwt","hash":""},{"id":"open-redirect","hash":""},{"id":"account-takeover","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","glossaire","account-takeover","attaques-jwt","bibliotheque-technique","saml"]},{"id":"open-redirect","path":"Cybersécurité Offensive/Techniques/Open Redirect.md","name":"Open Redirect","title":"Open Redirect","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"Open Redirect = l'application redirige la victime vers une URL contrôlée par l'attaquant ,","words":1153,"readTime":5,"modified":"2026-10-06T22:23:57.512Z","links":[{"id":"xss-cross-site-scripting","hash":""},{"id":"ssrf","hash":""},{"id":"path-traversal","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","glossaire","outil-xsstrike","account-takeover","bibliotheque-technique","crlf-injection","http-request-smuggling","oauth","tabnabbing","virtual-hosts","web-cache-deception"]},{"id":"orm-leak","path":"Cybersécurité Offensive/Techniques/ORM Leak.md","name":"ORM Leak","title":"ORM Leak","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"ORM Leak = l'ORM construit des requêtes à partir d'un objet de filtre contrôlé par l'attaquant (mass assignment des paramètres) → l'attaquant accède à des colonnes et relations cachées et exfiltre les données.","words":389,"readTime":2,"modified":"2026-10-06T22:23:57.512Z","links":[{"id":"mass-assignment","hash":""},{"id":"injection-sql","hash":""},{"id":"regular-expression","hash":""},{"id":"api-key-leaks","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","bibliotheque-technique"]},{"id":"pass-the-hash","path":"Cybersécurité Offensive/Techniques/Pass-the-Hash.md","name":"Pass-the-Hash","title":"Pass-the-Hash","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"active-directory","tags":["cyber","technique","active-directory"],"status":"publie","excerpt":"Pass-the-Hash = se connecter avec le hash NTLM d'un mot de passe au lieu du mot de passe en clair","words":262,"readTime":1,"modified":"2026-10-06T22:23:57.512Z","links":[{"id":"kerberos-le-protocole","hash":""},{"id":"pass-the-ticket-et-overpass-the-hash","hash":""},{"id":"dcsync","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"active-directory","hash":""}],"backlinks":["active-directory","post-exploitation","password-cracking","glossaire","outil-covenant","outil-crackmapexec","outil-hash-identifier","outil-mythic","outil-powershell-empire","outil-wifi-pineapple","bibliotheque-technique","dcsync","dump-ntds-dit","laps-et-gmsa","llmnr-nbt-ns-poisoning","ntlm-relay","pass-the-ticket-et-overpass-the-hash","techniques-password-cracking","password-spraying","privilege-escalation-windows"]},{"id":"pass-the-ticket-et-overpass-the-hash","path":"Cybersécurité Offensive/Techniques/Pass-the-Ticket et Overpass-the-Hash.md","name":"Pass-the-Ticket et Overpass-the-Hash","title":"Pass-the-Ticket et Overpass-the-Hash","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"active-directory","tags":["cyber","technique","active-directory"],"status":"publie","excerpt":"Pass-the-Ticket (PtT) = rejouer un ticket Kerberos volé. Overpass-the-Hash = transformer un","words":251,"readTime":1,"modified":"2026-10-06T22:23:57.512Z","links":[{"id":"kerberos-le-protocole","hash":""},{"id":"pass-the-hash","hash":""},{"id":"golden-ticket","hash":""},{"id":"silver-ticket","hash":""},{"id":"active-directory","hash":""}],"backlinks":["active-directory","post-exploitation","glossaire","bibliotheque-technique","kerberos-le-protocole","pass-the-hash"]},{"id":"techniques-password-cracking","path":"Cybersécurité Offensive/Techniques/Password Cracking.md","name":"Password Cracking","title":"Password Cracking","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"cracking","tags":["cyber","technique","cracking"],"status":"publie","excerpt":"Retrouver le mot de passe en clair à partir d'un hash (offline) en testant des candidats —","words":189,"readTime":1,"modified":"2026-10-06T22:23:57.516Z","links":[{"id":"kerberoasting","hash":""},{"id":"as-rep-roasting","hash":""},{"id":"llmnr-nbt-ns-poisoning","hash":""},{"id":"pass-the-hash","hash":""},{"id":"password-cracking","hash":""}],"backlinks":["password-cracking","hardware-iot-pentesting","outil-aircrack-ng","outil-brutedum","outil-cewl","outil-crunch","outil-cupp","outil-frida","outil-hash-identifier","outil-hashcat","outil-hashid","outil-hcxdumptool","outil-hydra","outil-john-the-ripper","outil-kwprocessor","outil-mentalist","outil-name-that-hash","outil-ncrack","outil-objection","outil-oneruletorulethemall","outil-pydictor","outil-rsmangler","outil-seclists","account-takeover","api-key-leaks","as-rep-roasting","attaques-wifi-pmkid","attaques-wifi-wpa2-psk","attaques-wifi-wpa2-et-pmkid","bibliotheque-technique","dump-ntds-dit","insecure-management-interface","kerberoasting","llmnr-nbt-ns-poisoning","pass-the-hash"]},{"id":"password-spraying","path":"Cybersécurité Offensive/Techniques/Password Spraying.md","name":"Password Spraying","title":"Password Spraying","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"active-directory","tags":["cyber","technique","active-directory"],"status":"publie","excerpt":"Password Spraying = tester 1 mot de passe contre beaucoup de comptes (au lieu de beaucoup","words":254,"readTime":1,"modified":"2026-10-06T22:23:57.516Z","links":[{"id":"kerberos-le-protocole","hash":""},{"id":"llmnr-nbt-ns-poisoning","hash":""},{"id":"pass-the-hash","hash":""},{"id":"active-directory","hash":""}],"backlinks":["active-directory","password-cracking","cheatsheets","outil-cewl","outil-crackmapexec","outil-crunch","outil-cupp","outil-hydra","outil-medusa","outil-mentalist","outil-ncrack","outil-oneruletorulethemall","outil-patator","outil-pydictor","outil-rsmangler","outil-seclists","outil-theharvester","attaques-wifi-enterprise","bibliotheque-technique","brute-force-rate-limit"]},{"id":"path-traversal","path":"Cybersécurité Offensive/Techniques/Path Traversal.md","name":"Path Traversal","title":"Path Traversal","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"Path Traversal = lire un fichier hors de la racine web en manipulant le chemin passé","words":606,"readTime":3,"modified":"2026-10-06T22:23:57.516Z","links":[{"id":"lfi-local-file-inclusion","hash":""},{"id":"rfi-remote-file-inclusion","hash":""},{"id":"lfi-et-rfi","hash":""},{"id":"injection-sql","hash":""},{"id":"ssrf","hash":""},{"id":"exploitation-web","hash":""},{"id":"bibliotheque-technique","hash":""}],"backlinks":["exploitation-web","glossaire","outil-dirsearch","outil-feroxbuster","outil-nikto","outil-nuclei","outil-searchsploit","bibliotheque-technique","client-side-path-traversal","encoding-transformations","lfi-local-file-inclusion","lfi-et-rfi","open-redirect","rfi-remote-file-inclusion","zip-slip"]},{"id":"pivoting-et-tunneling","path":"Cybersécurité Offensive/Techniques/Pivoting et Tunneling.md","name":"Pivoting et Tunneling","title":"Pivoting et Tunneling","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"reseau-postexploit","tags":["cyber","technique","reseau-postexploit"],"status":"publie","excerpt":"Pivoting = passer d'une machine compromise (publique) aux machines internes que seule cette","words":158,"readTime":1,"modified":"2026-10-06T22:23:57.516Z","links":[{"id":"reverse-shells","hash":""},{"id":"ssrf","hash":""},{"id":"exploitation-reseau","hash":""}],"backlinks":["scan-enumeration","exploitation-reseau","active-directory","post-exploitation","cheatsheets","glossaire","outil-chisel","outil-covenant","outil-crackmapexec","outil-graylog","outil-havoc","outil-ligolo-ng","outil-medusa","outil-metasploit","outil-mythic","outil-p4wnp1-a-l-o-a","outil-powershell-empire","outil-sliver","outil-snort","outil-suricata","outil-velociraptor","outil-zeek","bibliotheque-technique","reverse-shells"]},{"id":"privilege-escalation-linux","path":"Cybersécurité Offensive/Techniques/Privilege Escalation Linux.md","name":"Privilege Escalation Linux","title":"Privilege Escalation Linux","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"reseau-postexploit","tags":["cyber","technique","reseau-postexploit"],"status":"publie","excerpt":"Passer d'un utilisateur limité à root en exploitant une mauvaise configuration du système","words":129,"readTime":1,"modified":"2026-10-06T22:23:57.516Z","links":[{"id":"reverse-shells","hash":""},{"id":"privilege-escalation-windows","hash":""},{"id":"post-exploitation","hash":""}],"backlinks":["post-exploitation","cheatsheets","glossaire","outil-hydra","outil-linpeas","outil-mythic","outil-osquery","outil-searchsploit","outil-velociraptor","outil-wazuh","bibliotheque-technique","dependency-confusion","privilege-escalation-windows"]},{"id":"privilege-escalation-windows","path":"Cybersécurité Offensive/Techniques/Privilege Escalation Windows.md","name":"Privilege Escalation Windows","title":"Privilege Escalation Windows","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"reseau-postexploit","tags":["cyber","technique","reseau-postexploit"],"status":"publie","excerpt":"Passer d'un utilisateur limité à SYSTEM/Administrateur en abusant des services, des ACL,","words":134,"readTime":1,"modified":"2026-10-06T22:23:57.516Z","links":[{"id":"dll-hijacking","hash":""},{"id":"privilege-escalation-linux","hash":""},{"id":"pass-the-hash","hash":""},{"id":"post-exploitation","hash":""}],"backlinks":["post-exploitation","cheatsheets","glossaire","outil-covenant","outil-crackmapexec","outil-elastic","outil-havoc","outil-linpeas","outil-mythic","outil-osquery","outil-powershell-empire","outil-sliver","outil-splunk","outil-velociraptor","outil-wazuh","bibliotheque-technique","dll-hijacking","privilege-escalation-linux"]},{"id":"prompt-injection","path":"Cybersécurité Offensive/Techniques/Prompt Injection.md","name":"Prompt Injection","title":"Prompt Injection","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"Prompt Injection = injecter des instructions dans le prompt d'un modèle de langage (LLM) pour","words":2112,"readTime":10,"modified":"2026-10-06T22:23:57.520Z","links":[{"id":"injection-sql","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"xss-cross-site-scripting","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","glossaire","bibliotheque-technique"]},{"id":"protocole-bluetooth","path":"Cybersécurité Offensive/Techniques/Protocole Bluetooth.md","name":"Protocole Bluetooth","title":"Protocole Bluetooth","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"Le Bluetooth Low Energy (BLE) parle via le modèle GATT (services → caractéristiques) :","words":782,"readTime":4,"modified":"2026-10-06T22:23:57.520Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-uart","hash":""},{"id":"attaques-wifi-wpa2-et-pmkid","hash":""},{"id":"hardware-rfid-et-nfc","hash":""}],"backlinks":["wireless-mitm-social-engineering","hardware-iot-pentesting","outil-flipper-zero-usb-radio","outil-p4wnp1-a-l-o-a","bibliotheque-technique"]},{"id":"protocole-can-bus","path":"Cybersécurité Offensive/Techniques/Protocole CAN Bus.md","name":"Protocole CAN Bus","title":"Protocole CAN Bus","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"Le bus CAN est le protocole série multi-maître et orienté message des systèmes","words":853,"readTime":4,"modified":"2026-10-06T22:23:57.520Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-uart","hash":""},{"id":"hardware-dump-et-analyse-de-firmware","hash":""},{"id":"hardware-jtag-et-swd","hash":""}],"backlinks":["hardware-iot-pentesting","bibliotheque-technique"]},{"id":"protocole-dnp3","path":"Cybersécurité Offensive/Techniques/Protocole DNP3.md","name":"Protocole DNP3","title":"Protocole DNP3","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"DNP3 (Distributed Network Protocol) est le protocole ICS/SCADA de télécommande","words":284,"readTime":1,"modified":"2026-10-06T22:23:57.520Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"protocole-modbus","hash":""},{"id":"protocole-mms","hash":""},{"id":"injection-de-commandes","hash":""}],"backlinks":["hardware-iot-pentesting","bibliotheque-technique","protocole-mms"]},{"id":"protocole-gps","path":"Cybersécurité Offensive/Techniques/Protocole GPS.md","name":"Protocole GPS","title":"Protocole GPS","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"Le GPS fournit la position via des signaux satellite en clair et non authentifiés","words":559,"readTime":3,"modified":"2026-10-06T22:23:57.520Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-uart","hash":""},{"id":"protocole-ss7","hash":""},{"id":"attaques-wifi-wpa2-et-pmkid","hash":""}],"backlinks":["hardware-iot-pentesting","bibliotheque-technique","protocole-ss7"]},{"id":"protocole-http-iot","path":"Cybersécurité Offensive/Techniques/Protocole HTTP (IoT).md","name":"Protocole HTTP (IoT)","title":"Protocole HTTP (IoT)","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"Les objets connectés exposent des APIs HTTP embarquées (panneaux de config, firmware,","words":431,"readTime":2,"modified":"2026-10-06T22:23:57.520Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"protocole-mqtt","hash":""},{"id":"protocole-upnp","hash":""},{"id":"hardware-dump-et-analyse-de-firmware","hash":""}],"backlinks":["hardware-iot-pentesting","bibliotheque-technique","protocole-upnp"]},{"id":"protocole-lora","path":"Cybersécurité Offensive/Techniques/Protocole LoRa.md","name":"Protocole LoRa","title":"Protocole LoRa","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"LoRa est la liaison radio basse consommation longue portée (Chirp Spread Spectrum)","words":449,"readTime":2,"modified":"2026-10-06T22:23:57.524Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"attaques-wifi-wpa2-et-pmkid","hash":""},{"id":"hardware-uart","hash":""},{"id":"hardware-rfid-et-nfc","hash":""}],"backlinks":["glossaire","hardware-iot-pentesting","bibliotheque-technique"]},{"id":"protocole-mms","path":"Cybersécurité Offensive/Techniques/Protocole MMS.md","name":"Protocole MMS","title":"Protocole MMS","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"MMS (Manufacturing Message Specification) est le protocole applicatif du standard","words":308,"readTime":1,"modified":"2026-10-06T22:23:57.524Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"protocole-modbus","hash":""},{"id":"protocole-dnp3","hash":""},{"id":"injection-de-commandes","hash":""}],"backlinks":["hardware-iot-pentesting","bibliotheque-technique","protocole-dnp3"]},{"id":"protocole-modbus","path":"Cybersécurité Offensive/Techniques/Protocole Modbus.md","name":"Protocole Modbus","title":"Protocole Modbus","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"Modbus est le protocole ICS/SCADA le plus répandu pour interroger des capteurs et","words":351,"readTime":2,"modified":"2026-10-06T22:23:57.524Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-uart","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"ssrf","hash":""}],"backlinks":["hardware-iot-pentesting","bibliotheque-technique","protocole-dnp3","protocole-mms"]},{"id":"protocole-mqtt","path":"Cybersécurité Offensive/Techniques/Protocole MQTT.md","name":"Protocole MQTT","title":"Protocole MQTT","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"MQTT est le protocole de messagerie léger des objets connectés : les devices","words":379,"readTime":2,"modified":"2026-10-06T22:23:57.524Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"ssrf","hash":""},{"id":"attaques-wifi-wpa2-et-pmkid","hash":""}],"backlinks":["glossaire","hardware-iot-pentesting","bibliotheque-technique","protocole-http-iot","protocole-upnp"]},{"id":"protocole-ss7","path":"Cybersécurité Offensive/Techniques/Protocole SS7.md","name":"Protocole SS7","title":"Protocole SS7","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"SS7 est le réseau de signalisation télécom qui relie les opérateurs (pour les SMS,","words":562,"readTime":3,"modified":"2026-10-06T22:23:57.524Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"protocole-gps","hash":""},{"id":"account-takeover","hash":""},{"id":"ssrf","hash":""}],"backlinks":["glossaire","hardware-iot-pentesting","bibliotheque-technique","protocole-gps"]},{"id":"protocole-upnp","path":"Cybersécurité Offensive/Techniques/Protocole UPnP.md","name":"Protocole UPnP","title":"Protocole UPnP","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"UPnP permet aux devices d' auto-découverte (SSDP) et de contrôle mutuel (SOAP) :","words":429,"readTime":2,"modified":"2026-10-06T22:23:57.524Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"ssrf","hash":""},{"id":"protocole-http-iot","hash":""},{"id":"protocole-mqtt","hash":""}],"backlinks":["hardware-iot-pentesting","bibliotheque-technique","protocole-http-iot"]},{"id":"protocole-usb","path":"Cybersécurité Offensive/Techniques/Protocole USB.md","name":"Protocole USB","title":"Protocole USB","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"L' USB est le bus série universel des périphériques : chaque device expose des descriptors","words":495,"readTime":2,"modified":"2026-10-06T22:23:57.528Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-dump-et-analyse-de-firmware","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"hardware-i2c-et-spi","hash":""}],"backlinks":["wireless-mitm-social-engineering","hardware-iot-pentesting","outil-bash-bunny","outil-duckuino","outil-flipper-zero-usb-radio","outil-hak5-payload-studio","outil-o-mg-cable","outil-p4wnp1-a-l-o-a","outil-usb-host-shield","outil-usb-rubber-ducky","bibliotheque-technique","hardware-goodfet"]},{"id":"protocole-zigbee","path":"Cybersécurité Offensive/Techniques/Protocole Zigbee.md","name":"Protocole Zigbee","title":"Protocole Zigbee","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"hardware","tags":["cyber","technique","hardware"],"status":"publie","excerpt":"Zigbee est le standard radio IEEE 802.15.4 basse consommation des objets (domotique,","words":487,"readTime":2,"modified":"2026-10-06T22:23:57.528Z","links":[{"id":"hardware-iot-pentesting","hash":""},{"id":"attaques-wifi-wpa2-et-pmkid","hash":""},{"id":"hardware-uart","hash":""},{"id":"hardware-rfid-et-nfc","hash":""}],"backlinks":["glossaire","hardware-iot-pentesting","bibliotheque-technique"]},{"id":"prototype-pollution","path":"Cybersécurité Offensive/Techniques/Prototype Pollution.md","name":"Prototype Pollution","title":"Prototype Pollution","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"PP = polluer Object.prototype en JavaScript pour que tous les objets de l'app (client ou serveur)","words":972,"readTime":4,"modified":"2026-10-06T22:23:57.528Z","links":[{"id":"xss-cross-site-scripting","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"nosql","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","glossaire","bibliotheque-technique","dom-clobbering"]},{"id":"race-condition","path":"Cybersécurité Offensive/Techniques/Race Condition.md","name":"Race Condition","title":"Race Condition","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"Race condition = envoyer plusieurs requêtes simultanées sur une ressource partagée pour que","words":1593,"readTime":7,"modified":"2026-10-06T22:23:57.528Z","links":[{"id":"idor","hash":""},{"id":"web-cache-deception","hash":""},{"id":"business-logic","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["glossaire","business-logic","web-cache-deception"]},{"id":"regular-expression","path":"Cybersécurité Offensive/Techniques/Regular Expression.md","name":"Regular Expression","title":"Regular Expression","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"ReDoS (Regular Expression Denial of Service) = une regex catastrophique combinée à une entrée hostile provoque une explosion de backtracking → CPU saturé, service bloqué ou crash, DoS.","words":482,"readTime":2,"modified":"2026-10-06T22:23:57.528Z","links":[{"id":"denial-of-service","hash":""},{"id":"injection-sql","hash":""},{"id":"cve-exploits","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","bibliotheque-technique","orm-leak"]},{"id":"reverse-proxy","path":"Cybersécurité Offensive/Techniques/Reverse Proxy.md","name":"Reverse Proxy","title":"Reverse Proxy","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"Un reverse proxy fait confiance à des headers envoyés par le client ( X-Forwarded-For ,","words":1463,"readTime":7,"modified":"2026-10-06T22:24:48.405Z","links":[{"id":"ssrf","hash":""},{"id":"http-request-smuggling","hash":""},{"id":"web-cache-deception","hash":""},{"id":"injection-sql","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","glossaire","bibliotheque-technique"]},{"id":"reverse-shells","path":"Cybersécurité Offensive/Techniques/Reverse Shells.md","name":"Reverse Shells","title":"Reverse Shells","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"reseau-postexploit","tags":["cyber","technique","reseau-postexploit"],"status":"publie","excerpt":"Reverse shell = le serveur/la machine compromise se connecte vers nous pour nous donner","words":199,"readTime":1,"modified":"2026-10-06T22:23:57.532Z","links":[{"id":"injection-de-commandes","hash":""},{"id":"pivoting-et-tunneling","hash":""},{"id":"exploitation-reseau","hash":""}],"backlinks":["exploitation-reseau","post-exploitation","cheatsheets","glossaire","outil-chisel","outil-covenant","outil-duckuino","outil-elastic","outil-flipper-zero-usb-radio","outil-graylog","outil-hydra","outil-ligolo-ng","outil-metasploit","outil-mythic","outil-o-mg-cable","outil-osquery","outil-p4wnp1-a-l-o-a","outil-powershell-empire","outil-searchsploit","outil-sliver","outil-snort","outil-splunk","outil-suricata","outil-usb-rubber-ducky","outil-wazuh","outil-zeek","bibliotheque-technique","buffer-overflow","dll-hijacking","injection-de-commandes","pivoting-et-tunneling","privilege-escalation-linux"]},{"id":"rfi-remote-file-inclusion","path":"Cybersécurité Offensive/Techniques/RFI - Remote File Inclusion.md","name":"RFI - Remote File Inclusion","title":"RFI - Remote File Inclusion","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"RFI = amener le serveur à inclure un fichier distant qu'on contrôle via include($url) →","words":453,"readTime":2,"modified":"2026-10-06T22:23:57.528Z","links":[{"id":"lfi-local-file-inclusion","hash":""},{"id":"lfi-et-rfi","hash":""},{"id":"path-traversal","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"exploitation-web","hash":""},{"id":"bibliotheque-technique","hash":""}],"backlinks":["glossaire","bibliotheque-technique","lfi-local-file-inclusion","lfi-et-rfi","path-traversal"]},{"id":"saml","path":"Cybersécurité Offensive/Techniques/SAML.md","name":"SAML","title":"SAML","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"SAML = échange d'authentification entre un IdP (Identity Provider) et un SP (Service Provider)","words":1670,"readTime":8,"modified":"2026-10-06T22:23:57.532Z","links":[{"id":"xxe","hash":""},{"id":"attaques-jwt","hash":""},{"id":"oauth","hash":""},{"id":"injection-sql","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","glossaire","bibliotheque-technique","ldap-injection"]},{"id":"shadow-credentials","path":"Cybersécurité Offensive/Techniques/Shadow Credentials.md","name":"Shadow Credentials","title":"Shadow Credentials","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"active-directory","tags":["cyber","technique","active-directory"],"status":"publie","excerpt":"On ajoute notre propre clé publique dans l'attribut msDS-KeyCredentialLink d'un compte cible,","words":362,"readTime":2,"modified":"2026-10-06T22:23:57.536Z","links":[{"id":"laps-et-gmsa","hash":""},{"id":"kerberos-delegation","hash":""},{"id":"active-directory","hash":""}],"backlinks":["active-directory","glossaire","bibliotheque-technique","coerce-printerbug-et-petitpotam","laps-et-gmsa"]},{"id":"silver-ticket","path":"Cybersécurité Offensive/Techniques/Silver Ticket.md","name":"Silver Ticket","title":"Silver Ticket","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"active-directory","tags":["cyber","technique","active-directory"],"status":"publie","excerpt":"Silver Ticket = forger un TGS (ticket de service) pour un service précis en possédant la clé","words":273,"readTime":1,"modified":"2026-10-06T22:23:57.536Z","links":[{"id":"kerberos-le-protocole","hash":""},{"id":"golden-ticket","hash":""},{"id":"kerberoasting","hash":""},{"id":"active-directory","hash":""}],"backlinks":["active-directory","post-exploitation","glossaire","bibliotheque-technique","golden-ticket","kerberoasting","kerberos-le-protocole","pass-the-ticket-et-overpass-the-hash"]},{"id":"ssi-injection","path":"Cybersécurité Offensive/Techniques/SSI Injection.md","name":"SSI Injection","title":"SSI Injection","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"SSI = directives évaluées côté serveur dans les pages HTML → si une entrée utilisateur","words":899,"readTime":4,"modified":"2026-10-06T22:23:57.532Z","links":[{"id":"lfi-et-rfi","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"upload-de-fichiers","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","bibliotheque-technique"]},{"id":"ssrf","path":"Cybersécurité Offensive/Techniques/SSRF.md","name":"SSRF","title":"SSRF","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"SSRF = forcer le serveur à effectuer des requêtes à notre place en manipulant une URL contrôlée","words":1993,"readTime":9,"modified":"2026-10-06T22:23:57.536Z","links":[{"id":"xss-cross-site-scripting","hash":""},{"id":"injection-sql","hash":""},{"id":"lfi-et-rfi","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","exploitation-reseau","glossaire","outil-burp-extensions-bapp-store","outil-burp-suite","outil-caido","outil-mitmproxy","outil-nuclei","outil-owasp-zap","attaques-jwt","bibliotheque-technique","cors","csrf","dns-rebinding","dom-clobbering","graphql","headless-browser","http-request-smuggling","injection-de-commandes","injection-sql","lfi-local-file-inclusion","lfi-et-rfi","open-redirect","path-traversal","pivoting-et-tunneling","protocole-modbus","protocole-mqtt","protocole-ss7","protocole-upnp","reverse-proxy","virtual-hosts","web-cache-deception","xslt-injection","xss-cross-site-scripting","xxe"]},{"id":"ssti","path":"Cybersécurité Offensive/Techniques/SSTI.md","name":"SSTI","title":"SSTI","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"SSTI = injecter des balises et expressions de template dans une entrée utilisateur","words":906,"readTime":4,"modified":"2026-10-06T22:23:57.536Z","links":[{"id":"injection-sql","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"xss-cross-site-scripting","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","glossaire","bibliotheque-technique","xslt-injection"]},{"id":"tabnabbing","path":"Cybersécurité Offensive/Techniques/Tabnabbing.md","name":"Tabnabbing","title":"Tabnabbing","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"Tabnabbing (reverse tabnabbing) = une page liée en target=\" blank\" réécrit la page d'origine","words":581,"readTime":3,"modified":"2026-10-06T22:23:57.536Z","links":[{"id":"xss-cross-site-scripting","hash":""},{"id":"open-redirect","hash":""},{"id":"clickjacking","hash":""},{"id":"css-injection","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","glossaire","bibliotheque-technique"]},{"id":"type-juggling","path":"Cybersécurité Offensive/Techniques/Type Juggling.md","name":"Type Juggling","title":"Type Juggling","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"Le Type Juggling = PHP convertit automatiquement les types lors d'une comparaison lâche ( == )","words":1462,"readTime":7,"modified":"2026-10-06T22:23:57.540Z","links":[{"id":"injection-sql","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"nosql","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","glossaire","account-takeover","bibliotheque-technique","insecure-randomness"]},{"id":"upload-de-fichiers","path":"Cybersécurité Offensive/Techniques/Upload de fichiers.md","name":"Upload de fichiers","title":"Upload de fichiers","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"Un endpoint d'upload non sécurisé laisse un attaquant déposer un fichier exécutable (webshell)","words":923,"readTime":4,"modified":"2026-10-06T22:23:57.540Z","links":[{"id":"injection-de-commandes","hash":""},{"id":"lfi-et-rfi","hash":""},{"id":"xss-cross-site-scripting","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","glossaire","bibliotheque-technique","ssi-injection","xslt-injection","zip-slip"]},{"id":"virtual-hosts","path":"Cybersécurité Offensive/Techniques/Virtual Hosts.md","name":"Virtual Hosts","title":"Virtual Hosts","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"Un vhost = plusieurs sites hébergés sur une même IP , différenciés uniquement par le header HTTP Host","words":1075,"readTime":5,"modified":"2026-10-06T22:24:48.409Z","links":[{"id":"reconnaissance","hash":""},{"id":"open-redirect","hash":""},{"id":"idor","hash":""},{"id":"ssrf","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["scan-enumeration","exploitation-web","glossaire","outil-caido","outil-ffuf","gobuster-brute-force-de-repertoires-dns-et-vhosts","outil-nikto","outil-nmap","outil-wpscan","api-key-leaks","bibliotheque-technique","hidden-parameters"]},{"id":"web-cache-deception","path":"Cybersécurité Offensive/Techniques/Web Cache Deception.md","name":"Web Cache Deception","title":"Web Cache Deception","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"WCD = tromper le CDN/cache pour qu'il mette en cache une page dynamique privée en la faisant passer","words":1955,"readTime":9,"modified":"2026-10-06T22:23:57.540Z","links":[{"id":"xss-cross-site-scripting","hash":""},{"id":"http-request-smuggling","hash":""},{"id":"race-condition","hash":""},{"id":"open-redirect","hash":""},{"id":"ssrf","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","glossaire","bibliotheque-technique","http-parameter-pollution","http-request-smuggling","race-condition","reverse-proxy"]},{"id":"web-sockets","path":"Cybersécurité Offensive/Techniques/Web Sockets.md","name":"Web Sockets","title":"Web Sockets","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"WebSockets = canal full-duplex persistant (bi-directionnel, basse latence) entre un navigateur et un serveur.","words":937,"readTime":4,"modified":"2026-10-06T22:23:57.540Z","links":[{"id":"xss-cross-site-scripting","hash":""},{"id":"cors","hash":""},{"id":"csrf","hash":""},{"id":"injection-sql","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","bibliotheque-technique","dns-rebinding"]},{"id":"xpath-injection","path":"Cybersécurité Offensive/Techniques/XPATH Injection.md","name":"XPATH Injection","title":"XPATH Injection","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"XPath Injection = injecter du code XPath dans une requête XML en manipulant des entrées utilisateur","words":934,"readTime":4,"modified":"2026-10-06T22:23:57.544Z","links":[{"id":"injection-sql","hash":""},{"id":"xxe","hash":""},{"id":"ldap-injection","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","glossaire","bibliotheque-technique"]},{"id":"xs-leak","path":"Cybersécurité Offensive/Techniques/XS-Leak.md","name":"XS-Leak","title":"XS-Leak","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"XS-Leak = déduire des données d'une origine cible sans jamais lire le corps de la réponse :","words":1471,"readTime":7,"modified":"2026-10-06T22:23:57.544Z","links":[{"id":"css-injection","hash":""},{"id":"xss-cross-site-scripting","hash":""},{"id":"attaques-jwt","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","glossaire","bibliotheque-technique","css-injection"]},{"id":"xslt-injection","path":"Cybersécurité Offensive/Techniques/XSLT Injection.md","name":"XSLT Injection","title":"XSLT Injection","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"XSLT Injection = faire exécuter une feuille de style XSLT contrôlée/non validée par le processeur","words":1209,"readTime":5,"modified":"2026-10-06T22:23:57.544Z","links":[{"id":"xxe","hash":""},{"id":"ssti","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"ssrf","hash":""},{"id":"upload-de-fichiers","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","glossaire","bibliotheque-technique"]},{"id":"xss-cross-site-scripting","path":"Cybersécurité Offensive/Techniques/XSS (Cross-Site Scripting).md","name":"XSS (Cross-Site Scripting)","title":"XSS (Cross-Site Scripting)","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"XSS = injecter du JavaScript dans une page vue par d'autres visiteurs → exécution dans leur","words":2161,"readTime":10,"modified":"2026-10-06T22:23:57.544Z","links":[{"id":"injection-sql","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"ssrf","hash":""},{"id":"attaques-jwt","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","wireless-mitm-social-engineering","glossaire","outil-owasp-zap","outil-socialfish","outil-xsstrike","account-takeover","attaques-jwt","bibliotheque-technique","clickjacking","client-side-path-traversal","cors","crlf-injection","csrf","css-injection","csv-injection","dns-rebinding","dom-clobbering","encoding-transformations","graphql","headless-browser","http-parameter-pollution","http-request-smuggling","injection-de-commandes","injection-sql","ldap-injection","nosql","oauth","open-redirect","prompt-injection","prototype-pollution","ssrf","ssti","tabnabbing","upload-de-fichiers","web-cache-deception","web-sockets","xs-leak"]},{"id":"xxe","path":"Cybersécurité Offensive/Techniques/XXE.md","name":"XXE","title":"XXE","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"XXE = abuser du DOCTYPE/entités XML d'un parseur pour lui faire lire des fichiers locaux ,","words":2014,"readTime":9,"modified":"2026-10-06T22:24:48.413Z","links":[{"id":"ssrf","hash":""},{"id":"injection-sql","hash":""},{"id":"lfi-et-rfi","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","glossaire","outil-burp-extensions-bapp-store","outil-nuclei","outil-owasp-zap","bibliotheque-technique","denial-of-service","insecure-deserialization","saml","xpath-injection","xslt-injection"]},{"id":"zip-slip","path":"Cybersécurité Offensive/Techniques/Zip Slip.md","name":"Zip Slip","title":"Zip Slip","folder":"Cybersécurité Offensive/Techniques","group":"Techniques","type":"technique","category":"web","tags":["cyber","technique","web"],"status":"publie","excerpt":"Zip Slip = extraire une archive contenant des noms de fichiers traversants ( ../../ )","words":680,"readTime":3,"modified":"2026-10-06T22:23:57.548Z","links":[{"id":"upload-de-fichiers","hash":""},{"id":"path-traversal","hash":""},{"id":"lfi-et-rfi","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"denial-of-service","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["exploitation-web","bibliotheque-technique"]},{"id":"outil-aircrack-ng","path":"Cybersécurité Offensive/Outils/Outil - aircrack-ng.md","name":"Outil - aircrack-ng","title":"Outil - aircrack-ng","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Wireless & Réseau","tags":["cyber","outil","Wireless & Réseau"],"status":"publie","excerpt":"Suite de référence pour le pentest WiFi : capture des handshakes WPA/WPA2, attaques WEP, crack de passphrases hors-ligne et injection de trames — le socle de 90% des attaques WiFi.","words":3496,"readTime":16,"modified":"2026-10-06T22:23:57.364Z","links":[{"id":"outil-tshark","hash":""},{"id":"outil-wireshark","hash":""},{"id":"tools","hash":""},{"id":"outil-hcxdumptool","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-john-the-ripper","hash":""},{"id":"outil-mdk4","hash":""},{"id":"outil-reaver","hash":""},{"id":"outil-wifite","hash":""},{"id":"outil-kismet","hash":""},{"id":"attaques-wifi-wpa2-et-pmkid","hash":""},{"id":"attaques-wifi-wep","hash":""},{"id":"attaques-wifi-rogue-ap","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"attaques-wifi-wpa2-psk","hash":""},{"id":"attaques-wifi-preparation-basiques","hash":""}],"backlinks":["wireless-mitm-social-engineering","cheatsheets","outil-bettercap","outil-blackarch","outil-crunch","outil-hcxdumptool","outil-kali-linux","outil-kismet","outil-kwprocessor","outil-mdk4","outil-parrot-os","outil-reaver","outil-seclists","outil-wifi-pineapple","outil-wifiphisher","outil-wifite","outil-wireshark","tools"]},{"id":"outil-amass","path":"Cybersécurité Offensive/Outils/Outil - Amass.md","name":"Outil - Amass","title":"Outil - Amass","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Reconnaissance & OSINT","tags":["cyber","outil","Reconnaissance & OSINT"],"status":"publie","excerpt":"Amass (OWASP) est l'outil de référence pour l'énumération de sous-domaines : il agrège plus de 200 sources OSINT passives et des techniques actives (DNS, certificats) pour cartographier la surface d'attaque d'un domaine.","words":3604,"readTime":16,"modified":"2026-10-06T22:23:57.216Z","links":[{"id":"tools","hash":""},{"id":"outil-subfinder","hash":""},{"id":"outil-dnsx","hash":""},{"id":"outil-httpx","hash":""},{"id":"outil-nuclei","hash":""},{"id":"outil-censys","hash":""},{"id":"outil-shodan-cli","hash":""},{"id":"outil-theharvester","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-naabu","hash":""},{"id":"reconnaissance","hash":""},{"id":"outil-spiderfoot","hash":""}],"backlinks":["reconnaissance","outil-censys","outil-chaos","outil-dnsx","outil-katana","outil-maltego","outil-recon-ng","outil-shodan","outil-spiderfoot","outil-subfinder","outil-theharvester","tools"]},{"id":"outil-apktool","path":"Cybersécurité Offensive/Outils/Outil - APKTool.md","name":"Outil - APKTool","title":"Outil - APKTool","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Mobile & Reverse Engineering","tags":["cyber","outil","Mobile & Reverse Engineering"],"status":"publie","excerpt":"apktool décompile puis recompile un APK Android pour lire le code smali, décoder les ressources","words":3136,"readTime":14,"modified":"2026-10-06T22:23:57.216Z","links":[{"id":"tools","hash":""},{"id":"outil-jadx","hash":""},{"id":"outil-frida","hash":""},{"id":"outil-objection","hash":""},{"id":"outil-mobsf","hash":""},{"id":"outil-burp-suite","hash":""},{"id":"insecure-deserialization","hash":""},{"id":"insecure-source-code-management","hash":""},{"id":"reverse-engineering-malware-analysis","hash":""},{"id":"hardware-iot-pentesting","hash":""},{"id":"hardware-dump-et-analyse-de-firmware","hash":""}],"backlinks":["outil-frida","outil-jadx","outil-mobsf","outil-objection","tools"]},{"id":"outil-autopsy","path":"Cybersécurité Offensive/Outils/Outil - Autopsy.md","name":"Outil - Autopsy","title":"Outil - Autopsy","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Forensics, Threat Intel & Honeypots","tags":["cyber","outil","Forensics, Threat Intel & Honeypots"],"status":"publie","excerpt":"Autopsy — Forensics, Threat Intel & Honeypots","words":3147,"readTime":14,"modified":"2026-10-06T22:23:57.216Z","links":[{"id":"tools","hash":""},{"id":"outil-ftk-imager","hash":""},{"id":"outil-volatility","hash":""},{"id":"outil-wazuh","hash":""},{"id":"outil-velociraptor","hash":""},{"id":"outil-yara","hash":""},{"id":"outil-misp","hash":""},{"id":"reverse-engineering-malware-analysis","hash":""},{"id":"cheatsheets","hash":""},{"id":"glossaire","hash":""}],"backlinks":["cheatsheets","outil-ftk-imager","outil-kali-linux","outil-sift-workstation","outil-volatility","outil-yara","tools"]},{"id":"outil-bash-bunny","path":"Cybersécurité Offensive/Outils/Outil - Bash Bunny.md","name":"Outil - Bash Bunny","title":"Outil - Bash Bunny","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"USB / HID & Gadgets","tags":["cyber","outil","hardware","USB / HID & Gadgets"],"status":"publie","excerpt":"Bash Bunny — Le multi-vecteur USB (HID + réseau + stockage)","words":3114,"readTime":14,"modified":"2026-10-06T22:23:57.216Z","links":[{"id":"outil-usb-rubber-ducky","hash":""},{"id":"outil-responder","hash":""},{"id":"tools","hash":""},{"id":"outil-o-mg-cable","hash":""},{"id":"outil-p4wnp1-a-l-o-a","hash":""},{"id":"outil-flipper-zero-usb-radio","hash":""},{"id":"outil-metasploit","hash":""},{"id":"outil-netcat","hash":""},{"id":"outil-powershell-empire","hash":""},{"id":"protocole-usb","hash":""},{"id":"llmnr-nbt-ns-poisoning","hash":""}],"backlinks":["wireless-mitm-social-engineering","outil-duckuino","outil-flipper-zero-usb-radio","outil-hak5-payload-studio","outil-o-mg-cable","outil-p4wnp1-a-l-o-a","outil-set","outil-usb-host-shield","outil-usb-rubber-ducky","tools"]},{"id":"outil-beef","path":"Cybersécurité Offensive/Outils/Outil - BeEF.md","name":"Outil - BeEF","title":"Outil - BeEF","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Social Engineering & Phishing","tags":["cyber","outil","social-engineering"],"status":"publie","excerpt":"BeEF (Browser Exploitation Framework) — Le post-exploitation via le navigateur","words":3245,"readTime":15,"modified":"2026-10-06T22:23:57.220Z","links":[{"id":"outil-set","hash":""},{"id":"outil-gophish","hash":""},{"id":"tools","hash":""},{"id":"outil-evilginx2","hash":""},{"id":"outil-socialfish","hash":""},{"id":"outil-credsniper","hash":""},{"id":"outil-metasploit","hash":""},{"id":"outil-mitmproxy","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-modlishka","hash":""}],"backlinks":["wireless-mitm-social-engineering","outil-credsniper","outil-evilginx2","outil-gophish","outil-king-phisher","outil-modlishka","outil-set","outil-socialfish","outil-xsstrike","tools"]},{"id":"outil-bettercap","path":"Cybersécurité Offensive/Outils/Outil - bettercap.md","name":"Outil - bettercap","title":"Outil - bettercap","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Wireless & Réseau","tags":["cyber","outil","Wireless & Réseau"],"status":"publie","excerpt":"Framework de MITM (Man-in-The-Middle) moderne : spoofing ARP, reniflage de trafic, proxy HTTP(S), spoofing DNS , caplets, modules BLE/802.15.4 et interface web — le couteau suisse du pentest réseau local.","words":3430,"readTime":16,"modified":"2026-10-06T22:23:57.364Z","links":[{"id":"outil-wifiphisher","hash":""},{"id":"outil-wireshark","hash":""},{"id":"outil-tshark","hash":""},{"id":"tools","hash":""},{"id":"outil-aircrack-ng","hash":""},{"id":"outil-hcxdumptool","hash":""},{"id":"outil-metasploit","hash":""},{"id":"llmnr-nbt-ns-poisoning","hash":""},{"id":"arp-spoofing-et-mitm","hash":""},{"id":"attaques-wifi-rogue-ap","hash":""}],"backlinks":["wireless-mitm-social-engineering","cheatsheets","outil-parrot-os","outil-wifi-pineapple","outil-wifiphisher","tools"]},{"id":"outil-binwalk","path":"Cybersécurité Offensive/Outils/Outil - binwalk.md","name":"Outil - binwalk","title":"Outil - binwalk","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"CTF & Développement","tags":["cyber","outil","ctf"],"status":"publie","excerpt":"Binwalk — La forensique des fichiers embarqués","words":2934,"readTime":13,"modified":"2026-10-06T22:23:57.364Z","links":[{"id":"tools","hash":""},{"id":"outil-exiftool","hash":""},{"id":"outil-zsteg","hash":""},{"id":"outil-stegsolve","hash":""},{"id":"outil-unblob","hash":""},{"id":"outil-ghidra","hash":""},{"id":"outil-radare2","hash":""},{"id":"outil-kali-linux","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-john-the-ripper","hash":""},{"id":"reverse-engineering-malware-analysis","hash":""}],"backlinks":["reverse-engineering-malware-analysis","outil-cyberchef","outil-exiftool","outil-remnux","outil-rsactftool","outil-sift-workstation","outil-stegsolve","outil-unblob","outil-zsteg","tools"]},{"id":"outil-blackarch","path":"Cybersécurité Offensive/Outils/Outil - BlackArch.md","name":"Outil - BlackArch","title":"Outil - BlackArch","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Distributions & Lab","tags":["cyber","outil","distributions"],"status":"publie","excerpt":"BlackArch — L'arsenal Arch Linux pour pentesters exigeants","words":2683,"readTime":12,"modified":"2026-10-06T22:23:57.220Z","links":[{"id":"tools","hash":""},{"id":"outil-kali-linux","hash":""},{"id":"outil-parrot-os","hash":""},{"id":"outil-metasploit","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-aircrack-ng","hash":""},{"id":"outil-wifite","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-john-the-ripper","hash":""},{"id":"outil-ghidra","hash":""},{"id":"outil-radare2","hash":""},{"id":"outil-sqlmap","hash":""},{"id":"gobuster-brute-force-de-repertoires-dns-et-vhosts","hash":""},{"id":"outil-recon-ng","hash":""},{"id":"outil-theharvester","hash":""},{"id":"outil-commando-vm","hash":""}],"backlinks":["outil-kali-linux","outil-parrot-os","tools"]},{"id":"outil-bloodhound","path":"Cybersécurité Offensive/Outils/Outil - BloodHound.md","name":"Outil - BloodHound","title":"Outil - BloodHound","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Active Directory & Windows","tags":["cyber","outil","Active Directory & Windows"],"status":"publie","excerpt":"BloodHound est un outil de cartographie graphique d'Active Directory : il collecte les relations entre utilisateurs, groupes, machines et GPO, puis calcule les chemins d'attaque vers le contrôle de domaine.","words":3659,"readTime":17,"modified":"2026-10-06T22:23:57.220Z","links":[{"id":"outil-crackmapexec","hash":""},{"id":"outil-mimikatz","hash":""},{"id":"outil-impacket","hash":""},{"id":"outil-rubeus","hash":""},{"id":"outil-evil-winrm","hash":""},{"id":"outil-nmap","hash":""},{"id":"dcsync","hash":""},{"id":"golden-ticket","hash":""},{"id":"acl-abuse-ad","hash":""},{"id":"adcs-et-certificats-esc","hash":""},{"id":"outil-bloodhound","hash":""}],"backlinks":["scan-enumeration","active-directory","post-exploitation","cheatsheets","glossaire","outil-bloodhound","outil-cloudfox","outil-commando-vm","outil-covenant","outil-crackmapexec","outil-evil-winrm","outil-impacket","outil-kali-linux","outil-kerbrute","outil-mimikatz","outil-mitm6","outil-responder","outil-rubeus","tools"]},{"id":"outil-brutedum","path":"Cybersécurité Offensive/Outils/Outil - BruteDum.md","name":"Outil - BruteDum","title":"Outil - BruteDum","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Wordlists & Générateurs","tags":["cyber","outil","wordlists"],"status":"publie","excerpt":"BruteDum — Bruteforce réseau tout-en-un en Python","words":3230,"readTime":15,"modified":"2026-10-06T22:23:57.220Z","links":[{"id":"outil-seclists","hash":""},{"id":"outil-cewl","hash":""},{"id":"outil-cupp","hash":""},{"id":"outil-crunch","hash":""},{"id":"outil-pydictor","hash":""},{"id":"outil-hydra","hash":""},{"id":"outil-medusa","hash":""},{"id":"outil-ncrack","hash":""},{"id":"outil-rsmangler","hash":""},{"id":"tools","hash":""},{"id":"outil-nmap","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"brute-force-rate-limit","hash":""}],"backlinks":["password-cracking","outil-name-that-hash","tools"]},{"id":"outil-burp-extensions-bapp-store","path":"Cybersécurité Offensive/Outils/Outil - Burp Extensions (BApp Store).md","name":"Outil - Burp Extensions (BApp Store)","title":"Outil - Burp Extensions (BApp Store)","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Scan Web & Fuzzing","tags":["cyber","outil","Scan Web & Fuzzing"],"status":"publie","excerpt":"Burp Extensions (BApp Store) — Scan Web & Fuzzing","words":3355,"readTime":15,"modified":"2026-10-06T22:23:57.220Z","links":[{"id":"tools","hash":""},{"id":"outil-burp-suite","hash":""},{"id":"outil-ffuf","hash":""},{"id":"gobuster-brute-force-de-repertoires-dns-et-vhosts","hash":""},{"id":"outil-feroxbuster","hash":""},{"id":"outil-mitmproxy","hash":""},{"id":"outil-owasp-zap","hash":""},{"id":"outil-nuclei","hash":""},{"id":"outil-sqlmap","hash":""},{"id":"idor","hash":""},{"id":"http-request-smuggling","hash":""},{"id":"ssrf","hash":""},{"id":"xxe","hash":""},{"id":"graphql","hash":""}],"backlinks":["outil-burp-suite","tools"]},{"id":"outil-burp-suite","path":"Cybersécurité Offensive/Outils/Outil - Burp Suite.md","name":"Outil - Burp Suite","title":"Outil - Burp Suite","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Scan Web & Fuzzing","tags":["cyber","outil","Scan Web & Fuzzing"],"status":"publie","excerpt":"Burp Suite = le proxy d'interception web de référence : on s'intercale entre le navigateur et la cible pour capturer, modifier, rejouer et fuzzer chaque requête HTTP/S.","words":3844,"readTime":17,"modified":"2026-10-06T22:23:57.224Z","links":[{"id":"tools","hash":""},{"id":"outil-burp-extensions-bapp-store","hash":""},{"id":"outil-sqlmap","hash":""},{"id":"outil-ffuf","hash":""},{"id":"gobuster-brute-force-de-repertoires-dns-et-vhosts","hash":""},{"id":"outil-feroxbuster","hash":""},{"id":"outil-nuclei","hash":""},{"id":"outil-mitmproxy","hash":""},{"id":"outil-owasp-zap","hash":""},{"id":"outil-caido","hash":""},{"id":"injection-sql","hash":""},{"id":"ssrf","hash":""},{"id":"idor","hash":""},{"id":"http-request-smuggling","hash":""},{"id":"graphql","hash":""}],"backlinks":["reconnaissance","cheatsheets","glossaire","outil-apktool","outil-burp-extensions-bapp-store","outil-caido","outil-cewl","outil-commando-vm","outil-dirsearch","outil-feroxbuster","outil-ffuf","outil-frida","gobuster-brute-force-de-repertoires-dns-et-vhosts","outil-kali-linux","outil-mitmproxy","outil-mobsf","outil-objection","outil-owasp-zap","outil-patator","outil-seclists","outil-sqlmap","outil-wfuzz","outil-wpscan","outil-xsstrike","tools"]},{"id":"outil-caido","path":"Cybersécurité Offensive/Outils/Outil - Caido.md","name":"Outil - Caido","title":"Outil - Caido","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Scan Web & Fuzzing","tags":["cyber","outil","Scan Web & Fuzzing"],"status":"publie","excerpt":"Caido — Proxy d'interception web léger en Rust","words":3415,"readTime":16,"modified":"2026-10-06T22:23:57.228Z","links":[{"id":"tools","hash":""},{"id":"outil-burp-suite","hash":""},{"id":"outil-mitmproxy","hash":""},{"id":"outil-owasp-zap","hash":""},{"id":"outil-ffuf","hash":""},{"id":"gobuster-brute-force-de-repertoires-dns-et-vhosts","hash":""},{"id":"outil-nuclei","hash":""},{"id":"idor","hash":""},{"id":"virtual-hosts","hash":""},{"id":"ssrf","hash":""}],"backlinks":["outil-burp-suite","outil-owasp-zap","outil-patator","outil-sqlmap","tools"]},{"id":"outil-canarytokens","path":"Cybersécurité Offensive/Outils/Outil - Canarytokens.md","name":"Outil - Canarytokens","title":"Outil - Canarytokens","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Forensics, Threat Intel & Honeypots","tags":["cyber","outil","Forensics, Threat Intel & Honeypots"],"status":"publie","excerpt":"Canarytokens — Forensics, Threat Intel & Honeypots","words":2661,"readTime":12,"modified":"2026-10-06T22:23:57.228Z","links":[{"id":"tools","hash":""},{"id":"outil-cowrie","hash":""},{"id":"outil-misp","hash":""},{"id":"outil-wazuh","hash":""},{"id":"outil-elastic","hash":""},{"id":"reverse-engineering-malware-analysis","hash":""},{"id":"glossaire","hash":""}],"backlinks":["outil-cowrie","outil-misp","outil-opencti","tools"]},{"id":"outil-cape","path":"Cybersécurité Offensive/Outils/Outil - CAPE.md","name":"Outil - CAPE","title":"Outil - CAPE","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Malware & Sandbox","tags":["cyber","outil","malware"],"status":"publie","excerpt":"CAPE — Extraction automatisée de configurations et de payloads","words":4047,"readTime":18,"modified":"2026-10-06T22:23:57.224Z","links":[{"id":"tools","hash":""},{"id":"outil-cuckoo-sandbox","hash":""},{"id":"outil-volatility","hash":""},{"id":"outil-yara","hash":""},{"id":"outil-x64dbg","hash":""},{"id":"outil-ghidra","hash":""},{"id":"outil-misp","hash":""},{"id":"outil-remnux","hash":""},{"id":"outil-wireshark","hash":""},{"id":"outil-tshark","hash":""},{"id":"outil-suricata","hash":""},{"id":"reverse-engineering-malware-analysis","hash":""}],"backlinks":["reverse-engineering-malware-analysis","outil-cuckoo-sandbox","outil-dnspy","outil-fakenet-ng","outil-oletools","outil-sysinternals-suite","outil-x64dbg","tools"]},{"id":"outil-censys","path":"Cybersécurité Offensive/Outils/Outil - Censys.md","name":"Outil - Censys","title":"Outil - Censys","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Reconnaissance & OSINT","tags":["cyber","outil","recon"],"status":"publie","excerpt":"Censys — Moteur de recherche sur l'Internet réel","words":2725,"readTime":12,"modified":"2026-10-06T22:23:57.228Z","links":[{"id":"tools","hash":""},{"id":"outil-shodan-cli","hash":""},{"id":"outil-shodan","hash":""},{"id":"outil-subfinder","hash":""},{"id":"outil-amass","hash":""},{"id":"outil-httpx","hash":""},{"id":"outil-naabu","hash":""},{"id":"outil-theharvester","hash":""},{"id":"outil-nuclei","hash":""},{"id":"reconnaissance","hash":""}],"backlinks":["scan-enumeration","outil-amass","outil-maltego","outil-recon-ng","outil-shodan-cli","outil-shodan","outil-spiderfoot","tools"]},{"id":"outil-cewl","path":"Cybersécurité Offensive/Outils/Outil - CeWL.md","name":"Outil - CeWL","title":"Outil - CeWL","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Wordlists & Générateurs","tags":["cyber","outil","wordlists"],"status":"publie","excerpt":"CeWL — Wordlist sur mesure depuis un site web","words":3818,"readTime":17,"modified":"2026-10-06T22:23:57.228Z","links":[{"id":"tools","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-john-the-ripper","hash":""},{"id":"outil-hydra","hash":""},{"id":"outil-medusa","hash":""},{"id":"outil-ncrack","hash":""},{"id":"outil-patator","hash":""},{"id":"outil-rsmangler","hash":""},{"id":"outil-cupp","hash":""},{"id":"outil-mentalist","hash":""},{"id":"outil-pydictor","hash":""},{"id":"outil-crunch","hash":""},{"id":"outil-kwprocessor","hash":""},{"id":"outil-seclists","hash":""},{"id":"outil-oneruletorulethemall","hash":""},{"id":"outil-burp-suite","hash":""},{"id":"gobuster-brute-force-de-repertoires-dns-et-vhosts","hash":""},{"id":"outil-ffuf","hash":""},{"id":"outil-wfuzz","hash":""},{"id":"outil-dirsearch","hash":""},{"id":"outil-subfinder","hash":""},{"id":"outil-theharvester","hash":""},{"id":"outil-recon-ng","hash":""},{"id":"outil-spiderfoot","hash":""},{"id":"outil-maltego","hash":""},{"id":"reconnaissance","hash":""},{"id":"password-cracking","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"password-spraying","hash":""},{"id":"brute-force-rate-limit","hash":""}],"backlinks":["reconnaissance","password-cracking","outil-brutedum","outil-crunch","outil-cupp","outil-mentalist","outil-oneruletorulethemall","outil-rsmangler","outil-seclists","tools"]},{"id":"outil-chaos","path":"Cybersécurité Offensive/Outils/Outil - chaos.md","name":"Outil - chaos","title":"Outil - chaos","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Reconnaissance & OSINT","tags":["cyber","outil","recon"],"status":"publie","excerpt":"chaos — Données DNS historiques du bug bounty","words":2283,"readTime":10,"modified":"2026-10-06T22:23:57.368Z","links":[{"id":"tools","hash":""},{"id":"outil-subfinder","hash":""},{"id":"outil-dnsx","hash":""},{"id":"outil-httpx","hash":""},{"id":"outil-nuclei","hash":""},{"id":"outil-amass","hash":""},{"id":"reconnaissance","hash":""}],"backlinks":["reconnaissance","outil-dnsx","outil-subfinder","tools"]},{"id":"outil-chisel","path":"Cybersécurité Offensive/Outils/Outil - Chisel.md","name":"Outil - Chisel","title":"Outil - Chisel","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"C2 & Post-Exploitation","tags":["cyber","outil","C2 & Post-Exploitation"],"status":"publie","excerpt":"Chisel est un tunnel TCP/UDP encapsulé dans une connexion HTTP via WebSocket : un client et un serveur Go créent un canal chiffré, très utilisé en CTF pour le port forwarding et le proxy SOCKS reverse.","words":3007,"readTime":14,"modified":"2026-10-06T22:23:57.232Z","links":[{"id":"tools","hash":""},{"id":"pivoting-et-tunneling","hash":""},{"id":"outil-ligolo-ng","hash":""},{"id":"outil-ncat","hash":""},{"id":"outil-socat","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-metasploit","hash":""},{"id":"reverse-shells","hash":""}],"backlinks":["exploitation-reseau","post-exploitation","cheatsheets","outil-havoc","outil-ligolo-ng","outil-metasploit","outil-mythic","outil-p4wnp1-a-l-o-a","outil-sliver","outil-sqlmap","tools"]},{"id":"outil-cloudfox","path":"Cybersécurité Offensive/Outils/Outil - cloudfox.md","name":"Outil - cloudfox","title":"Outil - cloudfox","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Cloud & Containers","tags":["cyber","outil","cloud","aws","azure","gcp"],"status":"publie","excerpt":"cloudfox — La boîte à outils de contexte cloud","words":3248,"readTime":15,"modified":"2026-10-06T22:23:57.368Z","links":[{"id":"outil-kubectl","hash":""},{"id":"tools","hash":""},{"id":"outil-pacu","hash":""},{"id":"outil-prowler","hash":""},{"id":"outil-scoutsuite","hash":""},{"id":"outil-bloodhound","hash":""}],"backlinks":["reconnaissance","cheatsheets","outil-kube-bench","outil-kube-hunter","outil-kubectl","outil-pacu","outil-peirates","outil-prowler","outil-scoutsuite","tools"]},{"id":"outil-commando-vm","path":"Cybersécurité Offensive/Outils/Outil - Commando VM.md","name":"Outil - Commando VM","title":"Outil - Commando VM","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Distributions & Lab","tags":["cyber","outil","distributions"],"status":"publie","excerpt":"Commando VM — La plateforme de pentest Windows 100 % native","words":2584,"readTime":12,"modified":"2026-10-06T22:23:57.232Z","links":[{"id":"tools","hash":""},{"id":"outil-impacket","hash":""},{"id":"outil-bloodhound","hash":""},{"id":"outil-mimikatz","hash":""},{"id":"outil-metasploit","hash":""},{"id":"outil-burp-suite","hash":""},{"id":"outil-powershell-empire","hash":""},{"id":"outil-sysinternals-suite","hash":""},{"id":"outil-rubeus","hash":""},{"id":"outil-crackmapexec","hash":""},{"id":"outil-evil-winrm","hash":""},{"id":"outil-responder","hash":""},{"id":"outil-mitm6","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-sliver","hash":""},{"id":"outil-covenant","hash":""},{"id":"outil-kali-linux","hash":""},{"id":"outil-flare-vm","hash":""}],"backlinks":["outil-blackarch","outil-kali-linux","tools"]},{"id":"outil-covenant","path":"Cybersécurité Offensive/Outils/Outil - Covenant.md","name":"Outil - Covenant","title":"Outil - Covenant","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"C2 & Post-Exploitation","tags":["cyber","outil","C2 & Post-Exploitation"],"status":"publie","excerpt":"Covenant est un framework C2 open-source écrit en C /.NET avec une interface web complète, qui gère des agents appelés « Grunts » via des launchers .NET (PowerShell, exe, dll, installutil).","words":2991,"readTime":14,"modified":"2026-10-06T22:23:57.232Z","links":[{"id":"outil-mythic","hash":""},{"id":"outil-sliver","hash":""},{"id":"outil-havoc","hash":""},{"id":"tools","hash":""},{"id":"outil-rubeus","hash":""},{"id":"kerberoasting","hash":""},{"id":"outil-bloodhound","hash":""},{"id":"outil-mimikatz","hash":""},{"id":"pass-the-hash","hash":""},{"id":"outil-nmap","hash":""},{"id":"privilege-escalation-windows","hash":""},{"id":"reverse-shells","hash":""},{"id":"outil-powershell-empire","hash":""},{"id":"pivoting-et-tunneling","hash":""}],"backlinks":["post-exploitation","outil-commando-vm","outil-havoc","outil-ligolo-ng","outil-metasploit","outil-mythic","outil-powershell-empire","outil-sliver","tools"]},{"id":"outil-cowrie","path":"Cybersécurité Offensive/Outils/Outil - Cowrie.md","name":"Outil - Cowrie","title":"Outil - Cowrie","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Forensics, Threat Intel & Honeypots","tags":["cyber","outil","Forensics, Threat Intel & Honeypots"],"status":"publie","excerpt":"Cowrie — Honeypot SSH/Telnet et collecte d'IOCs","words":2029,"readTime":9,"modified":"2026-10-06T22:23:57.236Z","links":[{"id":"tools","hash":""},{"id":"outil-canarytokens","hash":""},{"id":"outil-misp","hash":""},{"id":"outil-elastic","hash":""},{"id":"outil-yara","hash":""},{"id":"outil-volatility","hash":""},{"id":"outil-wazuh","hash":""},{"id":"glossaire","hash":""}],"backlinks":["outil-canarytokens","outil-misp","outil-opencti","tools"]},{"id":"outil-crackmapexec","path":"Cybersécurité Offensive/Outils/Outil - CrackMapExec.md","name":"Outil - CrackMapExec","title":"Outil - CrackMapExec","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Exploitation & Cracking","tags":["cyber","outil","Exploitation & Cracking"],"status":"publie","excerpt":"CrackMapExec (NetExec) — Post-exploitation réseau","words":3101,"readTime":14,"modified":"2026-10-06T22:23:57.236Z","links":[{"id":"outil-bloodhound","hash":""},{"id":"outil-impacket","hash":""},{"id":"outil-mimikatz","hash":""},{"id":"outil-evil-winrm","hash":""},{"id":"outil-responder","hash":""},{"id":"outil-rubeus","hash":""},{"id":"outil-kerbrute","hash":""},{"id":"tools","hash":""},{"id":"pass-the-hash","hash":""},{"id":"password-spraying","hash":""},{"id":"ntlm-relay","hash":""},{"id":"dump-ntds-dit","hash":""},{"id":"dcsync","hash":""},{"id":"golden-ticket","hash":""},{"id":"as-rep-roasting","hash":""},{"id":"privilege-escalation-windows","hash":""},{"id":"pivoting-et-tunneling","hash":""},{"id":"llmnr-nbt-ns-poisoning","hash":""},{"id":"kerberoasting","hash":""}],"backlinks":["active-directory","wireless-mitm-social-engineering","cheatsheets","glossaire","outil-bloodhound","outil-commando-vm","outil-evil-winrm","outil-impacket","outil-medusa","outil-mimikatz","outil-mitm6","outil-ncrack","outil-responder","tools"]},{"id":"outil-credsniper","path":"Cybersécurité Offensive/Outils/Outil - CredSniper.md","name":"Outil - CredSniper","title":"Outil - CredSniper","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Social Engineering & Phishing","tags":["cyber","outil","social-engineering"],"status":"publie","excerpt":"CredSniper — Phishing avec support du 2FA (credential harvesting léger)","words":3009,"readTime":14,"modified":"2026-10-06T22:23:57.236Z","links":[{"id":"tools","hash":""},{"id":"outil-evilginx2","hash":""},{"id":"outil-socialfish","hash":""},{"id":"outil-gophish","hash":""},{"id":"outil-set","hash":""},{"id":"outil-beef","hash":""},{"id":"outil-modlishka","hash":""}],"backlinks":["wireless-mitm-social-engineering","outil-beef","outil-evilginx2","outil-gophish","outil-king-phisher","outil-modlishka","outil-set","outil-socialfish","outil-weeman","tools"]},{"id":"outil-crunch","path":"Cybersécurité Offensive/Outils/Outil - Crunch.md","name":"Outil - Crunch","title":"Outil - Crunch","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Wordlists & Générateurs","tags":["cyber","outil","wordlists"],"status":"publie","excerpt":"Crunch — Générateur de mots de passe par masque","words":3571,"readTime":16,"modified":"2026-10-06T22:23:57.240Z","links":[{"id":"tools","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-john-the-ripper","hash":""},{"id":"outil-aircrack-ng","hash":""},{"id":"outil-reaver","hash":""},{"id":"outil-hydra","hash":""},{"id":"outil-medusa","hash":""},{"id":"outil-ncrack","hash":""},{"id":"outil-kwprocessor","hash":""},{"id":"outil-cewl","hash":""},{"id":"outil-cupp","hash":""},{"id":"outil-rsmangler","hash":""},{"id":"outil-mentalist","hash":""},{"id":"outil-pydictor","hash":""},{"id":"outil-seclists","hash":""},{"id":"outil-oneruletorulethemall","hash":""},{"id":"password-cracking","hash":""},{"id":"wireless-mitm-social-engineering","hash":""},{"id":"reconnaissance","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"password-spraying","hash":""},{"id":"attaques-wifi-wpa2-et-pmkid","hash":""},{"id":"attaques-wifi-wpa2-psk","hash":""},{"id":"attaques-wifi-pmkid","hash":""}],"backlinks":["password-cracking","glossaire","outil-brutedum","outil-cewl","outil-cupp","outil-hashcat","outil-kwprocessor","outil-mentalist","outil-oneruletorulethemall","outil-pydictor","outil-rsmangler","tools"]},{"id":"outil-cuckoo-sandbox","path":"Cybersécurité Offensive/Outils/Outil - Cuckoo Sandbox.md","name":"Outil - Cuckoo Sandbox","title":"Outil - Cuckoo Sandbox","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Malware & Sandbox","tags":["cyber","outil","malware"],"status":"publie","excerpt":"Cuckoo Sandbox — Analyse dynamique automatisée de malwares","words":3768,"readTime":17,"modified":"2026-10-06T22:23:57.240Z","links":[{"id":"tools","hash":""},{"id":"outil-cape","hash":""},{"id":"outil-volatility","hash":""},{"id":"outil-yara","hash":""},{"id":"outil-fakenet-ng","hash":""},{"id":"outil-misp","hash":""},{"id":"outil-remnux","hash":""},{"id":"outil-wireshark","hash":""},{"id":"outil-tshark","hash":""},{"id":"outil-tcpdump","hash":""},{"id":"outil-ghidra","hash":""},{"id":"reverse-engineering-malware-analysis","hash":""}],"backlinks":["reverse-engineering-malware-analysis","outil-cape","outil-dnspy","outil-fakenet-ng","outil-oletools","outil-sysinternals-suite","outil-x64dbg","outil-yara","tools"]},{"id":"outil-cupp","path":"Cybersécurité Offensive/Outils/Outil - CUPP.md","name":"Outil - CUPP","title":"Outil - CUPP","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Wordlists & Générateurs","tags":["cyber","outil","wordlists"],"status":"publie","excerpt":"CUPP — Profiling de mots de passe personnalisés","words":3014,"readTime":14,"modified":"2026-10-06T22:23:57.224Z","links":[{"id":"tools","hash":""},{"id":"outil-cewl","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-john-the-ripper","hash":""},{"id":"outil-hydra","hash":""},{"id":"outil-medusa","hash":""},{"id":"outil-seclists","hash":""},{"id":"outil-rsmangler","hash":""},{"id":"outil-mentalist","hash":""},{"id":"outil-pydictor","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"password-spraying","hash":""},{"id":"outil-crunch","hash":""}],"backlinks":["reconnaissance","password-cracking","outil-brutedum","outil-cewl","outil-crunch","outil-kwprocessor","outil-mentalist","outil-oneruletorulethemall","outil-pydictor","outil-rsmangler","outil-seclists","tools"]},{"id":"outil-cutter","path":"Cybersécurité Offensive/Outils/Outil - Cutter.md","name":"Outil - Cutter","title":"Outil - Cutter","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Mobile & Reverse Engineering","tags":["cyber","outil","Mobile & Reverse Engineering"],"status":"publie","excerpt":"Cutter — Reverse engineering GUI basé sur radare2","words":2598,"readTime":12,"modified":"2026-10-06T22:23:57.244Z","links":[{"id":"tools","hash":""},{"id":"outil-radare2","hash":""},{"id":"outil-ghidra","hash":""},{"id":"outil-gdb-peda","hash":""},{"id":"outil-pwntools","hash":""},{"id":"outil-ropgadget","hash":""},{"id":"outil-x64dbg","hash":""},{"id":"buffer-overflow","hash":""},{"id":"hardware-logic-analyzer","hash":""},{"id":"reverse-engineering-malware-analysis","hash":""}],"backlinks":["reverse-engineering-malware-analysis","outil-dnspy","outil-flare-vm","outil-ghidra","outil-jadx","outil-radare2","outil-remnux","outil-unblob","outil-x64dbg","tools"]},{"id":"outil-cyberchef","path":"Cybersécurité Offensive/Outils/Outil - CyberChef.md","name":"Outil - CyberChef","title":"Outil - CyberChef","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"CTF & Développement","tags":["cyber","outil","ctf"],"status":"publie","excerpt":"La « Cyber Cheesecake Factory » : un outil web pour chaîner décodages, encodages, transformations et crypto en un simple glisser-déposer.","words":2933,"readTime":13,"modified":"2026-10-06T22:23:57.244Z","links":[{"id":"tools","hash":""},{"id":"outil-rsactftool","hash":""},{"id":"outil-exiftool","hash":""},{"id":"outil-binwalk","hash":""},{"id":"outil-zsteg","hash":""},{"id":"outil-stegsolve","hash":""},{"id":"outil-ghidra","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-john-the-ripper","hash":""},{"id":"cheatsheets","hash":""},{"id":"outil-pwntools","hash":""}],"backlinks":["reverse-engineering-malware-analysis","outil-exiftool","outil-flare-vm","outil-gdb-peda","outil-pwntools","outil-ropgadget","outil-rsactftool","outil-stegsolve","outil-wireshark","outil-zsteg","tools"]},{"id":"outil-dirsearch","path":"Cybersécurité Offensive/Outils/Outil - dirsearch.md","name":"Outil - dirsearch","title":"Outil - dirsearch","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Scan Web & Fuzzing","tags":["cyber","outil","Scan Web & Fuzzing"],"status":"publie","excerpt":"dirsearch — Scanner de répertoires web (Web path scanner)","words":3138,"readTime":14,"modified":"2026-10-06T22:23:57.368Z","links":[{"id":"tools","hash":""},{"id":"outil-burp-suite","hash":""},{"id":"gobuster-brute-force-de-repertoires-dns-et-vhosts","hash":""},{"id":"outil-ffuf","hash":""},{"id":"outil-feroxbuster","hash":""},{"id":"outil-nuclei","hash":""},{"id":"outil-httpx","hash":""},{"id":"exploitation-web","hash":""},{"id":"path-traversal","hash":""},{"id":"injection-de-commandes","hash":""}],"backlinks":["reconnaissance","outil-cewl","outil-feroxbuster","outil-ffuf","gobuster-brute-force-de-repertoires-dns-et-vhosts","outil-seclists","tools"]},{"id":"outil-dnspy","path":"Cybersécurité Offensive/Outils/Outil - dnSpy.md","name":"Outil - dnSpy","title":"Outil - dnSpy","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Malware & Sandbox","tags":["cyber","outil","malware"],"status":"publie","excerpt":"dnSpy est le débogueur/décompilateur .NET qui permet de lire un malware C en pseudo-code source, de poser des breakpoints et même de patcher l'assembly — indispensable pour les loaders et RAT .NET.","words":3413,"readTime":16,"modified":"2026-10-06T22:23:57.368Z","links":[{"id":"tools","hash":""},{"id":"outil-x64dbg","hash":""},{"id":"outil-ghidra","hash":""},{"id":"outil-cutter","hash":""},{"id":"outil-flare-vm","hash":""},{"id":"outil-yara","hash":""},{"id":"outil-cape","hash":""},{"id":"outil-cuckoo-sandbox","hash":""},{"id":"reverse-engineering-malware-analysis","hash":""}],"backlinks":["reverse-engineering-malware-analysis","outil-flare-vm","outil-process-hacker","outil-x64dbg","tools"]},{"id":"outil-dnsx","path":"Cybersécurité Offensive/Outils/Outil - dnsx.md","name":"Outil - dnsx","title":"Outil - dnsx","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Reconnaissance & OSINT","tags":["cyber","outil","recon"],"status":"publie","excerpt":"dnsx — Probe DNS massif de l'écosystème projectdiscovery","words":2612,"readTime":12,"modified":"2026-10-06T22:23:57.372Z","links":[{"id":"tools","hash":""},{"id":"outil-subfinder","hash":""},{"id":"outil-chaos","hash":""},{"id":"outil-httpx","hash":""},{"id":"outil-naabu","hash":""},{"id":"outil-nuclei","hash":""},{"id":"outil-amass","hash":""},{"id":"reconnaissance","hash":""}],"backlinks":["reconnaissance","outil-amass","outil-chaos","outil-httpx","outil-naabu","outil-subfinder","tools"]},{"id":"outil-duckuino","path":"Cybersécurité Offensive/Outils/Outil - Duckuino.md","name":"Outil - Duckuino","title":"Outil - Duckuino","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"USB / HID & Gadgets","tags":["cyber","outil","hardware","USB / HID & Gadgets"],"status":"publie","excerpt":"Duckuino — Du Duckyscript au microcontrôleur (BadUSB DIY)","words":2897,"readTime":13,"modified":"2026-10-06T22:23:57.244Z","links":[{"id":"outil-metasploit","hash":""},{"id":"outil-powershell-empire","hash":""},{"id":"tools","hash":""},{"id":"outil-usb-rubber-ducky","hash":""},{"id":"outil-bash-bunny","hash":""},{"id":"outil-flipper-zero-usb-radio","hash":""},{"id":"outil-p4wnp1-a-l-o-a","hash":""},{"id":"outil-o-mg-cable","hash":""},{"id":"outil-usb-host-shield","hash":""},{"id":"hardware-arduino","hash":""},{"id":"protocole-usb","hash":""},{"id":"reverse-shells","hash":""}],"backlinks":["outil-hak5-payload-studio","outil-usb-host-shield","outil-usb-rubber-ducky","tools"]},{"id":"outil-elastic","path":"Cybersécurité Offensive/Outils/Outil - Elastic.md","name":"Outil - Elastic","title":"Outil - Elastic","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"IDS / SIEM / EDR","tags":["cyber","outil","IDS / SIEM / EDR"],"status":"publie","excerpt":"Elastic Stack (ELK) — Elasticsearch, Logstash, Kibana, Filebeat — est la plateforme","words":3160,"readTime":14,"modified":"2026-10-06T22:23:57.248Z","links":[{"id":"tools","hash":""},{"id":"outil-suricata","hash":""},{"id":"outil-zeek","hash":""},{"id":"outil-wazuh","hash":""},{"id":"outil-osquery","hash":""},{"id":"outil-graylog","hash":""},{"id":"outil-splunk","hash":""},{"id":"outil-yara","hash":""},{"id":"outil-velociraptor","hash":""},{"id":"outil-sigma","hash":""},{"id":"reverse-shells","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"privilege-escalation-windows","hash":""}],"backlinks":["outil-canarytokens","outil-cowrie","outil-graylog","outil-misp","outil-osquery","outil-sigma","outil-snort","outil-splunk","outil-suricata","outil-velociraptor","outil-volatility","outil-wazuh","outil-zeek","tools"]},{"id":"outil-evil-winrm","path":"Cybersécurité Offensive/Outils/Outil - Evil-WinRM.md","name":"Outil - Evil-WinRM","title":"Outil - Evil-WinRM","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Active Directory & Windows","tags":["cyber","outil","Active Directory & Windows"],"status":"publie","excerpt":"Evil-WinRM est un shell WinRM en Ruby : il se connecte aux machines Windows via le port 5985 (HTTP) / 5986 (HTTPS) avec un utilisateur ou un hash NTLM , et fournit des fonctions de post-exploitation.","words":3157,"readTime":14,"modified":"2026-10-06T22:23:57.248Z","links":[{"id":"outil-bloodhound","hash":""},{"id":"outil-impacket","hash":""},{"id":"outil-mimikatz","hash":""},{"id":"outil-rubeus","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-crackmapexec","hash":""},{"id":"outil-evil-winrm","hash":""}],"backlinks":["active-directory","cheatsheets","outil-bloodhound","outil-commando-vm","outil-crackmapexec","outil-evil-winrm","outil-impacket","outil-kerbrute","outil-medusa","outil-metasploit","outil-mimikatz","outil-mitm6","outil-ncrack","outil-responder","outil-rubeus","outil-set","tools"]},{"id":"outil-evilginx2","path":"Cybersécurité Offensive/Outils/Outil - Evilginx2.md","name":"Outil - Evilginx2","title":"Outil - Evilginx2","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Social Engineering & Phishing","tags":["cyber","outil","social-engineering"],"status":"publie","excerpt":"Evilginx2 — Le framework de reverse proxy pour le détournement de session (2FA bypass)","words":3062,"readTime":14,"modified":"2026-10-06T22:23:57.248Z","links":[{"id":"outil-gophish","hash":""},{"id":"tools","hash":""},{"id":"outil-modlishka","hash":""},{"id":"outil-credsniper","hash":""},{"id":"outil-set","hash":""},{"id":"outil-beef","hash":""},{"id":"outil-wireshark","hash":""},{"id":"outil-tcpdump","hash":""},{"id":"outil-nmap","hash":""}],"backlinks":["wireless-mitm-social-engineering","cheatsheets","outil-beef","outil-credsniper","outil-gophish","outil-king-phisher","outil-modlishka","outil-set","outil-socialfish","outil-weeman","outil-wifi-pineapple","tools"]},{"id":"outil-exiftool","path":"Cybersécurité Offensive/Outils/Outil - exiftool.md","name":"Outil - exiftool","title":"Outil - exiftool","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"CTF & Développement","tags":["cyber","outil","ctf"],"status":"publie","excerpt":"ExifTool — L'arsenal des métadonnées de fichiers","words":2593,"readTime":12,"modified":"2026-10-06T22:23:57.372Z","links":[{"id":"tools","hash":""},{"id":"outil-zsteg","hash":""},{"id":"outil-stegsolve","hash":""},{"id":"outil-binwalk","hash":""},{"id":"outil-cyberchef","hash":""},{"id":"outil-ghidra","hash":""},{"id":"cheatsheets","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-john-the-ripper","hash":""}],"backlinks":["reverse-engineering-malware-analysis","outil-binwalk","outil-cyberchef","outil-sift-workstation","outil-stegsolve","outil-zsteg","tools"]},{"id":"outil-fakenet-ng","path":"Cybersécurité Offensive/Outils/Outil - FakeNet-NG.md","name":"Outil - FakeNet-NG","title":"Outil - FakeNet-NG","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Malware & Sandbox","tags":["cyber","outil","malware"],"status":"publie","excerpt":"FakeNet-NG — Simulation de services réseau pour piéger les malwares","words":2738,"readTime":12,"modified":"2026-10-06T22:23:57.252Z","links":[{"id":"tools","hash":""},{"id":"outil-cuckoo-sandbox","hash":""},{"id":"outil-cape","hash":""},{"id":"outil-wireshark","hash":""},{"id":"outil-tshark","hash":""},{"id":"outil-tcpdump","hash":""},{"id":"outil-yara","hash":""},{"id":"outil-misp","hash":""},{"id":"outil-remnux","hash":""},{"id":"reverse-engineering-malware-analysis","hash":""}],"backlinks":["reverse-engineering-malware-analysis","outil-cuckoo-sandbox","outil-flare-vm","outil-remnux","tools"]},{"id":"outil-feroxbuster","path":"Cybersécurité Offensive/Outils/Outil - Feroxbuster.md","name":"Outil - Feroxbuster","title":"Outil - Feroxbuster","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Scan Web & Fuzzing","tags":["cyber","outil","Scan Web & Fuzzing"],"status":"publie","excerpt":"Feroxbuster — Brute-forcer de répertoires web en Rust","words":3231,"readTime":15,"modified":"2026-10-06T22:23:57.256Z","links":[{"id":"tools","hash":""},{"id":"outil-dirsearch","hash":""},{"id":"gobuster-brute-force-de-repertoires-dns-et-vhosts","hash":""},{"id":"outil-ffuf","hash":""},{"id":"outil-burp-suite","hash":""},{"id":"outil-nuclei","hash":""},{"id":"outil-httpx","hash":""},{"id":"exploitation-web","hash":""},{"id":"path-traversal","hash":""},{"id":"brute-force-rate-limit","hash":""}],"backlinks":["reconnaissance","outil-burp-extensions-bapp-store","outil-burp-suite","outil-dirsearch","outil-ffuf","gobuster-brute-force-de-repertoires-dns-et-vhosts","outil-wfuzz","tools"]},{"id":"outil-ffuf","path":"Cybersécurité Offensive/Outils/Outil - ffuf.md","name":"Outil - ffuf","title":"Outil - ffuf","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Scan Web & Fuzzing","tags":["cyber","outil","Scan Web & Fuzzing"],"status":"publie","excerpt":"ffuf — Fuzzer web ultra-rapide (Fuzz Faster U Fool)","words":3262,"readTime":15,"modified":"2026-10-06T22:23:57.372Z","links":[{"id":"tools","hash":""},{"id":"gobuster-brute-force-de-repertoires-dns-et-vhosts","hash":""},{"id":"outil-feroxbuster","hash":""},{"id":"outil-dirsearch","hash":""},{"id":"outil-burp-suite","hash":""},{"id":"outil-nuclei","hash":""},{"id":"outil-wfuzz","hash":""},{"id":"virtual-hosts","hash":""},{"id":"hidden-parameters","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["reconnaissance","cheatsheets","glossaire","outil-burp-extensions-bapp-store","outil-burp-suite","outil-caido","outil-cewl","outil-dirsearch","outil-feroxbuster","outil-gau","gobuster-brute-force-de-repertoires-dns-et-vhosts","outil-katana","outil-mitmproxy","outil-nikto","outil-rustscan","outil-seclists","outil-waybackurls","outil-wfuzz","outil-wpscan","tools"]},{"id":"outil-flare-vm","path":"Cybersécurité Offensive/Outils/Outil - Flare VM.md","name":"Outil - Flare VM","title":"Outil - Flare VM","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Distributions & Lab","tags":["cyber","outil","distributions"],"status":"publie","excerpt":"Flare VM — L'environnement Windows d'analyse de malwares (Mandiant)","words":2533,"readTime":12,"modified":"2026-10-06T22:23:57.256Z","links":[{"id":"tools","hash":""},{"id":"outil-remnux","hash":""},{"id":"outil-ghidra","hash":""},{"id":"outil-x64dbg","hash":""},{"id":"outil-dnspy","hash":""},{"id":"outil-radare2","hash":""},{"id":"outil-cutter","hash":""},{"id":"outil-oletools","hash":""},{"id":"outil-wireshark","hash":""},{"id":"outil-sysinternals-suite","hash":""},{"id":"outil-process-hacker","hash":""},{"id":"outil-yara","hash":""},{"id":"outil-cyberchef","hash":""},{"id":"outil-fakenet-ng","hash":""},{"id":"outil-sift-workstation","hash":""}],"backlinks":["reverse-engineering-malware-analysis","outil-commando-vm","outil-dnspy","outil-oletools","outil-process-hacker","outil-remnux","outil-sift-workstation","outil-sysinternals-suite","outil-tails-os","outil-unblob","outil-x64dbg","tools"]},{"id":"outil-flipper-zero-usb-radio","path":"Cybersécurité Offensive/Outils/Outil - Flipper Zero (USB & radio).md","name":"Outil - Flipper Zero (USB & radio)","title":"Outil - Flipper Zero (USB & radio)","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"USB / HID & Gadgets","tags":["cyber","outil","USB / HID & Gadgets"],"status":"publie","excerpt":"Flipper Zero (USB & radio) — USB / HID & Gadgets","words":2051,"readTime":9,"modified":"2026-10-06T22:23:57.256Z","links":[{"id":"hardware-proxmark","hash":""},{"id":"outil-metasploit","hash":""},{"id":"outil-powershell-empire","hash":""},{"id":"tools","hash":""},{"id":"outil-usb-rubber-ducky","hash":""},{"id":"outil-bash-bunny","hash":""},{"id":"hardware-flipper-zero","hash":""},{"id":"hardware-rfid-et-nfc","hash":""},{"id":"hardware-rfid-lf-hid-em410x-indala-hitag","hash":""},{"id":"hardware-rfid-mifare-hf-13-56-mhz","hash":""},{"id":"protocole-usb","hash":""},{"id":"protocole-bluetooth","hash":""},{"id":"reverse-shells","hash":""},{"id":"outil-wifi-pineapple","hash":""}],"backlinks":["wireless-mitm-social-engineering","outil-bash-bunny","outil-duckuino","outil-hak5-payload-studio","outil-o-mg-cable","outil-usb-host-shield","outil-usb-rubber-ducky","tools"]},{"id":"outil-frida","path":"Cybersécurité Offensive/Outils/Outil - Frida.md","name":"Outil - Frida","title":"Outil - Frida","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Mobile & Reverse Engineering","tags":["cyber","outil","Mobile & Reverse Engineering"],"status":"publie","excerpt":"Frida est la boîte à outils d'instrumentation dynamique de référence : il injecte du JavaScript","words":2678,"readTime":12,"modified":"2026-10-06T22:23:57.260Z","links":[{"id":"tools","hash":""},{"id":"outil-objection","hash":""},{"id":"outil-jadx","hash":""},{"id":"outil-apktool","hash":""},{"id":"outil-mobsf","hash":""},{"id":"outil-burp-suite","hash":""},{"id":"insecure-deserialization","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"reverse-engineering-malware-analysis","hash":""},{"id":"hardware-dump-et-analyse-de-firmware","hash":""}],"backlinks":["reverse-engineering-malware-analysis","cheatsheets","glossaire","outil-apktool","outil-jadx","outil-mobsf","outil-objection","tools"]},{"id":"outil-ftk-imager","path":"Cybersécurité Offensive/Outils/Outil - FTK Imager.md","name":"Outil - FTK Imager","title":"Outil - FTK Imager","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Forensics, Threat Intel & Honeypots","tags":["cyber","outil","Forensics, Threat Intel & Honeypots"],"status":"publie","excerpt":"FTK Imager — Forensics, Threat Intel & Honeypots","words":3247,"readTime":15,"modified":"2026-10-06T22:23:57.252Z","links":[{"id":"tools","hash":""},{"id":"outil-autopsy","hash":""},{"id":"outil-volatility","hash":""},{"id":"outil-velociraptor","hash":""},{"id":"outil-misp","hash":""},{"id":"outil-yara","hash":""},{"id":"reverse-engineering-malware-analysis","hash":""}],"backlinks":["outil-autopsy","outil-sift-workstation","outil-volatility","tools"]},{"id":"outil-gau","path":"Cybersécurité Offensive/Outils/Outil - gau.md","name":"Outil - gau","title":"Outil - gau","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Reconnaissance & OSINT","tags":["cyber","outil","recon"],"status":"publie","excerpt":"gau — Agrégateur d'URLs multi-sources (Get All URLs)","words":2527,"readTime":11,"modified":"2026-10-06T22:23:57.372Z","links":[{"id":"tools","hash":""},{"id":"outil-waybackurls","hash":""},{"id":"outil-httpx","hash":""},{"id":"outil-katana","hash":""},{"id":"outil-nuclei","hash":""},{"id":"outil-ffuf","hash":""},{"id":"gobuster-brute-force-de-repertoires-dns-et-vhosts","hash":""},{"id":"reconnaissance","hash":""}],"backlinks":["reconnaissance","outil-httpx","outil-katana","outil-waybackurls","tools"]},{"id":"outil-gdb-peda","path":"Cybersécurité Offensive/Outils/Outil - gdb-peda.md","name":"Outil - gdb-peda","title":"Outil - gdb-peda","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"CTF & Développement","tags":["cyber","outil","ctf"],"status":"publie","excerpt":"GDB-PEDA — Le debugger GDB boosté pour l'exploitation","words":2651,"readTime":12,"modified":"2026-10-06T22:23:57.376Z","links":[{"id":"outil-pwntools","hash":""},{"id":"outil-ropgadget","hash":""},{"id":"tools","hash":""},{"id":"outil-ghidra","hash":""},{"id":"outil-radare2","hash":""},{"id":"cheatsheets","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-john-the-ripper","hash":""},{"id":"outil-cyberchef","hash":""}],"backlinks":["reverse-engineering-malware-analysis","cheatsheets","outil-cutter","outil-pwntools","outil-radare2","outil-ropgadget","outil-rsactftool","tools"]},{"id":"outil-ghidra","path":"Cybersécurité Offensive/Outils/Outil - Ghidra.md","name":"Outil - Ghidra","title":"Outil - Ghidra","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Mobile & Reverse Engineering","tags":["cyber","outil","Mobile & Reverse Engineering"],"status":"publie","excerpt":"Ghidra est le framework de reverse engineering open-source de la NSA : analyseur de binaires,","words":2355,"readTime":11,"modified":"2026-10-06T22:23:57.260Z","links":[{"id":"tools","hash":""},{"id":"outil-radare2","hash":""},{"id":"outil-cutter","hash":""},{"id":"outil-jadx","hash":""},{"id":"outil-pwntools","hash":""},{"id":"outil-ropgadget","hash":""},{"id":"outil-x64dbg","hash":""},{"id":"buffer-overflow","hash":""},{"id":"hardware-dump-et-analyse-de-firmware","hash":""},{"id":"reverse-engineering-malware-analysis","hash":""},{"id":"hardware-iot-pentesting","hash":""}],"backlinks":["reverse-engineering-malware-analysis","cheatsheets","glossaire","outil-binwalk","outil-blackarch","outil-cape","outil-cuckoo-sandbox","outil-cutter","outil-cyberchef","outil-dnspy","outil-exiftool","outil-flare-vm","outil-gdb-peda","outil-jadx","outil-kali-linux","outil-oletools","outil-pwntools","outil-radare2","outil-remnux","outil-ropgadget","outil-sift-workstation","outil-stegsolve","outil-unblob","outil-x64dbg","outil-zsteg","tools"]},{"id":"gobuster-brute-force-de-repertoires-dns-et-vhosts","path":"Cybersécurité Offensive/Outils/Outil - gobuster.md","name":"Outil - gobuster","title":"gobuster — Brute-force de répertoires, DNS et vhosts","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"outils","tags":[],"status":"publie","excerpt":"developpeur: OJ Reeves (@TheColonial) & Christian Mehlmauer (@firefart)","words":3928,"readTime":18,"modified":"2026-10-06T22:23:57.376Z","links":[{"id":"outil-httpx","hash":""},{"id":"tools","hash":""},{"id":"outil-ffuf","hash":""},{"id":"outil-feroxbuster","hash":""},{"id":"outil-dirsearch","hash":""},{"id":"outil-burp-suite","hash":""},{"id":"outil-nuclei","hash":""},{"id":"virtual-hosts","hash":""},{"id":"hidden-parameters","hash":""},{"id":"brute-force-rate-limit","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["reconnaissance","glossaire","outil-blackarch","outil-burp-extensions-bapp-store","outil-burp-suite","outil-caido","outil-cewl","outil-dirsearch","outil-feroxbuster","outil-ffuf","outil-gau","outil-kali-linux","outil-mitmproxy","outil-nikto","outil-rustscan","outil-seclists","outil-waybackurls","outil-wfuzz","outil-wpscan","tools"]},{"id":"outil-gophish","path":"Cybersécurité Offensive/Outils/Outil - GoPhish.md","name":"Outil - GoPhish","title":"Outil - GoPhish","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Social Engineering & Phishing","tags":["cyber","outil","social-engineering"],"status":"publie","excerpt":"GoPhish — La plateforme open source de gestion de campagnes de phishing","words":2772,"readTime":13,"modified":"2026-10-06T22:23:57.260Z","links":[{"id":"tools","hash":""},{"id":"outil-evilginx2","hash":""},{"id":"outil-set","hash":""},{"id":"outil-beef","hash":""},{"id":"outil-socialfish","hash":""},{"id":"outil-credsniper","hash":""},{"id":"outil-metasploit","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-king-phisher","hash":""}],"backlinks":["wireless-mitm-social-engineering","cheatsheets","outil-beef","outil-credsniper","outil-evilginx2","outil-king-phisher","outil-modlishka","outil-set","outil-socialfish","outil-weeman","tools"]},{"id":"outil-graylog","path":"Cybersécurité Offensive/Outils/Outil - Graylog.md","name":"Outil - Graylog","title":"Outil - Graylog","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"IDS / SIEM / EDR","tags":["cyber","outil","IDS / SIEM / EDR"],"status":"publie","excerpt":"Graylog est un remplaçant open source de Splunk : il ingère les logs (GELF, Syslog...),","words":3623,"readTime":16,"modified":"2026-10-06T22:23:57.264Z","links":[{"id":"outil-wazuh","hash":""},{"id":"tools","hash":""},{"id":"outil-splunk","hash":""},{"id":"outil-elastic","hash":""},{"id":"outil-suricata","hash":""},{"id":"outil-osquery","hash":""},{"id":"outil-velociraptor","hash":""},{"id":"outil-sigma","hash":""},{"id":"reverse-shells","hash":""},{"id":"pivoting-et-tunneling","hash":""},{"id":"llmnr-nbt-ns-poisoning","hash":""}],"backlinks":["outil-elastic","outil-osquery","outil-sigma","outil-snort","outil-splunk","outil-suricata","outil-zeek","tools"]},{"id":"outil-grype","path":"Cybersécurité Offensive/Outils/Outil - grype.md","name":"Outil - grype","title":"Outil - grype","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Cloud & Containers","tags":["cyber","outil","containers","devsecops"],"status":"publie","excerpt":"grype - Le scanner de vulnérabilités d'images (Anchore)","words":2028,"readTime":9,"modified":"2026-10-06T22:23:57.376Z","links":[{"id":"tools","hash":""},{"id":"outil-syft","hash":""},{"id":"outil-trivy","hash":""},{"id":"outil-kube-bench","hash":""},{"id":"outil-kubectl","hash":""}],"backlinks":["outil-syft","outil-trivy","tools"]},{"id":"outil-hak5-payload-studio","path":"Cybersécurité Offensive/Outils/Outil - Hak5 Payload Studio.md","name":"Outil - Hak5 Payload Studio","title":"Outil - Hak5 Payload Studio","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"USB / HID & Gadgets","tags":["cyber","outil","hardware","USB / HID & Gadgets"],"status":"publie","excerpt":"Hak5 Payload Studio — L'éditeur web des payloads Duckyscript","words":1904,"readTime":9,"modified":"2026-10-06T22:23:57.264Z","links":[{"id":"tools","hash":""},{"id":"outil-usb-rubber-ducky","hash":""},{"id":"outil-bash-bunny","hash":""},{"id":"outil-o-mg-cable","hash":""},{"id":"outil-flipper-zero-usb-radio","hash":""},{"id":"outil-metasploit","hash":""},{"id":"protocole-usb","hash":""},{"id":"outil-duckuino","hash":""}],"backlinks":["outil-usb-rubber-ducky","tools"]},{"id":"outil-hash-identifier","path":"Cybersécurité Offensive/Outils/Outil - hash-identifier.md","name":"Outil - hash-identifier","title":"Outil - hash-identifier","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Exploitation & Cracking","tags":["cyber","outil","Exploitation & Cracking"],"status":"publie","excerpt":"hash-identifier est le petit script interactif préinstallé sur Kali qui, en collant un hash, renvoie la liste des algorithmes probables — parfait pour un tri rapide avant de cracker.","words":2818,"readTime":13,"modified":"2026-10-06T22:23:57.376Z","links":[{"id":"outil-hashid","hash":""},{"id":"outil-name-that-hash","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-john-the-ripper","hash":""},{"id":"outil-seclists","hash":""},{"id":"tools","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"dump-ntds-dit","hash":""},{"id":"pass-the-hash","hash":""}],"backlinks":["outil-john-the-ripper","tools"]},{"id":"outil-hashcat","path":"Cybersécurité Offensive/Outils/Outil - hashcat.md","name":"Outil - hashcat","title":"Outil - hashcat","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Exploitation & Cracking","tags":["cyber","outil","Exploitation & Cracking"],"status":"publie","excerpt":"Hashcat = le cracker de hashes le plus rapide : GPU (CUDA/OpenCL) et CPU, 500+ modes ( -m ) et 7 types d'attaques ( -a ) sur les hashes d'Active Directory comme sur le Wi-Fi.","words":2854,"readTime":13,"modified":"2026-10-06T22:23:57.380Z","links":[{"id":"outil-hashid","hash":""},{"id":"outil-name-that-hash","hash":""},{"id":"outil-john-the-ripper","hash":""},{"id":"outil-seclists","hash":""},{"id":"outil-crunch","hash":""},{"id":"outil-oneruletorulethemall","hash":""},{"id":"outil-hcxdumptool","hash":""},{"id":"outil-responder","hash":""},{"id":"outil-rubeus","hash":""},{"id":"tools","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"kerberoasting","hash":""},{"id":"as-rep-roasting","hash":""},{"id":"llmnr-nbt-ns-poisoning","hash":""},{"id":"dump-ntds-dit","hash":""}],"backlinks":["reconnaissance","active-directory","password-cracking","cheatsheets","glossaire","outil-aircrack-ng","outil-binwalk","outil-blackarch","outil-cewl","outil-commando-vm","outil-crunch","outil-cupp","outil-cyberchef","outil-exiftool","outil-gdb-peda","outil-hash-identifier","outil-hashid","outil-hcxdumptool","outil-impacket","outil-john-the-ripper","outil-kali-linux","outil-kerbrute","outil-kwprocessor","outil-mentalist","outil-mimikatz","outil-mitm6","outil-name-that-hash","outil-oneruletorulethemall","outil-pwntools","outil-pydictor","outil-responder","outil-ropgadget","outil-rsactftool","outil-rsmangler","outil-rubeus","outil-seclists","outil-sqlmap","outil-stegsolve","outil-wifi-pineapple","outil-wifite","outil-zsteg","tools"]},{"id":"outil-hashid","path":"Cybersécurité Offensive/Outils/Outil - hashid.md","name":"Outil - hashid","title":"Outil - hashid","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Exploitation & Cracking","tags":["cyber","outil","Exploitation & Cracking"],"status":"publie","excerpt":"hashID est un script Python qui identifie le type d'un hash à partir de signatures (longueur, caractères) et affiche directement les modes hashcat et John the Ripper correspondants.","words":2912,"readTime":13,"modified":"2026-10-06T22:23:57.380Z","links":[{"id":"attaques-jwt","hash":""},{"id":"tools","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"outil-name-that-hash","hash":""},{"id":"outil-hashcat","hash":""}],"backlinks":["outil-hash-identifier","outil-hashcat","outil-john-the-ripper","outil-name-that-hash","outil-sqlmap","tools"]},{"id":"outil-havoc","path":"Cybersécurité Offensive/Outils/Outil - Havoc.md","name":"Outil - Havoc","title":"Outil - Havoc","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"C2 & Post-Exploitation","tags":["cyber","outil","C2 & Post-Exploitation"],"status":"publie","excerpt":"Havoc est un framework C2 moderne, gratuit et open-source, très proche de Cobalt Strike : teamserver + client GUI, implant « Demon » entièrement en C/C++ et modules de post-exploitation.","words":2702,"readTime":12,"modified":"2026-10-06T22:23:57.268Z","links":[{"id":"tools","hash":""},{"id":"pivoting-et-tunneling","hash":""},{"id":"privilege-escalation-windows","hash":""},{"id":"dll-hijacking","hash":""},{"id":"outil-metasploit","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-sliver","hash":""},{"id":"outil-covenant","hash":""},{"id":"outil-chisel","hash":""},{"id":"outil-mythic","hash":""}],"backlinks":["glossaire","outil-covenant","outil-mythic","outil-sliver","tools"]},{"id":"outil-hcxdumptool","path":"Cybersécurité Offensive/Outils/Outil - hcxdumptool.md","name":"Outil - hcxdumptool","title":"Outil - hcxdumptool","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Wireless & Réseau","tags":["cyber","outil","Wireless & Réseau"],"status":"publie","excerpt":"Outil de capture PMKID/handshake en mode moniteur, conçu pour produire des captures compatibles hashcat 22000 via hcxpcapngtool — l'alternative moderne et efficace à airodump-ng.","words":2484,"readTime":11,"modified":"2026-10-06T22:23:57.380Z","links":[{"id":"outil-hashcat","hash":""},{"id":"outil-john-the-ripper","hash":""},{"id":"outil-tshark","hash":""},{"id":"outil-wireshark","hash":""},{"id":"tools","hash":""},{"id":"outil-aircrack-ng","hash":""},{"id":"outil-wifite","hash":""},{"id":"outil-kismet","hash":""},{"id":"attaques-wifi-pmkid","hash":""},{"id":"attaques-wifi-wpa2-psk","hash":""},{"id":"techniques-password-cracking","hash":""}],"backlinks":["wireless-mitm-social-engineering","outil-aircrack-ng","outil-bettercap","outil-hashcat","outil-kismet","outil-mdk4","outil-reaver","outil-wifite","outil-wireshark","tools"]},{"id":"outil-hping3","path":"Cybersécurité Offensive/Outils/Outil - Hping3.md","name":"Outil - Hping3","title":"Outil - Hping3","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Réseau & Capture","tags":["cyber","outil","reseau","scan"],"status":"publie","excerpt":"hping3 assemble et envoie des paquets TCP/IP entièrement personnalisés (flags, adresses, ports, fragments) pour scanner, tester des pare-feu, déjouer des IDS et mesurer la réactivité d'un réseau.","words":2637,"readTime":12,"modified":"2026-10-06T22:23:57.268Z","links":[{"id":"tools","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-scapy","hash":""},{"id":"outil-tcpdump","hash":""},{"id":"outil-tshark","hash":""},{"id":"outil-suricata","hash":""},{"id":"outil-snort","hash":""},{"id":"outil-metasploit","hash":""}],"backlinks":["glossaire","outil-nload","outil-scapy","outil-tcpdump","outil-tshark","tools"]},{"id":"outil-httpx","path":"Cybersécurité Offensive/Outils/Outil - httpx.md","name":"Outil - httpx","title":"Outil - httpx","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Reconnaissance & OSINT","tags":["cyber","outil","recon"],"status":"publie","excerpt":"httpx — Probe HTTP massif de la surface d'attaque","words":2353,"readTime":11,"modified":"2026-10-06T22:23:57.384Z","links":[{"id":"tools","hash":""},{"id":"outil-subfinder","hash":""},{"id":"outil-dnsx","hash":""},{"id":"outil-naabu","hash":""},{"id":"outil-nuclei","hash":""},{"id":"outil-gau","hash":""},{"id":"outil-waybackurls","hash":""},{"id":"outil-katana","hash":""},{"id":"reconnaissance","hash":""}],"backlinks":["reconnaissance","outil-amass","outil-censys","outil-chaos","outil-dirsearch","outil-dnsx","outil-feroxbuster","outil-gau","gobuster-brute-force-de-repertoires-dns-et-vhosts","outil-katana","outil-masscan","outil-naabu","outil-nuclei","outil-recon-ng","outil-rustscan","outil-shodan-cli","outil-shodan","outil-subfinder","outil-theharvester","outil-waybackurls","tools"]},{"id":"outil-hydra","path":"Cybersécurité Offensive/Outils/Outil - hydra.md","name":"Outil - hydra","title":"Outil - hydra","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Exploitation & Cracking","tags":["cyber","outil","Exploitation & Cracking"],"status":"publie","excerpt":"Hydra = brute-force de login multi-protocoles : il teste des couples user/mot de passe sur SSH, FTP, HTTP(S), RDP, SMB et des dizaines d'autres services.","words":2761,"readTime":13,"modified":"2026-10-06T22:23:57.384Z","links":[{"id":"tools","hash":""},{"id":"password-spraying","hash":""},{"id":"privilege-escalation-linux","hash":""},{"id":"reverse-shells","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"outil-ncrack","hash":""},{"id":"outil-medusa","hash":""}],"backlinks":["password-cracking","cheatsheets","glossaire","outil-brutedum","outil-cewl","outil-crunch","outil-cupp","outil-kerbrute","outil-medusa","outil-ncrack","outil-nmap","outil-parrot-os","outil-patator","outil-seclists","outil-theharvester","tools"]},{"id":"outil-impacket","path":"Cybersécurité Offensive/Outils/Outil - Impacket.md","name":"Outil - Impacket","title":"Outil - Impacket","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Active Directory & Windows","tags":["cyber","outil","Active Directory & Windows"],"status":"publie","excerpt":"Impacket est un framework Python qui implémente les protocoles Windows (SMB, Kerberos, LDAP, MSRPC, MSSQL, WinRM) et fournit des scripts prêts à l'emploi pour la post-exploitation Active Directory.","words":2959,"readTime":13,"modified":"2026-10-06T22:23:57.268Z","links":[{"id":"outil-hashcat","hash":""},{"id":"outil-evil-winrm","hash":""},{"id":"outil-bloodhound","hash":""},{"id":"outil-rubeus","hash":""},{"id":"outil-mimikatz","hash":""},{"id":"outil-crackmapexec","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-mitm6","hash":""},{"id":"outil-responder","hash":""},{"id":"outil-impacket","hash":""}],"backlinks":["active-directory","cheatsheets","glossaire","outil-bloodhound","outil-commando-vm","outil-crackmapexec","outil-evil-winrm","outil-impacket","outil-kali-linux","outil-kerbrute","outil-medusa","outil-metasploit","outil-mimikatz","outil-mitm6","outil-responder","outil-rubeus","tools"]},{"id":"outil-jadx","path":"Cybersécurité Offensive/Outils/Outil - jadx.md","name":"Outil - jadx","title":"Outil - jadx","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Mobile & Reverse Engineering","tags":["cyber","outil","Mobile & Reverse Engineering"],"status":"publie","excerpt":"jadx est le décompilateur Java/Dalvik le plus pratique : il transforme le bytecode dex d'un APK","words":3281,"readTime":15,"modified":"2026-10-06T22:23:57.384Z","links":[{"id":"tools","hash":""},{"id":"outil-apktool","hash":""},{"id":"outil-frida","hash":""},{"id":"outil-objection","hash":""},{"id":"outil-mobsf","hash":""},{"id":"outil-ghidra","hash":""},{"id":"outil-cutter","hash":""},{"id":"insecure-deserialization","hash":""},{"id":"hardware-dump-et-analyse-de-firmware","hash":""}],"backlinks":["outil-apktool","outil-frida","outil-ghidra","outil-mobsf","outil-objection","tools"]},{"id":"outil-john-the-ripper","path":"Cybersécurité Offensive/Outils/Outil - John the Ripper.md","name":"Outil - John the Ripper","title":"Outil - John the Ripper","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Exploitation & Cracking","tags":["cyber","outil","Exploitation & Cracking"],"status":"publie","excerpt":"John the Ripper — Cracking CPU & audit de mots de passe","words":2286,"readTime":10,"modified":"2026-10-06T22:23:57.272Z","links":[{"id":"tools","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"kerberoasting","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-hash-identifier","hash":""},{"id":"outil-hashid","hash":""},{"id":"outil-name-that-hash","hash":""}],"backlinks":["reconnaissance","active-directory","wireless-mitm-social-engineering","password-cracking","cheatsheets","glossaire","outil-aircrack-ng","outil-binwalk","outil-blackarch","outil-cewl","outil-crunch","outil-cupp","outil-cyberchef","outil-exiftool","outil-gdb-peda","outil-hash-identifier","outil-hashcat","outil-hcxdumptool","outil-kali-linux","outil-kwprocessor","outil-mentalist","outil-name-that-hash","outil-oneruletorulethemall","outil-pwntools","outil-pydictor","outil-ropgadget","outil-rsactftool","outil-rsmangler","outil-seclists","outil-sqlmap","outil-stegsolve","outil-zsteg","tools"]},{"id":"outil-kali-linux","path":"Cybersécurité Offensive/Outils/Outil - Kali Linux.md","name":"Outil - Kali Linux","title":"Outil - Kali Linux","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Distributions & Lab","tags":["cyber","outil","distributions"],"status":"publie","excerpt":"Kali Linux — Le couteau suisse du pentest Debian","words":2893,"readTime":13,"modified":"2026-10-06T22:23:57.272Z","links":[{"id":"tools","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-metasploit","hash":""},{"id":"outil-burp-suite","hash":""},{"id":"outil-aircrack-ng","hash":""},{"id":"outil-wifite","hash":""},{"id":"outil-reaver","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-john-the-ripper","hash":""},{"id":"outil-impacket","hash":""},{"id":"outil-bloodhound","hash":""},{"id":"outil-mimikatz","hash":""},{"id":"outil-ghidra","hash":""},{"id":"outil-radare2","hash":""},{"id":"outil-volatility","hash":""},{"id":"outil-autopsy","hash":""},{"id":"outil-sqlmap","hash":""},{"id":"gobuster-brute-force-de-repertoires-dns-et-vhosts","hash":""},{"id":"outil-nikto","hash":""},{"id":"outil-theharvester","hash":""},{"id":"outil-maltego","hash":""},{"id":"outil-parrot-os","hash":""},{"id":"outil-blackarch","hash":""},{"id":"outil-commando-vm","hash":""},{"id":"outil-tails-os","hash":""}],"backlinks":["outil-binwalk","outil-blackarch","outil-commando-vm","outil-parrot-os","outil-tails-os","tools"]},{"id":"outil-katana","path":"Cybersécurité Offensive/Outils/Outil - katana.md","name":"Outil - katana","title":"Outil - katana","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Reconnaissance & OSINT","tags":["cyber","outil","recon"],"status":"publie","excerpt":"katana — Crawler web haute vitesse (dont crawl JavaScript)","words":2280,"readTime":10,"modified":"2026-10-06T22:23:57.384Z","links":[{"id":"tools","hash":""},{"id":"outil-httpx","hash":""},{"id":"outil-nuclei","hash":""},{"id":"outil-ffuf","hash":""},{"id":"outil-gau","hash":""},{"id":"outil-waybackurls","hash":""},{"id":"outil-amass","hash":""},{"id":"outil-subfinder","hash":""},{"id":"reconnaissance","hash":""}],"backlinks":["reconnaissance","outil-gau","outil-httpx","outil-waybackurls","tools"]},{"id":"outil-kerbrute","path":"Cybersécurité Offensive/Outils/Outil - Kerbrute.md","name":"Outil - Kerbrute","title":"Outil - Kerbrute","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Active Directory & Windows","tags":["cyber","outil","Active Directory & Windows"],"status":"publie","excerpt":"Kerbrute est un outil Go d' énumération et de brute-force Kerberos : il valide des noms d'utilisateurs du domaine ( sans aucun compte ) et teste des mots de passe, avec très peu de bruit .","words":2652,"readTime":12,"modified":"2026-10-06T22:23:57.272Z","links":[{"id":"outil-impacket","hash":""},{"id":"outil-rubeus","hash":""},{"id":"outil-evil-winrm","hash":""},{"id":"outil-bloodhound","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-hydra","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-kerbrute","hash":""}],"backlinks":["active-directory","outil-crackmapexec","outil-kerbrute","outil-medusa","outil-rubeus","tools"]},{"id":"outil-king-phisher","path":"Cybersécurité Offensive/Outils/Outil - King-Phisher.md","name":"Outil - King-Phisher","title":"Outil - King-Phisher","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Social Engineering & Phishing","tags":["cyber","outil","social-engineering"],"status":"publie","excerpt":"King-Phisher — Framework complet de phishing et de sensibilisation","words":2744,"readTime":12,"modified":"2026-10-06T22:23:57.276Z","links":[{"id":"outil-gophish","hash":""},{"id":"tools","hash":""},{"id":"outil-set","hash":""},{"id":"outil-beef","hash":""},{"id":"outil-socialfish","hash":""},{"id":"outil-credsniper","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-evilginx2","hash":""}],"backlinks":["wireless-mitm-social-engineering","outil-gophish","outil-set","tools"]},{"id":"outil-kismet","path":"Cybersécurité Offensive/Outils/Outil - Kismet.md","name":"Outil - Kismet","title":"Outil - Kismet","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Wireless & Réseau","tags":["cyber","outil","Wireless & Réseau"],"status":"publie","excerpt":"Détecteur passif de signaux WiFi, Bluetooth et SDR , avec interface web, logging pcap et cartographie des appareils — autant un outil de surveillance RF défensif qu'une base de renseignement pour l'offensif.","words":2902,"readTime":13,"modified":"2026-10-06T22:23:57.276Z","links":[{"id":"outil-wireshark","hash":""},{"id":"outil-tshark","hash":""},{"id":"tools","hash":""},{"id":"outil-aircrack-ng","hash":""},{"id":"outil-hcxdumptool","hash":""},{"id":"outil-wifite","hash":""},{"id":"outil-reaver","hash":""},{"id":"attaques-wifi-outils-recon","hash":""},{"id":"attaques-wifi-preparation-basiques","hash":""},{"id":"attaques-wifi-rogue-ap","hash":""}],"backlinks":["wireless-mitm-social-engineering","outil-aircrack-ng","outil-hcxdumptool","outil-mdk4","outil-o-mg-cable","tools"]},{"id":"outil-kube-bench","path":"Cybersécurité Offensive/Outils/Outil - kube-bench.md","name":"Outil - kube-bench","title":"Outil - kube-bench","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Cloud & Containers","tags":["cyber","outil","containers","kubernetes"],"status":"publie","excerpt":"kube-bench audite un cluster Kubernetes contre le CIS Kubernetes Benchmark : côté défensif il valide la posture, côté offensif il te liste les misconfigurations exactes à exploiter.","words":2545,"readTime":12,"modified":"2026-10-06T22:23:57.388Z","links":[{"id":"tools","hash":""},{"id":"outil-kubectl","hash":""},{"id":"outil-kube-hunter","hash":""},{"id":"outil-peirates","hash":""},{"id":"outil-trivy","hash":""},{"id":"outil-cloudfox","hash":""}],"backlinks":["outil-grype","outil-kube-hunter","outil-kubectl","outil-peirates","outil-syft","outil-trivy","tools"]},{"id":"outil-kube-hunter","path":"Cybersécurité Offensive/Outils/Outil - kube-hunter.md","name":"Outil - kube-hunter","title":"Outil - kube-hunter","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Cloud & Containers","tags":["cyber","outil","containers","kubernetes"],"status":"publie","excerpt":"kube-hunter - Le chasseur de vulnérabilités Kubernetes","words":2325,"readTime":11,"modified":"2026-10-06T22:23:57.388Z","links":[{"id":"tools","hash":""},{"id":"outil-kubectl","hash":""},{"id":"outil-kube-bench","hash":""},{"id":"outil-peirates","hash":""},{"id":"outil-trivy","hash":""},{"id":"outil-cloudfox","hash":""}],"backlinks":["reconnaissance","outil-kube-bench","outil-kubectl","outil-peirates","outil-trivy","tools"]},{"id":"outil-kubectl","path":"Cybersécurité Offensive/Outils/Outil - kubectl.md","name":"Outil - kubectl","title":"Outil - kubectl","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Cloud & Containers","tags":["cyber","outil","containers","kubernetes"],"status":"publie","excerpt":"La CLI de contrôle de Kubernetes : une fois un kubeconfig en main, elle te donne les clés du cluster pour énumérer, pivoter et exfiltrer.","words":2807,"readTime":13,"modified":"2026-10-06T22:23:57.388Z","links":[{"id":"tools","hash":""},{"id":"outil-kube-hunter","hash":""},{"id":"outil-kube-bench","hash":""},{"id":"outil-peirates","hash":""},{"id":"outil-cloudfox","hash":""}],"backlinks":["outil-cloudfox","outil-grype","outil-kube-bench","outil-kube-hunter","outil-peirates","outil-syft","outil-trivy","tools"]},{"id":"outil-kwprocessor","path":"Cybersécurité Offensive/Outils/Outil - kwprocessor.md","name":"Outil - kwprocessor","title":"Outil - kwprocessor","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Wordlists & Générateurs","tags":["cyber","outil","wordlists"],"status":"publie","excerpt":"kwprocessor — Mots de passe « marche clavier » (keyboard walk)","words":3265,"readTime":15,"modified":"2026-10-06T22:23:57.388Z","links":[{"id":"tools","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-aircrack-ng","hash":""},{"id":"outil-john-the-ripper","hash":""},{"id":"outil-oneruletorulethemall","hash":""},{"id":"outil-crunch","hash":""},{"id":"outil-cupp","hash":""},{"id":"outil-seclists","hash":""},{"id":"outil-rsmangler","hash":""},{"id":"attaques-wifi-wpa2-et-pmkid","hash":""},{"id":"attaques-wifi-wpa2-psk","hash":""},{"id":"attaques-wifi-pmkid","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"outil-mentalist","hash":""},{"id":"outil-pydictor","hash":""}],"backlinks":["password-cracking","outil-cewl","outil-crunch","outil-mentalist","outil-oneruletorulethemall","outil-pydictor","tools"]},{"id":"outil-ligolo-ng","path":"Cybersécurité Offensive/Outils/Outil - Ligolo-ng.md","name":"Outil - Ligolo-ng","title":"Outil - Ligolo-ng","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"C2 & Post-Exploitation","tags":["cyber","outil","C2 & Post-Exploitation"],"status":"publie","excerpt":"Ligolo-ng est un outil de tunneling et de pivoting « reverse » : un agent tourne sur la machine compromise, un proxy sur l'attaquant, et une interface TUN crée un accès réseau transparent au réseau interne.","words":2450,"readTime":11,"modified":"2026-10-06T22:23:57.276Z","links":[{"id":"tools","hash":""},{"id":"pivoting-et-tunneling","hash":""},{"id":"reverse-shells","hash":""},{"id":"outil-chisel","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-metasploit","hash":""},{"id":"outil-covenant","hash":""},{"id":"outil-socat","hash":""},{"id":"outil-netcat","hash":""}],"backlinks":["exploitation-reseau","active-directory","post-exploitation","cheatsheets","glossaire","outil-chisel","outil-metasploit","outil-sliver","tools"]},{"id":"outil-linpeas","path":"Cybersécurité Offensive/Outils/Outil - LinPeas.md","name":"Outil - LinPeas","title":"Outil - LinPeas","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Exploitation & Cracking","tags":["cyber","outil","Exploitation & Cracking"],"status":"publie","excerpt":"LinPEAS (Linux Privilege Escalation Awesome Script) est le script d'énumération de référence pour l'escalade de privilèges Linux : il agglomère en un passage tous les checkers classiques et classe les résultats par ur…","words":2378,"readTime":11,"modified":"2026-10-06T22:23:57.280Z","links":[{"id":"tools","hash":""},{"id":"privilege-escalation-linux","hash":""},{"id":"privilege-escalation-windows","hash":""},{"id":"outil-metasploit","hash":""}],"backlinks":["glossaire","tools"]},{"id":"outil-maltego","path":"Cybersécurité Offensive/Outils/Outil - Maltego.md","name":"Outil - Maltego","title":"Outil - Maltego","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Reconnaissance & OSINT","tags":["cyber","outil","Reconnaissance & OSINT"],"status":"publie","excerpt":"Maltego est un outil de « link analysis » qui visualise sous forme de graphe les relations entre entités (personnes, domaines, emails, IP) lors d'une recon OSINT.","words":2567,"readTime":12,"modified":"2026-10-06T22:23:57.284Z","links":[{"id":"tools","hash":""},{"id":"outil-amass","hash":""},{"id":"outil-subfinder","hash":""},{"id":"outil-censys","hash":""},{"id":"outil-shodan-cli","hash":""},{"id":"outil-theharvester","hash":""},{"id":"outil-spiderfoot","hash":""},{"id":"reconnaissance","hash":""}],"backlinks":["reconnaissance","scan-enumeration","glossaire","outil-cewl","outil-kali-linux","outil-recon-ng","outil-shodan-cli","outil-shodan","outil-spiderfoot","tools"]},{"id":"outil-masscan","path":"Cybersécurité Offensive/Outils/Outil - Masscan.md","name":"Outil - Masscan","title":"Outil - Masscan","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Reconnaissance & OSINT","tags":["cyber","outil","Reconnaissance & OSINT"],"status":"publie","excerpt":"Masscan — Scan de ports ultrarapide, complément de Nmap","words":2623,"readTime":12,"modified":"2026-10-06T22:23:57.284Z","links":[{"id":"tools","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-naabu","hash":""},{"id":"outil-httpx","hash":""},{"id":"outil-nuclei","hash":""},{"id":"reconnaissance","hash":""}],"backlinks":["reconnaissance","scan-enumeration","glossaire","outil-naabu","outil-nmap","outil-rustscan","outil-shodan-cli","outil-shodan","tools"]},{"id":"outil-mdk4","path":"Cybersécurité Offensive/Outils/Outil - mdk4.md","name":"Outil - mdk4","title":"Outil - mdk4","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Wireless & Réseau","tags":["cyber","outil","Wireless & Réseau"],"status":"publie","excerpt":"mdk4 — DoS et fuzzing Wi-Fi (deauth, beacon flood, auth flood)","words":2793,"readTime":13,"modified":"2026-10-06T22:23:57.392Z","links":[{"id":"tools","hash":""},{"id":"outil-aircrack-ng","hash":""},{"id":"outil-hcxdumptool","hash":""},{"id":"outil-kismet","hash":""},{"id":"outil-wireshark","hash":""},{"id":"outil-tshark","hash":""},{"id":"attaques-wifi-preparation-basiques","hash":""},{"id":"attaques-wifi-wpa2-psk","hash":""},{"id":"attaques-wifi-outils-recon","hash":""}],"backlinks":["wireless-mitm-social-engineering","glossaire","outil-aircrack-ng","outil-wifiphisher","tools"]},{"id":"outil-medusa","path":"Cybersécurité Offensive/Outils/Outil - Medusa.md","name":"Outil - Medusa","title":"Outil - Medusa","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Exploitation & Cracking","tags":["cyber","outil","Exploitation & Cracking"],"status":"publie","excerpt":"Medusa — Brute-force en ligne massivement parallèle","words":3099,"readTime":14,"modified":"2026-10-06T22:23:57.284Z","links":[{"id":"outil-hydra","hash":""},{"id":"outil-nmap","hash":""},{"id":"pivoting-et-tunneling","hash":""},{"id":"outil-evil-winrm","hash":""},{"id":"outil-crackmapexec","hash":""},{"id":"tools","hash":""},{"id":"outil-ncrack","hash":""},{"id":"outil-patator","hash":""},{"id":"outil-impacket","hash":""},{"id":"outil-responder","hash":""},{"id":"outil-kerbrute","hash":""},{"id":"password-spraying","hash":""}],"backlinks":["password-cracking","glossaire","outil-brutedum","outil-cewl","outil-crunch","outil-cupp","outil-hydra","outil-ncrack","outil-patator","outil-seclists","tools"]},{"id":"outil-mentalist","path":"Cybersécurité Offensive/Outils/Outil - Mentalist.md","name":"Outil - Mentalist","title":"Outil - Mentalist","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Wordlists & Générateurs","tags":["cyber","outil","wordlists"],"status":"publie","excerpt":"Mentalist — Génération graphique de wordlists par mutation","words":3094,"readTime":14,"modified":"2026-10-06T22:23:57.288Z","links":[{"id":"tools","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-john-the-ripper","hash":""},{"id":"outil-cewl","hash":""},{"id":"outil-cupp","hash":""},{"id":"outil-rsmangler","hash":""},{"id":"outil-pydictor","hash":""},{"id":"outil-seclists","hash":""},{"id":"outil-oneruletorulethemall","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"password-spraying","hash":""},{"id":"outil-crunch","hash":""},{"id":"outil-kwprocessor","hash":""}],"backlinks":["password-cracking","glossaire","outil-cewl","outil-crunch","outil-cupp","outil-kwprocessor","outil-oneruletorulethemall","outil-pydictor","outil-rsmangler","tools"]},{"id":"outil-metasploit","path":"Cybersécurité Offensive/Outils/Outil - Metasploit.md","name":"Outil - Metasploit","title":"Outil - Metasploit","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"C2 & Post-Exploitation","tags":["cyber","outil","C2 & Post-Exploitation"],"status":"publie","excerpt":"Metasploit — Framework d'exploitation et post-exploitation","words":2795,"readTime":13,"modified":"2026-10-06T22:23:57.288Z","links":[{"id":"tools","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-impacket","hash":""},{"id":"outil-mimikatz","hash":""},{"id":"outil-evil-winrm","hash":""},{"id":"outil-searchsploit","hash":""},{"id":"outil-ligolo-ng","hash":""},{"id":"outil-chisel","hash":""},{"id":"outil-covenant","hash":""},{"id":"outil-sliver","hash":""},{"id":"reverse-shells","hash":""},{"id":"pivoting-et-tunneling","hash":""},{"id":"cve-exploits","hash":""}],"backlinks":["exploitation-reseau","active-directory","post-exploitation","reverse-engineering-malware-analysis","cheatsheets","glossaire","outil-bash-bunny","outil-beef","outil-bettercap","outil-blackarch","outil-chisel","outil-commando-vm","outil-duckuino","outil-flipper-zero-usb-radio","outil-gophish","outil-hak5-payload-studio","outil-havoc","outil-hping3","outil-kali-linux","outil-ligolo-ng","outil-linpeas","outil-ncat","outil-netcat","outil-nmap","outil-p4wnp1-a-l-o-a","outil-parrot-os","outil-rustscan","outil-searchsploit","outil-set","outil-sliver","outil-socat","outil-sqlmap","outil-tails-os","outil-usb-rubber-ducky","outil-wifi-pineapple","tools"]},{"id":"outil-mimikatz","path":"Cybersécurité Offensive/Outils/Outil - Mimikatz.md","name":"Outil - Mimikatz","title":"Outil - Mimikatz","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Active Directory & Windows","tags":["cyber","outil","Active Directory & Windows"],"status":"publie","excerpt":"Mimikatz — Extraction d'identifiants Windows et AD","words":2655,"readTime":12,"modified":"2026-10-06T22:23:57.288Z","links":[{"id":"outil-impacket","hash":""},{"id":"outil-evil-winrm","hash":""},{"id":"outil-bloodhound","hash":""},{"id":"outil-rubeus","hash":""},{"id":"outil-crackmapexec","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-mimikatz","hash":""}],"backlinks":["active-directory","post-exploitation","cheatsheets","glossaire","outil-bloodhound","outil-commando-vm","outil-covenant","outil-crackmapexec","outil-evil-winrm","outil-impacket","outil-kali-linux","outil-metasploit","outil-mimikatz","outil-powershell-empire","outil-rubeus","outil-sliver","tools"]},{"id":"outil-misp","path":"Cybersécurité Offensive/Outils/Outil - MISP.md","name":"Outil - MISP","title":"Outil - MISP","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Forensics, Threat Intel & Honeypots","tags":["cyber","outil","Forensics, Threat Intel & Honeypots"],"status":"publie","excerpt":"MISP — Plateforme de partage de Threat Intelligence","words":2839,"readTime":13,"modified":"2026-10-06T22:23:57.280Z","links":[{"id":"tools","hash":""},{"id":"outil-opencti","hash":""},{"id":"outil-yara","hash":""},{"id":"outil-cowrie","hash":""},{"id":"outil-canarytokens","hash":""},{"id":"outil-elastic","hash":""},{"id":"outil-suricata","hash":""},{"id":"outil-velociraptor","hash":""},{"id":"reverse-engineering-malware-analysis","hash":""}],"backlinks":["outil-autopsy","outil-canarytokens","outil-cape","outil-cowrie","outil-cuckoo-sandbox","outil-fakenet-ng","outil-ftk-imager","outil-oletools","outil-opencti","outil-volatility","outil-wazuh","outil-yara","outil-zeek","tools"]},{"id":"outil-mitm6","path":"Cybersécurité Offensive/Outils/Outil - mitm6.md","name":"Outil - mitm6","title":"Outil - mitm6","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Active Directory & Windows","tags":["cyber","outil","Active Directory & Windows"],"status":"publie","excerpt":"mitm6 — Empoisonnement IPv6 / DHCPv6 pour NTLM Relay","words":2573,"readTime":12,"modified":"2026-10-06T22:23:57.392Z","links":[{"id":"outil-impacket","hash":""},{"id":"outil-responder","hash":""},{"id":"outil-crackmapexec","hash":""},{"id":"outil-bloodhound","hash":""},{"id":"outil-evil-winrm","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-nmap","hash":""},{"id":"coerce-printerbug-et-petitpotam","hash":""},{"id":"acl-abuse-ad","hash":""},{"id":"outil-mitm6","hash":""}],"backlinks":["wireless-mitm-social-engineering","cheatsheets","glossaire","outil-commando-vm","outil-impacket","outil-mitm6","outil-responder","tools"]},{"id":"outil-mitmproxy","path":"Cybersécurité Offensive/Outils/Outil - mitmproxy.md","name":"Outil - mitmproxy","title":"Outil - mitmproxy","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Scan Web & Fuzzing","tags":["cyber","outil","Scan Web & Fuzzing"],"status":"publie","excerpt":"mitmproxy — Proxy d'interception TLS scriptable en Python","words":3557,"readTime":16,"modified":"2026-10-06T22:23:57.392Z","links":[{"id":"tools","hash":""},{"id":"outil-burp-suite","hash":""},{"id":"outil-owasp-zap","hash":""},{"id":"idor","hash":""},{"id":"ssrf","hash":""},{"id":"http-request-smuggling","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"gobuster-brute-force-de-repertoires-dns-et-vhosts","hash":""},{"id":"outil-ffuf","hash":""}],"backlinks":["wireless-mitm-social-engineering","outil-beef","outil-burp-extensions-bapp-store","outil-burp-suite","outil-caido","outil-owasp-zap","outil-weeman","tools"]},{"id":"outil-mobsf","path":"Cybersécurité Offensive/Outils/Outil - MobSF.md","name":"Outil - MobSF","title":"Outil - MobSF","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Mobile & Reverse Engineering","tags":["cyber","outil","Mobile & Reverse Engineering"],"status":"publie","excerpt":"MobSF — Analyse de sécurité mobile (statique + dynamique)","words":2565,"readTime":12,"modified":"2026-10-06T22:23:57.292Z","links":[{"id":"tools","hash":""},{"id":"outil-apktool","hash":""},{"id":"outil-jadx","hash":""},{"id":"outil-frida","hash":""},{"id":"outil-objection","hash":""},{"id":"outil-burp-suite","hash":""},{"id":"insecure-deserialization","hash":""},{"id":"insecure-source-code-management","hash":""}],"backlinks":["outil-apktool","outil-frida","outil-jadx","outil-objection","tools"]},{"id":"outil-modlishka","path":"Cybersécurité Offensive/Outils/Outil - Modlishka.md","name":"Outil - Modlishka","title":"Outil - Modlishka","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Social Engineering & Phishing","tags":["cyber","outil","social-engineering"],"status":"publie","excerpt":"Modlishka — Reverse proxy de phishing avec MFA bypass à grande échelle","words":2529,"readTime":11,"modified":"2026-10-06T22:23:57.292Z","links":[{"id":"outil-evilginx2","hash":""},{"id":"tools","hash":""},{"id":"outil-gophish","hash":""},{"id":"outil-set","hash":""},{"id":"outil-credsniper","hash":""},{"id":"outil-socialfish","hash":""},{"id":"outil-beef","hash":""},{"id":"outil-nmap","hash":""}],"backlinks":["wireless-mitm-social-engineering","outil-beef","outil-credsniper","outil-evilginx2","outil-set","outil-socialfish","outil-weeman","tools"]},{"id":"outil-mythic","path":"Cybersécurité Offensive/Outils/Outil - Mythic.md","name":"Outil - Mythic","title":"Outil - Mythic","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"C2 & Post-Exploitation","tags":["cyber","outil","C2 & Post-Exploitation"],"status":"publie","excerpt":"Mythic — Framework C2 web, modulaire et cross-platform","words":2490,"readTime":11,"modified":"2026-10-06T22:23:57.292Z","links":[{"id":"tools","hash":""},{"id":"pivoting-et-tunneling","hash":""},{"id":"reverse-shells","hash":""},{"id":"privilege-escalation-windows","hash":""},{"id":"kerberoasting","hash":""},{"id":"pass-the-hash","hash":""},{"id":"outil-sliver","hash":""},{"id":"outil-covenant","hash":""},{"id":"outil-havoc","hash":""},{"id":"outil-powershell-empire","hash":""},{"id":"outil-chisel","hash":""},{"id":"privilege-escalation-linux","hash":""}],"backlinks":["post-exploitation","glossaire","outil-covenant","outil-havoc","outil-sliver","tools"]},{"id":"outil-naabu","path":"Cybersécurité Offensive/Outils/Outil - naabu.md","name":"Outil - naabu","title":"Outil - naabu","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Reconnaissance & OSINT","tags":["cyber","outil","recon"],"status":"publie","excerpt":"naabu — Scanner de ports rapide intégré au pipeline","words":3358,"readTime":15,"modified":"2026-10-06T22:23:57.392Z","links":[{"id":"tools","hash":""},{"id":"outil-subfinder","hash":""},{"id":"outil-dnsx","hash":""},{"id":"outil-httpx","hash":""},{"id":"outil-nuclei","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-rustscan","hash":""},{"id":"outil-masscan","hash":""}],"backlinks":["reconnaissance","glossaire","outil-amass","outil-censys","outil-dnsx","outil-httpx","outil-masscan","outil-nmap","outil-rustscan","outil-shodan-cli","outil-spiderfoot","outil-subfinder","tools"]},{"id":"outil-name-that-hash","path":"Cybersécurité Offensive/Outils/Outil - Name-That-Hash.md","name":"Outil - Name-That-Hash","title":"Outil - Name-That-Hash","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Exploitation & Cracking","tags":["cyber","outil","Exploitation & Cracking"],"status":"publie","excerpt":"Name-That-Hash — Identification du type de hash","words":3583,"readTime":16,"modified":"2026-10-06T22:23:57.292Z","links":[{"id":"tools","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-john-the-ripper","hash":""},{"id":"outil-hashid","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"outil-brutedum","hash":""}],"backlinks":["glossaire","outil-hash-identifier","outil-hashcat","outil-hashid","outil-john-the-ripper","outil-sqlmap","tools"]},{"id":"outil-ncat","path":"Cybersécurité Offensive/Outils/Outil - Ncat.md","name":"Outil - Ncat","title":"Outil - Ncat","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Divers","tags":["cyber","outil","reseau","shell"],"status":"publie","excerpt":"Ncat, l'implémentation de Nmap, reprend netcat et y ajoute le chiffrement TLS, les connexions par proxy, le mode broker, les listes de contrôle d'accès et l'exécution de commandes.","words":2798,"readTime":13,"modified":"2026-10-06T22:23:57.296Z","links":[{"id":"tools","hash":""},{"id":"outil-netcat","hash":""},{"id":"outil-socat","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-metasploit","hash":""},{"id":"outil-tshark","hash":""},{"id":"outil-tcpdump","hash":""}],"backlinks":["reconnaissance","post-exploitation","glossaire","outil-chisel","outil-netcat","outil-socat","tools"]},{"id":"outil-ncrack","path":"Cybersécurité Offensive/Outils/Outil - ncrack.md","name":"Outil - ncrack","title":"Outil - ncrack","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Exploitation & Cracking","tags":["cyber","outil","Exploitation & Cracking"],"status":"publie","excerpt":"ncrack est l'outil de cracking réseau haute vitesse de la suite Nmap : il brute-force les authentifications de services (SSH, RDP, HTTP, SMB, FTP, VNC...) en exploitant des connexions concurrentes par hôte.","words":3775,"readTime":17,"modified":"2026-10-06T22:23:57.396Z","links":[{"id":"tools","hash":""},{"id":"outil-hydra","hash":""},{"id":"outil-medusa","hash":""},{"id":"outil-patator","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-crackmapexec","hash":""},{"id":"outil-evil-winrm","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"password-spraying","hash":""}],"backlinks":["password-cracking","glossaire","outil-brutedum","outil-cewl","outil-crunch","outil-hydra","outil-medusa","outil-patator","outil-seclists","tools"]},{"id":"outil-netcat","path":"Cybersécurité Offensive/Outils/Outil - Netcat.md","name":"Outil - Netcat","title":"Outil - Netcat","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Divers","tags":["cyber","outil","reseau","shell"],"status":"publie","excerpt":"Netcat ( nc ) est l'outil de référence pour toute opération TCP/UDP en ligne de commande : connexions, écoute, transferts de fichiers, scans et surtout shells inversés.","words":2697,"readTime":12,"modified":"2026-10-06T22:23:57.296Z","links":[{"id":"tools","hash":""},{"id":"outil-ncat","hash":""},{"id":"outil-socat","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-tcpdump","hash":""},{"id":"outil-tshark","hash":""},{"id":"outil-metasploit","hash":""}],"backlinks":["reconnaissance","exploitation-reseau","active-directory","post-exploitation","cheatsheets","glossaire","outil-bash-bunny","outil-ligolo-ng","outil-ncat","outil-socat","tools"]},{"id":"outil-nikto","path":"Cybersécurité Offensive/Outils/Outil - nikto.md","name":"Outil - nikto","title":"Outil - nikto","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Scan Web & Fuzzing","tags":["cyber","outil","Scan Web & Fuzzing"],"status":"publie","excerpt":"nikto est un scanner de serveurs web ancien mais efficace pour détecter fichiers dangereux, versions obsolètes et misconfigurations.","words":3162,"readTime":14,"modified":"2026-10-06T22:23:57.396Z","links":[{"id":"tools","hash":""},{"id":"outil-nuclei","hash":""},{"id":"gobuster-brute-force-de-repertoires-dns-et-vhosts","hash":""},{"id":"outil-ffuf","hash":""},{"id":"outil-nmap","hash":""},{"id":"path-traversal","hash":""},{"id":"virtual-hosts","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["reconnaissance","scan-enumeration","glossaire","outil-kali-linux","outil-nmap","outil-nuclei","outil-owasp-zap","tools"]},{"id":"outil-nload","path":"Cybersécurité Offensive/Outils/Outil - nload.md","name":"Outil - nload","title":"Outil - nload","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Réseau & Capture","tags":["cyber","outil","reseau","monitoring"],"status":"publie","excerpt":"nload est un moniteur console en temps réel du trafic réseau, qui affiche sous forme de graphiques ASCII les flux entrant et sortant de chaque interface.","words":2213,"readTime":10,"modified":"2026-10-06T22:23:57.396Z","links":[{"id":"outil-tcpdump","hash":""},{"id":"outil-tshark","hash":""},{"id":"tools","hash":""},{"id":"outil-wireshark","hash":""},{"id":"outil-hping3","hash":""},{"id":"outil-scapy","hash":""},{"id":"outil-tcpreplay","hash":""},{"id":"outil-nmap","hash":""}],"backlinks":["tools"]},{"id":"outil-nmap","path":"Cybersécurité Offensive/Outils/Outil - Nmap.md","name":"Outil - Nmap","title":"Outil - Nmap","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Reconnaissance & OSINT","tags":["cyber","outil","Reconnaissance & OSINT"],"status":"publie","excerpt":"Nmap (« Network Mapper ») est le scanner de ports de référence pour cartographier un réseau, identifier services, versions, OS et déclencher des scripts d'énumération (NSE).","words":2848,"readTime":13,"modified":"2026-10-06T22:23:57.300Z","links":[{"id":"tools","hash":""},{"id":"outil-masscan","hash":""},{"id":"outil-rustscan","hash":""},{"id":"outil-naabu","hash":""},{"id":"outil-metasploit","hash":""},{"id":"outil-tshark","hash":""},{"id":"outil-tcpdump","hash":""},{"id":"outil-nikto","hash":""},{"id":"outil-nuclei","hash":""},{"id":"outil-hydra","hash":""},{"id":"scan-enumeration","hash":""},{"id":"reconnaissance","hash":""},{"id":"virtual-hosts","hash":""}],"backlinks":["reconnaissance","scan-enumeration","exploitation-reseau","active-directory","cheatsheets","glossaire","outil-amass","outil-beef","outil-blackarch","outil-bloodhound","outil-brutedum","outil-chisel","outil-covenant","outil-evil-winrm","outil-evilginx2","outil-gophish","outil-havoc","outil-hping3","outil-impacket","outil-kali-linux","outil-kerbrute","outil-king-phisher","outil-ligolo-ng","outil-masscan","outil-medusa","outil-metasploit","outil-mitm6","outil-modlishka","outil-naabu","outil-ncat","outil-ncrack","outil-netcat","outil-nikto","outil-nload","outil-nuclei","outil-parrot-os","outil-recon-ng","outil-responder","outil-rustscan","outil-scapy","outil-searchsploit","outil-set","outil-shodan-cli","outil-shodan","outil-socat","outil-socialfish","outil-spiderfoot","outil-sqlmap","outil-tails-os","outil-tcpreplay","outil-theharvester","outil-tshark","outil-weeman","outil-xsstrike","tools"]},{"id":"outil-nuclei","path":"Cybersécurité Offensive/Outils/Outil - nuclei.md","name":"Outil - nuclei","title":"Outil - nuclei","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Scan Web & Fuzzing","tags":["cyber","outil","Scan Web & Fuzzing"],"status":"publie","excerpt":"nuclei — Scanner de vulnérabilités piloté par templates (ProjectDiscovery)","words":2631,"readTime":12,"modified":"2026-10-06T22:23:57.396Z","links":[{"id":"tools","hash":""},{"id":"outil-httpx","hash":""},{"id":"outil-subfinder","hash":""},{"id":"outil-nikto","hash":""},{"id":"outil-nmap","hash":""},{"id":"path-traversal","hash":""},{"id":"ssrf","hash":""},{"id":"xxe","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["reconnaissance","scan-enumeration","cheatsheets","glossaire","outil-amass","outil-burp-extensions-bapp-store","outil-burp-suite","outil-caido","outil-censys","outil-chaos","outil-dirsearch","outil-dnsx","outil-feroxbuster","outil-ffuf","outil-gau","gobuster-brute-force-de-repertoires-dns-et-vhosts","outil-httpx","outil-katana","outil-masscan","outil-naabu","outil-nikto","outil-nmap","outil-owasp-zap","outil-searchsploit","outil-shodan-cli","outil-shodan","outil-subfinder","outil-waybackurls","outil-wpscan","outil-xsstrike","tools"]},{"id":"outil-o-mg-cable","path":"Cybersécurité Offensive/Outils/Outil - O.MG Cable.md","name":"Outil - O.MG Cable","title":"Outil - O.MG Cable","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"USB / HID & Gadgets","tags":["cyber","outil","hardware","USB / HID & Gadgets"],"status":"publie","excerpt":"O.MG Cable — Le câble espion discret (WiFi + HID)","words":2542,"readTime":12,"modified":"2026-10-06T22:23:57.300Z","links":[{"id":"tools","hash":""},{"id":"outil-bash-bunny","hash":""},{"id":"outil-usb-rubber-ducky","hash":""},{"id":"outil-flipper-zero-usb-radio","hash":""},{"id":"outil-wifi-pineapple","hash":""},{"id":"outil-kismet","hash":""},{"id":"outil-wifite","hash":""},{"id":"protocole-usb","hash":""},{"id":"attaques-wifi-rogue-ap","hash":""},{"id":"reverse-shells","hash":""}],"backlinks":["wireless-mitm-social-engineering","glossaire","outil-bash-bunny","outil-duckuino","outil-hak5-payload-studio","outil-p4wnp1-a-l-o-a","outil-usb-rubber-ducky","tools"]},{"id":"outil-objection","path":"Cybersécurité Offensive/Outils/Outil - objection.md","name":"Outil - objection","title":"Outil - objection","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Mobile & Reverse Engineering","tags":["cyber","outil","Mobile & Reverse Engineering"],"status":"publie","excerpt":"objection est une surcouche interactive sur Frida qui automatise le hacking runtime mobile :","words":2637,"readTime":12,"modified":"2026-10-06T22:23:57.400Z","links":[{"id":"tools","hash":""},{"id":"outil-frida","hash":""},{"id":"outil-mobsf","hash":""},{"id":"outil-apktool","hash":""},{"id":"outil-jadx","hash":""},{"id":"outil-burp-suite","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"insecure-deserialization","hash":""}],"backlinks":["glossaire","outil-apktool","outil-frida","outil-jadx","outil-mobsf","tools"]},{"id":"outil-oletools","path":"Cybersécurité Offensive/Outils/Outil - oletools.md","name":"Outil - oletools","title":"Outil - oletools","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Malware & Sandbox","tags":["cyber","outil","malware"],"status":"publie","excerpt":"oletools — Analyse des documents Office malveillants","words":2976,"readTime":14,"modified":"2026-10-06T22:23:57.400Z","links":[{"id":"tools","hash":""},{"id":"outil-remnux","hash":""},{"id":"outil-cape","hash":""},{"id":"outil-cuckoo-sandbox","hash":""},{"id":"outil-yara","hash":""},{"id":"outil-misp","hash":""},{"id":"outil-flare-vm","hash":""},{"id":"outil-ghidra","hash":""},{"id":"reverse-engineering-malware-analysis","hash":""}],"backlinks":["reverse-engineering-malware-analysis","outil-flare-vm","outil-remnux","outil-sift-workstation","tools"]},{"id":"outil-oneruletorulethemall","path":"Cybersécurité Offensive/Outils/Outil - OneRuleToRuleThemAll.md","name":"Outil - OneRuleToRuleThemAll","title":"Outil - OneRuleToRuleThemAll","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Wordlists & Générateurs","tags":["cyber","outil","wordlists"],"status":"publie","excerpt":"OneRuleToRuleThemAll — La règle hashcat ultime","words":2997,"readTime":14,"modified":"2026-10-06T22:23:57.304Z","links":[{"id":"tools","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-john-the-ripper","hash":""},{"id":"outil-cewl","hash":""},{"id":"outil-cupp","hash":""},{"id":"outil-mentalist","hash":""},{"id":"outil-kwprocessor","hash":""},{"id":"outil-crunch","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"password-spraying","hash":""},{"id":"kerberoasting","hash":""},{"id":"dump-ntds-dit","hash":""}],"backlinks":["password-cracking","outil-cewl","outil-crunch","outil-hashcat","outil-kwprocessor","outil-mentalist","outil-rsmangler","outil-seclists","tools"]},{"id":"outil-opencti","path":"Cybersécurité Offensive/Outils/Outil - OpenCTI.md","name":"Outil - OpenCTI","title":"Outil - OpenCTI","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Forensics, Threat Intel & Honeypots","tags":["cyber","outil","Forensics, Threat Intel & Honeypots"],"status":"publie","excerpt":"OpenCTI — Forensics, Threat Intel & Honeypots","words":2746,"readTime":12,"modified":"2026-10-06T22:23:57.304Z","links":[{"id":"tools","hash":""},{"id":"outil-misp","hash":""},{"id":"outil-sigma","hash":""},{"id":"outil-cowrie","hash":""},{"id":"outil-canarytokens","hash":""},{"id":"outil-yara","hash":""},{"id":"glossaire","hash":""}],"backlinks":["outil-misp","outil-sigma","tools"]},{"id":"outil-osquery","path":"Cybersécurité Offensive/Outils/Outil - osquery.md","name":"Outil - osquery","title":"Outil - osquery","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"IDS / SIEM / EDR","tags":["cyber","outil","IDS / SIEM / EDR"],"status":"publie","excerpt":"osquery transforme le système (processus, fichiers, réseau, registre...) en base de données","words":3392,"readTime":15,"modified":"2026-10-06T22:23:57.400Z","links":[{"id":"tools","hash":""},{"id":"outil-elastic","hash":""},{"id":"outil-graylog","hash":""},{"id":"outil-splunk","hash":""},{"id":"outil-wazuh","hash":""},{"id":"outil-velociraptor","hash":""},{"id":"outil-suricata","hash":""},{"id":"outil-sigma","hash":""},{"id":"privilege-escalation-linux","hash":""},{"id":"privilege-escalation-windows","hash":""},{"id":"reverse-shells","hash":""}],"backlinks":["glossaire","outil-elastic","outil-graylog","outil-snort","outil-splunk","outil-suricata","outil-velociraptor","outil-wazuh","tools"]},{"id":"outil-owasp-zap","path":"Cybersécurité Offensive/Outils/Outil - OWASP ZAP.md","name":"Outil - OWASP ZAP","title":"Outil - OWASP ZAP","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Scan Web & Fuzzing","tags":["cyber","outil","Scan Web & Fuzzing"],"status":"publie","excerpt":"OWASP ZAP — Proxy d'interception et scanner web (Java)","words":3032,"readTime":14,"modified":"2026-10-06T22:23:57.300Z","links":[{"id":"tools","hash":""},{"id":"outil-burp-suite","hash":""},{"id":"outil-nuclei","hash":""},{"id":"outil-nikto","hash":""},{"id":"outil-mitmproxy","hash":""},{"id":"injection-sql","hash":""},{"id":"xss-cross-site-scripting","hash":""},{"id":"ssrf","hash":""},{"id":"xxe","hash":""},{"id":"exploitation-web","hash":""},{"id":"outil-caido","hash":""}],"backlinks":["reconnaissance","glossaire","outil-burp-extensions-bapp-store","outil-burp-suite","outil-caido","outil-mitmproxy","outil-sqlmap","outil-wpscan","outil-xsstrike","tools"]},{"id":"outil-p4wnp1-a-l-o-a","path":"Cybersécurité Offensive/Outils/Outil - P4wnP1 A.L.O.A..md","name":"Outil - P4wnP1 A.L.O.A.","title":"Outil - P4wnP1 A.L.O.A.","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"USB / HID & Gadgets","tags":["cyber","outil","hardware","USB / HID & Gadgets"],"status":"publie","excerpt":"P4wnP1 A.L.O.A. — La Raspberry Pi Zero W devenue arme USB","words":2436,"readTime":11,"modified":"2026-10-06T22:23:57.304Z","links":[{"id":"outil-metasploit","hash":""},{"id":"outil-chisel","hash":""},{"id":"tools","hash":""},{"id":"hardware-raspberry-pi","hash":""},{"id":"protocole-usb","hash":""},{"id":"protocole-bluetooth","hash":""},{"id":"outil-bash-bunny","hash":""},{"id":"outil-usb-rubber-ducky","hash":""},{"id":"outil-o-mg-cable","hash":""},{"id":"outil-responder","hash":""},{"id":"pivoting-et-tunneling","hash":""},{"id":"reverse-shells","hash":""}],"backlinks":["outil-bash-bunny","outil-duckuino","outil-usb-host-shield","outil-usb-rubber-ducky","tools"]},{"id":"outil-pacu","path":"Cybersécurité Offensive/Outils/Outil - Pacu.md","name":"Outil - Pacu","title":"Outil - Pacu","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Cloud & Containers","tags":["cyber","outil","cloud","aws"],"status":"publie","excerpt":"Framework post-exploitation open source qui te permet de lancer des modules d'exploitation AWS à la manière de Metasploit.","words":3117,"readTime":14,"modified":"2026-10-06T22:23:57.308Z","links":[{"id":"tools","hash":""},{"id":"outil-scoutsuite","hash":""},{"id":"outil-prowler","hash":""},{"id":"outil-cloudfox","hash":""}],"backlinks":["outil-cloudfox","outil-prowler","outil-scoutsuite","tools"]},{"id":"outil-parrot-os","path":"Cybersécurité Offensive/Outils/Outil - Parrot OS.md","name":"Outil - Parrot OS","title":"Outil - Parrot OS","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Distributions & Lab","tags":["cyber","outil","distributions"],"status":"publie","excerpt":"Parrot OS — Sécurité ET vie privée au quotidien","words":2712,"readTime":12,"modified":"2026-10-06T22:23:57.308Z","links":[{"id":"tools","hash":""},{"id":"outil-kali-linux","hash":""},{"id":"outil-tails-os","hash":""},{"id":"outil-wireshark","hash":""},{"id":"outil-metasploit","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-aircrack-ng","hash":""},{"id":"outil-wifite","hash":""},{"id":"outil-theharvester","hash":""},{"id":"outil-recon-ng","hash":""},{"id":"outil-sqlmap","hash":""},{"id":"outil-hydra","hash":""},{"id":"outil-bettercap","hash":""},{"id":"outil-blackarch","hash":""}],"backlinks":["outil-blackarch","outil-kali-linux","outil-tails-os","tools"]},{"id":"outil-patator","path":"Cybersécurité Offensive/Outils/Outil - Patator.md","name":"Outil - Patator","title":"Outil - Patator","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Exploitation & Cracking","tags":["cyber","outil","Exploitation & Cracking"],"status":"publie","excerpt":"Patator = brute-force/fuzzing multi-thread hautement customisable : mêmes objectifs que hydra/medusa mais avec un contrôle fin des conditions de réussite et un scripting sans prompt interactif.","words":3616,"readTime":16,"modified":"2026-10-06T22:23:57.312Z","links":[{"id":"tools","hash":""},{"id":"outil-hydra","hash":""},{"id":"outil-medusa","hash":""},{"id":"outil-ncrack","hash":""},{"id":"outil-burp-suite","hash":""},{"id":"outil-caido","hash":""},{"id":"outil-seclists","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"password-spraying","hash":""}],"backlinks":["password-cracking","glossaire","outil-cewl","outil-medusa","outil-ncrack","outil-seclists","tools"]},{"id":"outil-peirates","path":"Cybersécurité Offensive/Outils/Outil - peirates.md","name":"Outil - peirates","title":"Outil - peirates","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Cloud & Containers","tags":["cyber","outil","containers","kubernetes"],"status":"publie","excerpt":"peirates - Le framework de post-exploitation Kubernetes","words":2294,"readTime":10,"modified":"2026-10-06T22:23:57.400Z","links":[{"id":"tools","hash":""},{"id":"outil-kubectl","hash":""},{"id":"outil-kube-hunter","hash":""},{"id":"outil-kube-bench","hash":""},{"id":"outil-cloudfox","hash":""},{"id":"outil-trivy","hash":""}],"backlinks":["glossaire","outil-kube-bench","outil-kube-hunter","outil-kubectl","tools"]},{"id":"outil-powershell-empire","path":"Cybersécurité Offensive/Outils/Outil - PowerShell Empire.md","name":"Outil - PowerShell Empire","title":"Outil - PowerShell Empire","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"C2 & Post-Exploitation","tags":["cyber","outil","C2 & Post-Exploitation"],"status":"publie","excerpt":"Empire (Empire Starkiller / BC Security fork) est un framework de post-exploitation et de command & control piloté en PowerShell (agents Windows) et Python (agents Linux/macOS).","words":2232,"readTime":10,"modified":"2026-10-06T22:23:57.312Z","links":[{"id":"tools","hash":""},{"id":"privilege-escalation-windows","hash":""},{"id":"reverse-shells","hash":""},{"id":"pass-the-hash","hash":""},{"id":"kerberoasting","hash":""},{"id":"pivoting-et-tunneling","hash":""},{"id":"outil-mimikatz","hash":""},{"id":"outil-rubeus","hash":""},{"id":"outil-covenant","hash":""},{"id":"outil-sliver","hash":""}],"backlinks":["active-directory","post-exploitation","glossaire","outil-bash-bunny","outil-commando-vm","outil-covenant","outil-duckuino","outil-flipper-zero-usb-radio","outil-mythic","outil-sliver","outil-usb-rubber-ducky","outil-wifi-pineapple","tools"]},{"id":"outil-process-hacker","path":"Cybersécurité Offensive/Outils/Outil - Process Hacker.md","name":"Outil - Process Hacker","title":"Outil - Process Hacker","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Malware & Sandbox","tags":["cyber","outil","malware"],"status":"publie","excerpt":"Process Hacker — Supervision avancée des processus Windows","words":2826,"readTime":13,"modified":"2026-10-06T22:23:57.312Z","links":[{"id":"tools","hash":""},{"id":"outil-sysinternals-suite","hash":""},{"id":"outil-volatility","hash":""},{"id":"outil-x64dbg","hash":""},{"id":"outil-dnspy","hash":""},{"id":"outil-flare-vm","hash":""},{"id":"outil-yara","hash":""},{"id":"reverse-engineering-malware-analysis","hash":""}],"backlinks":["reverse-engineering-malware-analysis","outil-flare-vm","outil-sysinternals-suite","tools"]},{"id":"outil-prowler","path":"Cybersécurité Offensive/Outils/Outil - Prowler.md","name":"Outil - Prowler","title":"Outil - Prowler","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Cloud & Containers","tags":["cyber","outil","cloud","aws","azure","gcp","cis"],"status":"publie","excerpt":"Prowler — Le scanner de conformité cloud (CIS)","words":3442,"readTime":16,"modified":"2026-10-06T22:23:57.316Z","links":[{"id":"tools","hash":""},{"id":"outil-scoutsuite","hash":""},{"id":"outil-pacu","hash":""},{"id":"outil-cloudfox","hash":""}],"backlinks":["outil-cloudfox","outil-pacu","outil-scoutsuite","tools"]},{"id":"outil-pwntools","path":"Cybersécurité Offensive/Outils/Outil - pwntools.md","name":"Outil - pwntools","title":"Outil - pwntools","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"CTF & Développement","tags":["cyber","outil","ctf"],"status":"publie","excerpt":"pwntools — Le framework d'exploitation pwn en Python","words":2177,"readTime":10,"modified":"2026-10-06T22:23:57.404Z","links":[{"id":"outil-gdb-peda","hash":""},{"id":"outil-ropgadget","hash":""},{"id":"tools","hash":""},{"id":"outil-ghidra","hash":""},{"id":"outil-radare2","hash":""},{"id":"outil-cyberchef","hash":""},{"id":"cheatsheets","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-john-the-ripper","hash":""}],"backlinks":["reverse-engineering-malware-analysis","glossaire","outil-cutter","outil-cyberchef","outil-gdb-peda","outil-ghidra","outil-ropgadget","outil-rsactftool","tools"]},{"id":"outil-pydictor","path":"Cybersécurité Offensive/Outils/Outil - pydictor.md","name":"Outil - pydictor","title":"Outil - pydictor","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Wordlists & Générateurs","tags":["cyber","outil","wordlists"],"status":"publie","excerpt":"pydictor — Générateur de wordlists Python tout-en-un","words":3288,"readTime":15,"modified":"2026-10-06T22:23:57.404Z","links":[{"id":"tools","hash":""},{"id":"outil-cupp","hash":""},{"id":"outil-crunch","hash":""},{"id":"outil-kwprocessor","hash":""},{"id":"outil-mentalist","hash":""},{"id":"outil-rsmangler","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-john-the-ripper","hash":""},{"id":"outil-seclists","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"password-spraying","hash":""},{"id":"brute-force-rate-limit","hash":""}],"backlinks":["password-cracking","outil-brutedum","outil-cewl","outil-crunch","outil-cupp","outil-kwprocessor","outil-mentalist","outil-rsmangler","outil-seclists","tools"]},{"id":"outil-radare2","path":"Cybersécurité Offensive/Outils/Outil - radare2.md","name":"Outil - radare2","title":"Outil - radare2","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Mobile & Reverse Engineering","tags":["cyber","outil","Mobile & Reverse Engineering"],"status":"publie","excerpt":"radare2 (r2) est un framework de reverse engineering 100% CLI : analyse, désassemblage, édition,","words":2527,"readTime":11,"modified":"2026-10-06T22:23:57.404Z","links":[{"id":"tools","hash":""},{"id":"outil-cutter","hash":""},{"id":"outil-ghidra","hash":""},{"id":"outil-gdb-peda","hash":""},{"id":"outil-x64dbg","hash":""},{"id":"buffer-overflow","hash":""},{"id":"hardware-jtag-et-swd","hash":""}],"backlinks":["exploitation-reseau","reverse-engineering-malware-analysis","glossaire","outil-binwalk","outil-blackarch","outil-cutter","outil-flare-vm","outil-gdb-peda","outil-ghidra","outil-kali-linux","outil-pwntools","outil-remnux","outil-ropgadget","tools"]},{"id":"outil-reaver","path":"Cybersécurité Offensive/Outils/Outil - Reaver.md","name":"Outil - Reaver","title":"Outil - Reaver","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Wireless & Réseau","tags":["cyber","outil","Wireless & Réseau"],"status":"publie","excerpt":"Outil d'attaque WPS (Wi-Fi Protected Setup) par brute force du PIN de 8 chiffres, couplé à pixiewps pour l'attaque offline « pixie dust » — il délivre la clé WPA/WPA2 en clair sans la cracker.","words":2859,"readTime":13,"modified":"2026-10-06T22:23:57.320Z","links":[{"id":"tools","hash":""},{"id":"outil-aircrack-ng","hash":""},{"id":"outil-wifite","hash":""},{"id":"outil-hcxdumptool","hash":""},{"id":"outil-scapy","hash":""},{"id":"attaques-wifi-wps","hash":""},{"id":"attaques-wifi-wpa2-et-pmkid","hash":""},{"id":"attaques-wifi-preparation-basiques","hash":""}],"backlinks":["wireless-mitm-social-engineering","glossaire","outil-aircrack-ng","outil-crunch","outil-kali-linux","outil-kismet","outil-wifite","tools"]},{"id":"outil-recon-ng","path":"Cybersécurité Offensive/Outils/Outil - Recon-ng.md","name":"Outil - Recon-ng","title":"Outil - Recon-ng","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Reconnaissance & OSINT","tags":["cyber","outil","Reconnaissance & OSINT"],"status":"publie","excerpt":"Recon-ng — Framework de reconnaissance façon « Metasploit »","words":2902,"readTime":13,"modified":"2026-10-06T22:23:57.320Z","links":[{"id":"outil-shodan-cli","hash":""},{"id":"outil-censys","hash":""},{"id":"outil-theharvester","hash":""},{"id":"outil-amass","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-rustscan","hash":""},{"id":"outil-maltego","hash":""},{"id":"outil-httpx","hash":""},{"id":"outil-subfinder","hash":""},{"id":"outil-spiderfoot","hash":""},{"id":"tools","hash":""},{"id":"reconnaissance","hash":""},{"id":"outil-shodan","hash":""}],"backlinks":["reconnaissance","scan-enumeration","glossaire","outil-blackarch","outil-cewl","outil-parrot-os","outil-shodan-cli","outil-shodan","outil-spiderfoot","outil-subfinder","outil-theharvester","tools"]},{"id":"outil-remnux","path":"Cybersécurité Offensive/Outils/Outil - REMnux.md","name":"Outil - REMnux","title":"Outil - REMnux","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Distributions & Lab","tags":["cyber","outil","distributions"],"status":"publie","excerpt":"REMnux — Le laboratoire d'analyse de malwares","words":2689,"readTime":12,"modified":"2026-10-06T22:23:57.316Z","links":[{"id":"tools","hash":""},{"id":"outil-flare-vm","hash":""},{"id":"outil-sift-workstation","hash":""},{"id":"outil-ghidra","hash":""},{"id":"outil-volatility","hash":""},{"id":"outil-yara","hash":""},{"id":"outil-oletools","hash":""},{"id":"outil-binwalk","hash":""},{"id":"outil-radare2","hash":""},{"id":"outil-cutter","hash":""},{"id":"outil-tcpdump","hash":""},{"id":"outil-wireshark","hash":""},{"id":"outil-fakenet-ng","hash":""}],"backlinks":["outil-cape","outil-cuckoo-sandbox","outil-fakenet-ng","outil-flare-vm","outil-oletools","outil-sift-workstation","outil-tails-os","tools"]},{"id":"outil-responder","path":"Cybersécurité Offensive/Outils/Outil - Responder.md","name":"Outil - Responder","title":"Outil - Responder","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Active Directory & Windows","tags":["cyber","outil","Active Directory & Windows"],"status":"publie","excerpt":"Responder empoisonne les protocoles de résolution de noms LLMNR, NBT-NS et mDNS pour capturer les hashes NTLMv2 des clients Windows du réseau local, ensuite crackables (hashcat mode 5600 ).","words":2236,"readTime":10,"modified":"2026-10-06T22:23:57.320Z","links":[{"id":"outil-impacket","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-mitm6","hash":""},{"id":"outil-crackmapexec","hash":""},{"id":"outil-bloodhound","hash":""},{"id":"outil-evil-winrm","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-responder","hash":""}],"backlinks":["active-directory","wireless-mitm-social-engineering","cheatsheets","glossaire","outil-bash-bunny","outil-commando-vm","outil-crackmapexec","outil-hashcat","outil-impacket","outil-medusa","outil-mitm6","outil-p4wnp1-a-l-o-a","outil-responder","outil-weeman","outil-wifi-pineapple","tools"]},{"id":"outil-ropgadget","path":"Cybersécurité Offensive/Outils/Outil - ROPgadget.md","name":"Outil - ROPgadget","title":"Outil - ROPgadget","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"CTF & Développement","tags":["cyber","outil","ctf"],"status":"publie","excerpt":"ROPgadget — Le générateur de gadgets et de ROP chains","words":2326,"readTime":11,"modified":"2026-10-06T22:23:57.316Z","links":[{"id":"outil-pwntools","hash":""},{"id":"tools","hash":""},{"id":"outil-gdb-peda","hash":""},{"id":"outil-ghidra","hash":""},{"id":"outil-radare2","hash":""},{"id":"cheatsheets","hash":""},{"id":"outil-cyberchef","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-john-the-ripper","hash":""}],"backlinks":["exploitation-reseau","reverse-engineering-malware-analysis","glossaire","outil-cutter","outil-gdb-peda","outil-ghidra","outil-pwntools","outil-rsactftool","tools"]},{"id":"outil-rsactftool","path":"Cybersécurité Offensive/Outils/Outil - RsaCtfTool.md","name":"Outil - RsaCtfTool","title":"Outil - RsaCtfTool","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"CTF & Développement","tags":["cyber","outil","ctf"],"status":"publie","excerpt":"RsaCtfTool — L'arsenal d'attaque RSA pour CTF","words":2414,"readTime":11,"modified":"2026-10-06T22:23:57.324Z","links":[{"id":"outil-cyberchef","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-john-the-ripper","hash":""},{"id":"tools","hash":""},{"id":"outil-pwntools","hash":""},{"id":"outil-binwalk","hash":""},{"id":"cheatsheets","hash":""},{"id":"outil-gdb-peda","hash":""},{"id":"outil-ropgadget","hash":""}],"backlinks":["reverse-engineering-malware-analysis","outil-cyberchef","tools"]},{"id":"outil-rsmangler","path":"Cybersécurité Offensive/Outils/Outil - rsmangler.md","name":"Outil - rsmangler","title":"Outil - rsmangler","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Wordlists & Générateurs","tags":["cyber","outil","wordlists"],"status":"publie","excerpt":"rsmangler — Mangleur de wordlists par permutations et mutations","words":3186,"readTime":14,"modified":"2026-10-06T22:23:57.404Z","links":[{"id":"tools","hash":""},{"id":"outil-cewl","hash":""},{"id":"outil-cupp","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-john-the-ripper","hash":""},{"id":"outil-mentalist","hash":""},{"id":"outil-pydictor","hash":""},{"id":"outil-oneruletorulethemall","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"password-spraying","hash":""},{"id":"outil-crunch","hash":""}],"backlinks":["password-cracking","outil-brutedum","outil-cewl","outil-crunch","outil-cupp","outil-kwprocessor","outil-mentalist","outil-pydictor","outil-seclists","tools"]},{"id":"outil-rubeus","path":"Cybersécurité Offensive/Outils/Outil - Rubeus.md","name":"Outil - Rubeus","title":"Outil - Rubeus","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Active Directory & Windows","tags":["cyber","outil","Active Directory & Windows"],"status":"publie","excerpt":"Rubeus est un toolkit Kerberos en C (GhostPack) qui s'exécute en mémoire sur un poste Windows : Kerberoasting, AS-REP roasting, Pass-the-Ticket, délégation S4U et dump des tickets.","words":2482,"readTime":11,"modified":"2026-10-06T22:23:57.324Z","links":[{"id":"outil-hashcat","hash":""},{"id":"outil-impacket","hash":""},{"id":"outil-mimikatz","hash":""},{"id":"outil-evil-winrm","hash":""},{"id":"outil-bloodhound","hash":""},{"id":"outil-kerbrute","hash":""},{"id":"kerberoasting","hash":""},{"id":"as-rep-roasting","hash":""},{"id":"golden-ticket","hash":""},{"id":"outil-rubeus","hash":""}],"backlinks":["active-directory","post-exploitation","glossaire","outil-bloodhound","outil-commando-vm","outil-covenant","outil-crackmapexec","outil-evil-winrm","outil-hashcat","outil-impacket","outil-kerbrute","outil-mimikatz","outil-powershell-empire","outil-rubeus","tools"]},{"id":"outil-rustscan","path":"Cybersécurité Offensive/Outils/Outil - RustScan.md","name":"Outil - RustScan","title":"Outil - RustScan","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Reconnaissance & OSINT","tags":["cyber","outil","Reconnaissance & OSINT"],"status":"publie","excerpt":"RustScan — Scan de ports ultra-rapide, relais vers Nmap","words":2090,"readTime":10,"modified":"2026-10-06T22:23:57.324Z","links":[{"id":"outil-nmap","hash":""},{"id":"outil-httpx","hash":""},{"id":"outil-ffuf","hash":""},{"id":"gobuster-brute-force-de-repertoires-dns-et-vhosts","hash":""},{"id":"outil-naabu","hash":""},{"id":"outil-masscan","hash":""},{"id":"outil-metasploit","hash":""},{"id":"outil-searchsploit","hash":""},{"id":"tools","hash":""},{"id":"scan-enumeration","hash":""}],"backlinks":["scan-enumeration","glossaire","outil-naabu","outil-nmap","outil-recon-ng","outil-searchsploit","tools"]},{"id":"outil-scapy","path":"Cybersécurité Offensive/Outils/Outil - Scapy.md","name":"Outil - Scapy","title":"Outil - Scapy","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Réseau & Capture","tags":["cyber","outil","reseau","python"],"status":"publie","excerpt":"Scapy est une bibliothèque Python capable de créer, envoyer, intercepter, disséquer et manipuler des paquets réseau de n'importe quel protocole, en interactif ou en scripts.","words":2486,"readTime":11,"modified":"2026-10-06T22:23:57.332Z","links":[{"id":"tools","hash":""},{"id":"outil-tcpdump","hash":""},{"id":"outil-tshark","hash":""},{"id":"outil-wireshark","hash":""},{"id":"outil-hping3","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-suricata","hash":""},{"id":"outil-snort","hash":""},{"id":"outil-tcpreplay","hash":""}],"backlinks":["glossaire","outil-hping3","outil-nload","outil-reaver","outil-socat","outil-tcpdump","outil-tcpreplay","outil-tshark","outil-wireshark","tools"]},{"id":"outil-scoutsuite","path":"Cybersécurité Offensive/Outils/Outil - ScoutSuite.md","name":"Outil - ScoutSuite","title":"Outil - ScoutSuite","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Cloud & Containers","tags":["cyber","outil","cloud","aws","azure","gcp"],"status":"publie","excerpt":"Suite d'audit open source (successeur de Scout2) qui génère un rapport HTML navigable des failles de configuration AWS, Azure et GCP.","words":2873,"readTime":13,"modified":"2026-10-06T22:23:57.332Z","links":[{"id":"tools","hash":""},{"id":"outil-prowler","hash":""},{"id":"outil-pacu","hash":""},{"id":"outil-cloudfox","hash":""}],"backlinks":["outil-cloudfox","outil-pacu","outil-prowler","tools"]},{"id":"outil-searchsploit","path":"Cybersécurité Offensive/Outils/Outil - SearchSploit.md","name":"Outil - SearchSploit","title":"Outil - SearchSploit","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Exploitation & Cracking","tags":["cyber","outil","Exploitation & Cracking"],"status":"publie","excerpt":"SearchSploit — Exploit-DB en ligne de commande","words":3353,"readTime":15,"modified":"2026-10-06T22:23:57.332Z","links":[{"id":"outil-nuclei","hash":""},{"id":"tools","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-metasploit","hash":""},{"id":"outil-searchsploit","hash":""},{"id":"outil-rustscan","hash":""},{"id":"path-traversal","hash":""},{"id":"lfi-et-rfi","hash":""},{"id":"reverse-shells","hash":""},{"id":"privilege-escalation-linux","hash":""}],"backlinks":["scan-enumeration","glossaire","outil-metasploit","outil-rustscan","outil-searchsploit","outil-sqlmap","tools"]},{"id":"outil-seclists","path":"Cybersécurité Offensive/Outils/Outil - SecLists.md","name":"Outil - SecLists","title":"Outil - SecLists","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Wordlists & Générateurs","tags":["cyber","outil","wordlists"],"status":"publie","excerpt":"SecLists — La collection de wordlists et payloads du testeur","words":2700,"readTime":12,"modified":"2026-10-06T22:23:57.336Z","links":[{"id":"tools","hash":""},{"id":"outil-cewl","hash":""},{"id":"outil-cupp","hash":""},{"id":"outil-rsmangler","hash":""},{"id":"outil-pydictor","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-john-the-ripper","hash":""},{"id":"gobuster-brute-force-de-repertoires-dns-et-vhosts","hash":""},{"id":"outil-ffuf","hash":""},{"id":"outil-dirsearch","hash":""},{"id":"outil-wfuzz","hash":""},{"id":"outil-hydra","hash":""},{"id":"outil-medusa","hash":""},{"id":"outil-ncrack","hash":""},{"id":"outil-patator","hash":""},{"id":"outil-burp-suite","hash":""},{"id":"outil-aircrack-ng","hash":""},{"id":"outil-oneruletorulethemall","hash":""},{"id":"techniques-password-cracking","hash":""},{"id":"password-spraying","hash":""},{"id":"brute-force-rate-limit","hash":""}],"backlinks":["password-cracking","outil-brutedum","outil-cewl","outil-crunch","outil-cupp","outil-hash-identifier","outil-hashcat","outil-kwprocessor","outil-mentalist","outil-patator","outil-pydictor","tools"]},{"id":"outil-set","path":"Cybersécurité Offensive/Outils/Outil - SET.md","name":"Outil - SET","title":"Outil - SET","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Social Engineering & Phishing","tags":["cyber","outil","social-engineering"],"status":"publie","excerpt":"SET (Social-Engineer Toolkit) — Le couteau suisse de l'ingénierie sociale","words":4040,"readTime":18,"modified":"2026-10-06T22:23:57.328Z","links":[{"id":"outil-usb-rubber-ducky","hash":""},{"id":"outil-bash-bunny","hash":""},{"id":"outil-wifi-pineapple","hash":""},{"id":"outil-evil-winrm","hash":""},{"id":"outil-gophish","hash":""},{"id":"outil-evilginx2","hash":""},{"id":"tools","hash":""},{"id":"outil-metasploit","hash":""},{"id":"outil-socialfish","hash":""},{"id":"outil-weeman","hash":""},{"id":"outil-modlishka","hash":""},{"id":"outil-credsniper","hash":""},{"id":"outil-beef","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-theharvester","hash":""},{"id":"wireless-mitm-social-engineering","hash":""},{"id":"outil-king-phisher","hash":""}],"backlinks":["wireless-mitm-social-engineering","glossaire","outil-beef","outil-credsniper","outil-evilginx2","outil-gophish","outil-king-phisher","outil-modlishka","outil-socialfish","outil-weeman","tools"]},{"id":"outil-shodan","path":"Cybersécurité Offensive/Outils/Outil - Shodan.md","name":"Outil - Shodan","title":"Outil - Shodan","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Reconnaissance & OSINT","tags":["cyber","outil","Reconnaissance & OSINT"],"status":"publie","excerpt":"Shodan — Moteur de recherche des services exposés sur Internet","words":2095,"readTime":10,"modified":"2026-10-06T22:23:57.336Z","links":[{"id":"outil-shodan-cli","hash":""},{"id":"outil-censys","hash":""},{"id":"outil-theharvester","hash":""},{"id":"outil-recon-ng","hash":""},{"id":"outil-maltego","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-spiderfoot","hash":""},{"id":"outil-nuclei","hash":""},{"id":"outil-httpx","hash":""},{"id":"outil-masscan","hash":""},{"id":"tools","hash":""},{"id":"reconnaissance","hash":""},{"id":"outil-amass","hash":""}],"backlinks":["reconnaissance","glossaire","outil-censys","outil-recon-ng","outil-shodan-cli","outil-spiderfoot","tools"]},{"id":"outil-shodan-cli","path":"Cybersécurité Offensive/Outils/Outil - Shodan CLI.md","name":"Outil - Shodan CLI","title":"Outil - Shodan CLI","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Reconnaissance & OSINT","tags":["cyber","outil","recon"],"status":"publie","excerpt":"Shodan CLI — Moteur de recherche des services exposés en ligne de commande","words":1994,"readTime":9,"modified":"2026-10-06T22:23:57.336Z","links":[{"id":"outil-censys","hash":""},{"id":"outil-theharvester","hash":""},{"id":"outil-maltego","hash":""},{"id":"outil-recon-ng","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-naabu","hash":""},{"id":"outil-httpx","hash":""},{"id":"outil-spiderfoot","hash":""},{"id":"outil-masscan","hash":""},{"id":"outil-nuclei","hash":""},{"id":"tools","hash":""},{"id":"reconnaissance","hash":""},{"id":"outil-shodan","hash":""}],"backlinks":["reconnaissance","scan-enumeration","outil-amass","outil-censys","outil-maltego","outil-recon-ng","outil-shodan","outil-theharvester","tools"]},{"id":"outil-sift-workstation","path":"Cybersécurité Offensive/Outils/Outil - SIFT Workstation.md","name":"Outil - SIFT Workstation","title":"Outil - SIFT Workstation","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Distributions & Lab","tags":["cyber","outil","distributions","dfir","forensics"],"status":"publie","excerpt":"SIFT Workstation — L'investigation numérique avec les outils SANS (DFIR)","words":2317,"readTime":11,"modified":"2026-10-06T22:23:57.328Z","links":[{"id":"tools","hash":""},{"id":"outil-autopsy","hash":""},{"id":"outil-volatility","hash":""},{"id":"outil-flare-vm","hash":""},{"id":"outil-remnux","hash":""},{"id":"outil-ghidra","hash":""},{"id":"outil-wireshark","hash":""},{"id":"outil-sysinternals-suite","hash":""},{"id":"outil-ftk-imager","hash":""},{"id":"outil-binwalk","hash":""},{"id":"outil-oletools","hash":""},{"id":"outil-exiftool","hash":""}],"backlinks":["outil-flare-vm","outil-remnux","tools"]},{"id":"outil-sigma","path":"Cybersécurité Offensive/Outils/Outil - Sigma.md","name":"Outil - Sigma","title":"Outil - Sigma","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Forensics, Threat Intel & Honeypots","tags":["cyber","outil","Forensics, Threat Intel & Honeypots"],"status":"publie","excerpt":"Sigma est un format ouvert et générique de règles de détection orientées logs, comparable à YARA mais pour les journaux, convertible automatiquement vers Splunk, Elastic, Suricata, QRadar et plus d'une vingtaine de SI…","words":2820,"readTime":13,"modified":"2026-10-06T22:23:57.340Z","links":[{"id":"tools","hash":""},{"id":"outil-yara","hash":""},{"id":"outil-opencti","hash":""},{"id":"outil-splunk","hash":""},{"id":"outil-elastic","hash":""},{"id":"outil-suricata","hash":""},{"id":"outil-snort","hash":""},{"id":"outil-graylog","hash":""},{"id":"cheatsheets","hash":""}],"backlinks":["wireless-mitm-social-engineering","glossaire","outil-elastic","outil-graylog","outil-opencti","outil-osquery","outil-snort","outil-splunk","outil-suricata","outil-wazuh","outil-zeek","tools"]},{"id":"outil-sliver","path":"Cybersécurité Offensive/Outils/Outil - Sliver.md","name":"Outil - Sliver","title":"Outil - Sliver","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"C2 & Post-Exploitation","tags":["cyber","outil","C2 & Post-Exploitation"],"status":"publie","excerpt":"Sliver est un framework C2 open-source écrit en Go, pensé comme un remplaçant moderne de Cobalt Strike : implants compilés, listeners HTTPS/DNS/mTLS/WireGuard, sessions/beacons et post-exploitation extensible.","words":2438,"readTime":11,"modified":"2026-10-06T22:23:57.340Z","links":[{"id":"tools","hash":""},{"id":"outil-metasploit","hash":""},{"id":"outil-ligolo-ng","hash":""},{"id":"outil-chisel","hash":""},{"id":"outil-covenant","hash":""},{"id":"outil-havoc","hash":""},{"id":"outil-mythic","hash":""},{"id":"outil-powershell-empire","hash":""},{"id":"outil-mimikatz","hash":""},{"id":"pivoting-et-tunneling","hash":""},{"id":"reverse-shells","hash":""},{"id":"privilege-escalation-windows","hash":""}],"backlinks":["active-directory","post-exploitation","glossaire","outil-commando-vm","outil-covenant","outil-havoc","outil-metasploit","outil-mythic","outil-powershell-empire","tools"]},{"id":"outil-snort","path":"Cybersécurité Offensive/Outils/Outil - Snort.md","name":"Outil - Snort","title":"Outil - Snort","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"IDS / SIEM / EDR","tags":["cyber","outil","IDS / SIEM / EDR"],"status":"publie","excerpt":"Snort est l'IDS/IPS à base de règles le plus connu : il analyse le trafic en temps réel et","words":3395,"readTime":15,"modified":"2026-10-06T22:23:57.340Z","links":[{"id":"outil-suricata","hash":""},{"id":"outil-zeek","hash":""},{"id":"tools","hash":""},{"id":"outil-elastic","hash":""},{"id":"outil-graylog","hash":""},{"id":"outil-wazuh","hash":""},{"id":"outil-osquery","hash":""},{"id":"outil-sigma","hash":""},{"id":"reverse-shells","hash":""},{"id":"pivoting-et-tunneling","hash":""},{"id":"arp-spoofing-et-mitm","hash":""}],"backlinks":["glossaire","outil-hping3","outil-scapy","outil-sigma","outil-suricata","outil-tcpdump","outil-tcpreplay","outil-tshark","outil-wireshark","outil-zeek","tools"]},{"id":"outil-socat","path":"Cybersécurité Offensive/Outils/Outil - socat.md","name":"Outil - socat","title":"Outil - socat","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Divers","tags":["cyber","outil","reseau","tunnel"],"status":"publie","excerpt":"socat connecte deux flux de données (sockets TCP/UDP/UNIX, fichiers, processus, ports série, SSL…) entre eux, ce qui en fait l'outil idéal pour les relais, tunnels et shells avancés.","words":2517,"readTime":11,"modified":"2026-10-06T22:23:57.408Z","links":[{"id":"tools","hash":""},{"id":"outil-netcat","hash":""},{"id":"outil-ncat","hash":""},{"id":"outil-tshark","hash":""},{"id":"outil-tcpdump","hash":""},{"id":"outil-scapy","hash":""},{"id":"outil-metasploit","hash":""},{"id":"outil-nmap","hash":""}],"backlinks":["exploitation-reseau","post-exploitation","glossaire","outil-chisel","outil-ligolo-ng","outil-ncat","outil-netcat","tools"]},{"id":"outil-socialfish","path":"Cybersécurité Offensive/Outils/Outil - SocialFish.md","name":"Outil - SocialFish","title":"Outil - SocialFish","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Social Engineering & Phishing","tags":["cyber","outil","social-engineering"],"status":"publie","excerpt":"SocialFish — Phishing automatisé avec clonage de sites en quelques commandes","words":3135,"readTime":14,"modified":"2026-10-06T22:23:57.344Z","links":[{"id":"outil-beef","hash":""},{"id":"xss-cross-site-scripting","hash":""},{"id":"outil-evilginx2","hash":""},{"id":"outil-modlishka","hash":""},{"id":"tools","hash":""},{"id":"outil-set","hash":""},{"id":"outil-weeman","hash":""},{"id":"outil-credsniper","hash":""},{"id":"outil-gophish","hash":""},{"id":"outil-nmap","hash":""},{"id":"wireless-mitm-social-engineering","hash":""}],"backlinks":["wireless-mitm-social-engineering","outil-beef","outil-credsniper","outil-gophish","outil-king-phisher","outil-modlishka","outil-set","outil-weeman","tools"]},{"id":"outil-spiderfoot","path":"Cybersécurité Offensive/Outils/Outil - spiderfoot.md","name":"Outil - spiderfoot","title":"Outil - spiderfoot","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Reconnaissance & OSINT","tags":["cyber","outil","Reconnaissance & OSINT"],"status":"publie","excerpt":"SpiderFoot — Plateforme OSINT automatisée et corrélée","words":2176,"readTime":10,"modified":"2026-10-06T22:23:57.408Z","links":[{"id":"outil-shodan","hash":""},{"id":"outil-censys","hash":""},{"id":"outil-amass","hash":""},{"id":"outil-recon-ng","hash":""},{"id":"outil-theharvester","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-naabu","hash":""},{"id":"outil-maltego","hash":""},{"id":"tools","hash":""},{"id":"reconnaissance","hash":""}],"backlinks":["glossaire","outil-amass","outil-cewl","outil-maltego","outil-recon-ng","outil-shodan-cli","outil-shodan","outil-theharvester","tools"]},{"id":"outil-splunk","path":"Cybersécurité Offensive/Outils/Outil - Splunk.md","name":"Outil - Splunk","title":"Outil - Splunk","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"IDS / SIEM / EDR","tags":["cyber","outil","IDS / SIEM / EDR"],"status":"publie","excerpt":"Splunk est le SIEM leader du marché : il ingère des flux de logs, les indexe par","words":3162,"readTime":14,"modified":"2026-10-06T22:23:57.344Z","links":[{"id":"outil-elastic","hash":""},{"id":"outil-graylog","hash":""},{"id":"outil-wazuh","hash":""},{"id":"tools","hash":""},{"id":"outil-suricata","hash":""},{"id":"outil-osquery","hash":""},{"id":"outil-sigma","hash":""},{"id":"outil-velociraptor","hash":""},{"id":"reverse-shells","hash":""},{"id":"injection-de-commandes","hash":""},{"id":"privilege-escalation-windows","hash":""}],"backlinks":["glossaire","outil-elastic","outil-graylog","outil-osquery","outil-sigma","outil-suricata","outil-velociraptor","outil-zeek","tools"]},{"id":"outil-sqlmap","path":"Cybersécurité Offensive/Outils/Outil - sqlmap.md","name":"Outil - sqlmap","title":"Outil - sqlmap","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Exploitation & Cracking","tags":["cyber","outil","Exploitation & Cracking"],"status":"publie","excerpt":"sqlmap = l'outil d'exploitation automatique des injections SQL : détection de la technique, énumération de la base et extraction des données en une seule commande.","words":3087,"readTime":14,"modified":"2026-10-06T22:23:57.408Z","links":[{"id":"outil-burp-suite","hash":""},{"id":"outil-caido","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-john-the-ripper","hash":""},{"id":"outil-name-that-hash","hash":""},{"id":"outil-searchsploit","hash":""},{"id":"outil-chisel","hash":""},{"id":"tools","hash":""},{"id":"outil-hashid","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-metasploit","hash":""},{"id":"outil-owasp-zap","hash":""},{"id":"graphql","hash":""},{"id":"injection-sql","hash":""},{"id":"nosql","hash":""},{"id":"lfi-et-rfi","hash":""}],"backlinks":["cheatsheets","glossaire","outil-blackarch","outil-burp-extensions-bapp-store","outil-burp-suite","outil-kali-linux","outil-parrot-os","outil-xsstrike","tools"]},{"id":"outil-stegsolve","path":"Cybersécurité Offensive/Outils/Outil - stegsolve.md","name":"Outil - stegsolve","title":"Outil - stegsolve","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"CTF & Développement","tags":["cyber","outil","ctf"],"status":"publie","excerpt":"StegSolve — L'analyseur visuel de stéganographie d'images","words":2543,"readTime":12,"modified":"2026-10-06T22:23:57.408Z","links":[{"id":"outil-zsteg","hash":""},{"id":"outil-cyberchef","hash":""},{"id":"tools","hash":""},{"id":"outil-exiftool","hash":""},{"id":"outil-binwalk","hash":""},{"id":"cheatsheets","hash":""},{"id":"outil-ghidra","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-john-the-ripper","hash":""}],"backlinks":["reverse-engineering-malware-analysis","outil-binwalk","outil-cyberchef","outil-exiftool","outil-zsteg","tools"]},{"id":"outil-subfinder","path":"Cybersécurité Offensive/Outils/Outil - subfinder.md","name":"Outil - subfinder","title":"Outil - subfinder","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Reconnaissance & OSINT","tags":["cyber","outil","recon"],"status":"publie","excerpt":"subfinder — Découverte massive de sous-domaines (passif + actif)","words":1939,"readTime":9,"modified":"2026-10-06T22:23:57.412Z","links":[{"id":"outil-dnsx","hash":""},{"id":"outil-httpx","hash":""},{"id":"outil-naabu","hash":""},{"id":"outil-nuclei","hash":""},{"id":"outil-chaos","hash":""},{"id":"outil-amass","hash":""},{"id":"outil-recon-ng","hash":""},{"id":"outil-theharvester","hash":""},{"id":"tools","hash":""},{"id":"reconnaissance","hash":""}],"backlinks":["reconnaissance","glossaire","outil-amass","outil-censys","outil-cewl","outil-chaos","outil-dnsx","outil-httpx","outil-katana","outil-maltego","outil-naabu","outil-nuclei","outil-recon-ng","outil-theharvester","outil-waybackurls","tools"]},{"id":"outil-suricata","path":"Cybersécurité Offensive/Outils/Outil - Suricata.md","name":"Outil - Suricata","title":"Outil - Suricata","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"IDS / SIEM / EDR","tags":["cyber","outil","IDS / SIEM / EDR"],"status":"publie","excerpt":"Suricata est l'IDS/IPS multi-thread qui remplace Snort : mêmes règles (compatibles),","words":3046,"readTime":14,"modified":"2026-10-06T22:23:57.344Z","links":[{"id":"tools","hash":""},{"id":"outil-snort","hash":""},{"id":"outil-zeek","hash":""},{"id":"outil-elastic","hash":""},{"id":"outil-graylog","hash":""},{"id":"outil-splunk","hash":""},{"id":"outil-osquery","hash":""},{"id":"outil-wazuh","hash":""},{"id":"outil-sigma","hash":""},{"id":"reverse-shells","hash":""},{"id":"pivoting-et-tunneling","hash":""},{"id":"llmnr-nbt-ns-poisoning","hash":""}],"backlinks":["glossaire","outil-cape","outil-elastic","outil-graylog","outil-hping3","outil-misp","outil-osquery","outil-scapy","outil-sigma","outil-snort","outil-splunk","outil-tcpdump","outil-tcpreplay","outil-tshark","outil-wazuh","outil-wireshark","outil-zeek","tools"]},{"id":"outil-syft","path":"Cybersécurité Offensive/Outils/Outil - syft.md","name":"Outil - syft","title":"Outil - syft","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Cloud & Containers","tags":["cyber","outil","containers","devsecops"],"status":"publie","excerpt":"syft - Le générateur d'empreinte logicielle (SBOM)","words":1897,"readTime":9,"modified":"2026-10-06T22:23:57.412Z","links":[{"id":"tools","hash":""},{"id":"outil-grype","hash":""},{"id":"outil-trivy","hash":""},{"id":"outil-kube-bench","hash":""},{"id":"outil-kubectl","hash":""}],"backlinks":["outil-grype","outil-trivy","tools"]},{"id":"outil-sysinternals-suite","path":"Cybersécurité Offensive/Outils/Outil - Sysinternals Suite.md","name":"Outil - Sysinternals Suite","title":"Outil - Sysinternals Suite","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Malware & Sandbox","tags":["cyber","outil","malware"],"status":"publie","excerpt":"Sysinternals Suite — Boîte à outils d'analyse système Windows","words":2804,"readTime":13,"modified":"2026-10-06T22:23:57.344Z","links":[{"id":"tools","hash":""},{"id":"outil-volatility","hash":""},{"id":"outil-process-hacker","hash":""},{"id":"outil-flare-vm","hash":""},{"id":"outil-yara","hash":""},{"id":"outil-x64dbg","hash":""},{"id":"outil-cape","hash":""},{"id":"outil-cuckoo-sandbox","hash":""},{"id":"reverse-engineering-malware-analysis","hash":""}],"backlinks":["reverse-engineering-malware-analysis","glossaire","outil-commando-vm","outil-flare-vm","outil-process-hacker","outil-sift-workstation","outil-x64dbg","tools"]},{"id":"outil-tails-os","path":"Cybersécurité Offensive/Outils/Outil - Tails OS.md","name":"Outil - Tails OS","title":"Outil - Tails OS","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Distributions & Lab","tags":["cyber","outil","distributions","anonymat","tor"],"status":"publie","excerpt":"Tails OS — L'anonymat total sur clé USB (Tor + amnésie)","words":2424,"readTime":11,"modified":"2026-10-06T22:23:57.348Z","links":[{"id":"tools","hash":""},{"id":"outil-kali-linux","hash":""},{"id":"outil-parrot-os","hash":""},{"id":"outil-metasploit","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-flare-vm","hash":""},{"id":"outil-remnux","hash":""}],"backlinks":["outil-kali-linux","outil-parrot-os","tools"]},{"id":"outil-tcpdump","path":"Cybersécurité Offensive/Outils/Outil - tcpdump.md","name":"Outil - tcpdump","title":"Outil - tcpdump","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Réseau & Capture","tags":["cyber","outil","reseau"],"status":"publie","excerpt":"tcpdump — Capture de paquets en ligne de commande","words":2538,"readTime":12,"modified":"2026-10-06T22:23:57.412Z","links":[{"id":"tools","hash":""},{"id":"outil-tshark","hash":""},{"id":"outil-wireshark","hash":""},{"id":"outil-tcpreplay","hash":""},{"id":"outil-hping3","hash":""},{"id":"outil-scapy","hash":""},{"id":"outil-zeek","hash":""},{"id":"outil-suricata","hash":""},{"id":"outil-snort","hash":""}],"backlinks":["post-exploitation","glossaire","outil-cuckoo-sandbox","outil-evilginx2","outil-fakenet-ng","outil-hping3","outil-ncat","outil-netcat","outil-nload","outil-nmap","outil-remnux","outil-scapy","outil-socat","outil-tcpreplay","outil-tshark","outil-wireshark","tools"]},{"id":"outil-tcpreplay","path":"Cybersécurité Offensive/Outils/Outil - tcpreplay.md","name":"Outil - tcpreplay","title":"Outil - tcpreplay","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Réseau & Capture","tags":["cyber","outil","reseau"],"status":"publie","excerpt":"tcpreplay rejoue des captures pcap sur un réseau réel à un débit contrôlé, en réécrivant si besoin les adresses MAC/IP/ports pour tester des équipements, des IDS ou des scénarios d'attaque reproductibles.","words":2996,"readTime":14,"modified":"2026-10-06T22:23:57.412Z","links":[{"id":"tools","hash":""},{"id":"outil-tcpdump","hash":""},{"id":"outil-tshark","hash":""},{"id":"outil-wireshark","hash":""},{"id":"outil-scapy","hash":""},{"id":"outil-suricata","hash":""},{"id":"outil-snort","hash":""},{"id":"outil-zeek","hash":""},{"id":"outil-nmap","hash":""}],"backlinks":["outil-nload","outil-scapy","outil-tcpdump","outil-tshark","outil-wireshark","tools"]},{"id":"outil-theharvester","path":"Cybersécurité Offensive/Outils/Outil - theHarvester.md","name":"Outil - theHarvester","title":"Outil - theHarvester","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Reconnaissance & OSINT","tags":["cyber","outil","Reconnaissance & OSINT"],"status":"publie","excerpt":"theHarvester — Collecte d'emails, hôtes et sous-domaines en OSINT","words":1765,"readTime":8,"modified":"2026-10-06T22:23:57.412Z","links":[{"id":"outil-amass","hash":""},{"id":"outil-subfinder","hash":""},{"id":"outil-httpx","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-hydra","hash":""},{"id":"outil-recon-ng","hash":""},{"id":"outil-shodan-cli","hash":""},{"id":"outil-spiderfoot","hash":""},{"id":"password-spraying","hash":""},{"id":"tools","hash":""},{"id":"reconnaissance","hash":""}],"backlinks":["reconnaissance","scan-enumeration","glossaire","outil-amass","outil-blackarch","outil-censys","outil-cewl","outil-kali-linux","outil-maltego","outil-parrot-os","outil-recon-ng","outil-set","outil-shodan-cli","outil-shodan","outil-spiderfoot","outil-subfinder","tools"]},{"id":"outil-trivy","path":"Cybersécurité Offensive/Outils/Outil - trivy.md","name":"Outil - trivy","title":"Outil - trivy","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Cloud & Containers","tags":["cyber","outil","containers","kubernetes","devsecops"],"status":"publie","excerpt":"trivy - Le scanner omniscient des vulnérabilités","words":2360,"readTime":11,"modified":"2026-10-06T22:23:57.416Z","links":[{"id":"tools","hash":""},{"id":"outil-kube-bench","hash":""},{"id":"outil-kube-hunter","hash":""},{"id":"outil-syft","hash":""},{"id":"outil-grype","hash":""},{"id":"outil-kubectl","hash":""}],"backlinks":["outil-grype","outil-kube-bench","outil-kube-hunter","outil-peirates","outil-syft","tools"]},{"id":"outil-tshark","path":"Cybersécurité Offensive/Outils/Outil - tshark.md","name":"Outil - tshark","title":"Outil - tshark","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Réseau & Capture","tags":["cyber","outil","reseau"],"status":"publie","excerpt":"tshark — L'analyse de paquets en ligne de commande","words":3084,"readTime":14,"modified":"2026-10-06T22:23:57.416Z","links":[{"id":"tools","hash":""},{"id":"outil-tcpdump","hash":""},{"id":"outil-wireshark","hash":""},{"id":"outil-tcpreplay","hash":""},{"id":"outil-zeek","hash":""},{"id":"outil-suricata","hash":""},{"id":"outil-snort","hash":""},{"id":"outil-scapy","hash":""},{"id":"outil-hping3","hash":""},{"id":"outil-nmap","hash":""}],"backlinks":["reverse-engineering-malware-analysis","glossaire","outil-aircrack-ng","outil-bettercap","outil-cape","outil-cuckoo-sandbox","outil-fakenet-ng","outil-hcxdumptool","outil-hping3","outil-kismet","outil-mdk4","outil-ncat","outil-netcat","outil-nload","outil-nmap","outil-scapy","outil-socat","outil-tcpdump","outil-tcpreplay","outil-wifi-pineapple","outil-wifite","outil-wireshark","tools"]},{"id":"outil-unblob","path":"Cybersécurité Offensive/Outils/Outil - unblob.md","name":"Outil - unblob","title":"Outil - unblob","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Malware & Sandbox","tags":["cyber","outil","malware"],"status":"publie","excerpt":"unblob est l'outil le plus précis pour identifier et extraire les systèmes de fichiers et archives embarqués dans une image de firmware, étape indispensable avant l'analyse de tout binaire IoT.","words":2807,"readTime":13,"modified":"2026-10-06T22:23:57.416Z","links":[{"id":"tools","hash":""},{"id":"outil-binwalk","hash":""},{"id":"outil-ghidra","hash":""},{"id":"outil-cutter","hash":""},{"id":"outil-yara","hash":""},{"id":"outil-flare-vm","hash":""},{"id":"reverse-engineering-malware-analysis","hash":""}],"backlinks":["reverse-engineering-malware-analysis","outil-binwalk","tools"]},{"id":"outil-usb-host-shield","path":"Cybersécurité Offensive/Outils/Outil - USB Host Shield.md","name":"Outil - USB Host Shield","title":"Outil - USB Host Shield","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"USB / HID & Gadgets","tags":["cyber","outil","hardware","USB / HID & Gadgets"],"status":"publie","excerpt":"USB Host Shield — L'Arduino en hôte USB (sniffing clavier)","words":3689,"readTime":17,"modified":"2026-10-06T22:23:57.348Z","links":[{"id":"outil-usb-rubber-ducky","hash":""},{"id":"tools","hash":""},{"id":"outil-bash-bunny","hash":""},{"id":"outil-flipper-zero-usb-radio","hash":""},{"id":"outil-duckuino","hash":""},{"id":"protocole-usb","hash":""},{"id":"hardware-arduino","hash":""},{"id":"outil-wireshark","hash":""},{"id":"outil-p4wnp1-a-l-o-a","hash":""}],"backlinks":["outil-duckuino","outil-usb-rubber-ducky","tools"]},{"id":"outil-usb-rubber-ducky","path":"Cybersécurité Offensive/Outils/Outil - USB Rubber Ducky.md","name":"Outil - USB Rubber Ducky","title":"Outil - USB Rubber Ducky","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"USB / HID & Gadgets","tags":["cyber","outil","hardware","USB / HID & Gadgets"],"status":"publie","excerpt":"USB Rubber Ducky — L'injection clavier en quelques millisecondes","words":3016,"readTime":14,"modified":"2026-10-06T22:23:57.348Z","links":[{"id":"outil-bash-bunny","hash":""},{"id":"outil-o-mg-cable","hash":""},{"id":"tools","hash":""},{"id":"outil-hak5-payload-studio","hash":""},{"id":"outil-duckuino","hash":""},{"id":"outil-usb-host-shield","hash":""},{"id":"outil-flipper-zero-usb-radio","hash":""},{"id":"outil-p4wnp1-a-l-o-a","hash":""},{"id":"outil-metasploit","hash":""},{"id":"outil-powershell-empire","hash":""},{"id":"protocole-usb","hash":""},{"id":"hardware-arduino","hash":""},{"id":"reverse-shells","hash":""}],"backlinks":["wireless-mitm-social-engineering","glossaire","outil-bash-bunny","outil-duckuino","outil-flipper-zero-usb-radio","outil-hak5-payload-studio","outil-o-mg-cable","outil-p4wnp1-a-l-o-a","outil-set","outil-usb-host-shield","tools"]},{"id":"outil-velociraptor","path":"Cybersécurité Offensive/Outils/Outil - Velociraptor.md","name":"Outil - Velociraptor","title":"Outil - Velociraptor","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"IDS / SIEM / EDR","tags":["cyber","outil","IDS / SIEM / EDR"],"status":"publie","excerpt":"Velociraptor est une plateforme DFIR/ediscovery qui collecte des preuves à grande","words":3100,"readTime":14,"modified":"2026-10-06T22:23:57.352Z","links":[{"id":"tools","hash":""},{"id":"outil-osquery","hash":""},{"id":"outil-volatility","hash":""},{"id":"outil-wazuh","hash":""},{"id":"outil-elastic","hash":""},{"id":"outil-splunk","hash":""},{"id":"outil-yara","hash":""},{"id":"privilege-escalation-windows","hash":""},{"id":"privilege-escalation-linux","hash":""},{"id":"pivoting-et-tunneling","hash":""}],"backlinks":["glossaire","outil-autopsy","outil-elastic","outil-ftk-imager","outil-graylog","outil-misp","outil-osquery","outil-splunk","outil-volatility","tools"]},{"id":"outil-volatility","path":"Cybersécurité Offensive/Outils/Outil - Volatility.md","name":"Outil - Volatility","title":"Outil - Volatility","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Forensics, Threat Intel & Honeypots","tags":["cyber","outil","Forensics, Threat Intel & Honeypots"],"status":"publie","excerpt":"Volatility — Forensics, Threat Intel & Honeypots","words":2653,"readTime":12,"modified":"2026-10-06T22:23:57.352Z","links":[{"id":"tools","hash":""},{"id":"outil-ftk-imager","hash":""},{"id":"outil-velociraptor","hash":""},{"id":"outil-yara","hash":""},{"id":"outil-autopsy","hash":""},{"id":"outil-misp","hash":""},{"id":"outil-elastic","hash":""},{"id":"reverse-engineering-malware-analysis","hash":""},{"id":"cheatsheets","hash":""}],"backlinks":["reverse-engineering-malware-analysis","glossaire","outil-autopsy","outil-cape","outil-cowrie","outil-cuckoo-sandbox","outil-ftk-imager","outil-kali-linux","outil-process-hacker","outil-remnux","outil-sift-workstation","outil-sysinternals-suite","outil-velociraptor","outil-yara","tools"]},{"id":"outil-waybackurls","path":"Cybersécurité Offensive/Outils/Outil - waybackurls.md","name":"Outil - waybackurls","title":"Outil - waybackurls","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Reconnaissance & OSINT","tags":["cyber","outil","recon"],"status":"publie","excerpt":"waybackurls — Extraction d'URLs historiques (Wayback Machine)","words":1751,"readTime":8,"modified":"2026-10-06T22:23:57.416Z","links":[{"id":"outil-gau","hash":""},{"id":"outil-httpx","hash":""},{"id":"outil-katana","hash":""},{"id":"outil-subfinder","hash":""},{"id":"outil-nuclei","hash":""},{"id":"outil-ffuf","hash":""},{"id":"gobuster-brute-force-de-repertoires-dns-et-vhosts","hash":""},{"id":"outil-waybackurls","hash":""},{"id":"tools","hash":""},{"id":"reconnaissance","hash":""}],"backlinks":["reconnaissance","glossaire","outil-gau","outil-httpx","outil-katana","outil-waybackurls","tools"]},{"id":"outil-wazuh","path":"Cybersécurité Offensive/Outils/Outil - Wazuh.md","name":"Outil - Wazuh","title":"Outil - Wazuh","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"IDS / SIEM / EDR","tags":["cyber","outil","IDS / SIEM / EDR"],"status":"publie","excerpt":"Wazuh est une plateforme XDR/SIEM open source (agent + manager) qui collecte logs,","words":2528,"readTime":11,"modified":"2026-10-06T22:23:57.352Z","links":[{"id":"tools","hash":""},{"id":"outil-elastic","hash":""},{"id":"outil-suricata","hash":""},{"id":"outil-yara","hash":""},{"id":"outil-misp","hash":""},{"id":"outil-sigma","hash":""},{"id":"outil-osquery","hash":""},{"id":"privilege-escalation-windows","hash":""},{"id":"privilege-escalation-linux","hash":""},{"id":"reverse-shells","hash":""}],"backlinks":["glossaire","outil-autopsy","outil-canarytokens","outil-cowrie","outil-elastic","outil-graylog","outil-osquery","outil-snort","outil-splunk","outil-suricata","outil-velociraptor","outil-yara","tools"]},{"id":"outil-weeman","path":"Cybersécurité Offensive/Outils/Outil - Weeman.md","name":"Outil - Weeman","title":"Outil - Weeman","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Social Engineering & Phishing","tags":["cyber","outil","social-engineering"],"status":"publie","excerpt":"Weeman — Cloneur de pages web pour le credential harvesting (HTTP)","words":2544,"readTime":12,"modified":"2026-10-06T22:23:57.352Z","links":[{"id":"outil-evilginx2","hash":""},{"id":"tools","hash":""},{"id":"outil-socialfish","hash":""},{"id":"outil-set","hash":""},{"id":"outil-modlishka","hash":""},{"id":"outil-responder","hash":""},{"id":"outil-mitmproxy","hash":""},{"id":"outil-nmap","hash":""},{"id":"wireless-mitm-social-engineering","hash":""},{"id":"outil-credsniper","hash":""},{"id":"outil-gophish","hash":""}],"backlinks":["wireless-mitm-social-engineering","outil-set","outil-socialfish","tools"]},{"id":"outil-wfuzz","path":"Cybersécurité Offensive/Outils/Outil - wfuzz.md","name":"Outil - wfuzz","title":"Outil - wfuzz","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Scan Web & Fuzzing","tags":["cyber","outil","Scan Web & Fuzzing"],"status":"publie","excerpt":"wfuzz est un fuzzer web en Python qui remplace le mot-clé FUZZ dans les URL, headers, cookies ou corps de requête pour tester paramètres et valeurs.","words":2741,"readTime":12,"modified":"2026-10-06T22:23:57.420Z","links":[{"id":"tools","hash":""},{"id":"outil-ffuf","hash":""},{"id":"gobuster-brute-force-de-repertoires-dns-et-vhosts","hash":""},{"id":"outil-feroxbuster","hash":""},{"id":"outil-burp-suite","hash":""},{"id":"hidden-parameters","hash":""},{"id":"idor","hash":""},{"id":"brute-force-rate-limit","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["glossaire","outil-cewl","outil-ffuf","outil-seclists","outil-xsstrike","tools"]},{"id":"outil-wifi-pineapple","path":"Cybersécurité Offensive/Outils/Outil - WiFi Pineapple.md","name":"Outil - WiFi Pineapple","title":"Outil - WiFi Pineapple","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"USB / HID & Gadgets","tags":["cyber","outil","hardware","USB / HID & Gadgets"],"status":"publie","excerpt":"WiFi Pineapple — Rogue AP, PineAP et Evil Portal","words":3607,"readTime":16,"modified":"2026-10-06T22:23:57.356Z","links":[{"id":"outil-responder","hash":""},{"id":"pass-the-hash","hash":""},{"id":"tools","hash":""},{"id":"outil-wireshark","hash":""},{"id":"outil-tshark","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-evilginx2","hash":""},{"id":"outil-bettercap","hash":""},{"id":"outil-aircrack-ng","hash":""},{"id":"outil-wifite","hash":""},{"id":"outil-wifiphisher","hash":""},{"id":"outil-metasploit","hash":""},{"id":"outil-powershell-empire","hash":""},{"id":"attaques-wifi-rogue-ap","hash":""},{"id":"llmnr-nbt-ns-poisoning","hash":""},{"id":"attaques-wifi-wpa2-et-pmkid","hash":""}],"backlinks":["wireless-mitm-social-engineering","glossaire","outil-flipper-zero-usb-radio","outil-o-mg-cable","outil-set","tools"]},{"id":"outil-wifiphisher","path":"Cybersécurité Offensive/Outils/Outil - Wifiphisher.md","name":"Outil - Wifiphisher","title":"Outil - Wifiphisher","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Wireless & Réseau","tags":["cyber","outil","Wireless & Réseau"],"status":"publie","excerpt":"Outil d' evil twin / rogue AP qui clône un réseau WiFi et sert un portail captif de phishing (templates de « mise à jour du routeur », de login, etc.) pour voler la passphrase WPA ou des identifiants — la pièce maître…","words":2956,"readTime":13,"modified":"2026-10-06T22:23:57.356Z","links":[{"id":"tools","hash":""},{"id":"outil-aircrack-ng","hash":""},{"id":"outil-mdk4","hash":""},{"id":"outil-bettercap","hash":""},{"id":"outil-wifite","hash":""},{"id":"attaques-wifi-rogue-ap","hash":""},{"id":"attaques-wifi-enterprise","hash":""},{"id":"attaques-wifi-wpa2-psk","hash":""}],"backlinks":["wireless-mitm-social-engineering","glossaire","outil-bettercap","outil-wifi-pineapple","tools"]},{"id":"outil-wifite","path":"Cybersécurité Offensive/Outils/Outil - Wifite.md","name":"Outil - Wifite","title":"Outil - Wifite","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Wireless & Réseau","tags":["cyber","outil","Wireless & Réseau"],"status":"publie","excerpt":"Script d'attaque WiFi entièrement automatisé : scan des réseaux, sélection automatique de la cible la plus faible et lancement de l'attaque WEP/WPA/WPS adaptée — un « push-button » pensé pour gagner du temps.","words":2637,"readTime":12,"modified":"2026-10-06T22:23:57.356Z","links":[{"id":"tools","hash":""},{"id":"outil-aircrack-ng","hash":""},{"id":"outil-reaver","hash":""},{"id":"outil-hcxdumptool","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-tshark","hash":""},{"id":"attaques-wifi-wpa2-et-pmkid","hash":""},{"id":"attaques-wifi-wps","hash":""},{"id":"attaques-wifi-wpa2-psk","hash":""}],"backlinks":["wireless-mitm-social-engineering","password-cracking","cheatsheets","glossaire","outil-aircrack-ng","outil-blackarch","outil-hcxdumptool","outil-kali-linux","outil-kismet","outil-o-mg-cable","outil-parrot-os","outil-reaver","outil-wifi-pineapple","outil-wifiphisher","tools"]},{"id":"outil-wireshark","path":"Cybersécurité Offensive/Outils/Outil - Wireshark.md","name":"Outil - Wireshark","title":"Outil - Wireshark","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Réseau & Capture","tags":["cyber","outil","reseau"],"status":"publie","excerpt":"Wireshark est l'analyseur de protocoles de référence pour inspecter en profondeur chaque paquet capturé sur le réseau.","words":2864,"readTime":13,"modified":"2026-10-06T22:23:57.360Z","links":[{"id":"tools","hash":""},{"id":"outil-tshark","hash":""},{"id":"outil-tcpdump","hash":""},{"id":"outil-scapy","hash":""},{"id":"outil-zeek","hash":""},{"id":"outil-suricata","hash":""},{"id":"outil-snort","hash":""},{"id":"outil-tcpreplay","hash":""},{"id":"outil-aircrack-ng","hash":""},{"id":"outil-hcxdumptool","hash":""},{"id":"outil-cyberchef","hash":""},{"id":"arp-spoofing-et-mitm","hash":""}],"backlinks":["scan-enumeration","active-directory","post-exploitation","reverse-engineering-malware-analysis","cheatsheets","glossaire","outil-aircrack-ng","outil-bettercap","outil-cape","outil-cuckoo-sandbox","outil-evilginx2","outil-fakenet-ng","outil-flare-vm","outil-hcxdumptool","outil-kismet","outil-mdk4","outil-nload","outil-parrot-os","outil-remnux","outil-scapy","outil-sift-workstation","outil-tcpdump","outil-tcpreplay","outil-tshark","outil-usb-host-shield","outil-wifi-pineapple","tools"]},{"id":"outil-wpscan","path":"Cybersécurité Offensive/Outils/Outil - wpscan.md","name":"Outil - wpscan","title":"Outil - wpscan","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Scan Web & Fuzzing","tags":["cyber","outil","Scan Web & Fuzzing"],"status":"publie","excerpt":"wpscan est un scanner WordPress qui énumère plugins, thèmes et utilisateurs, et détecte les vulnérabilités connues du CMS.","words":2574,"readTime":12,"modified":"2026-10-06T22:23:57.420Z","links":[{"id":"tools","hash":""},{"id":"outil-nuclei","hash":""},{"id":"gobuster-brute-force-de-repertoires-dns-et-vhosts","hash":""},{"id":"outil-ffuf","hash":""},{"id":"outil-burp-suite","hash":""},{"id":"outil-owasp-zap","hash":""},{"id":"brute-force-rate-limit","hash":""},{"id":"virtual-hosts","hash":""},{"id":"exploitation-web","hash":""}],"backlinks":["glossaire","outil-xsstrike","tools"]},{"id":"outil-x64dbg","path":"Cybersécurité Offensive/Outils/Outil - x64dbg.md","name":"Outil - x64dbg","title":"Outil - x64dbg","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Malware & Sandbox","tags":["cyber","outil","malware"],"status":"publie","excerpt":"x64dbg — Débogueur assembleur Windows pour malwares","words":3102,"readTime":14,"modified":"2026-10-06T22:23:57.420Z","links":[{"id":"tools","hash":""},{"id":"outil-ghidra","hash":""},{"id":"outil-cutter","hash":""},{"id":"outil-cape","hash":""},{"id":"outil-cuckoo-sandbox","hash":""},{"id":"outil-dnspy","hash":""},{"id":"outil-yara","hash":""},{"id":"outil-sysinternals-suite","hash":""},{"id":"outil-flare-vm","hash":""},{"id":"reverse-engineering-malware-analysis","hash":""}],"backlinks":["reverse-engineering-malware-analysis","glossaire","outil-cape","outil-cutter","outil-dnspy","outil-flare-vm","outil-ghidra","outil-process-hacker","outil-radare2","outil-sysinternals-suite","tools"]},{"id":"outil-xsstrike","path":"Cybersécurité Offensive/Outils/Outil - XSStrike.md","name":"Outil - XSStrike","title":"Outil - XSStrike","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Social Engineering & Phishing","tags":["cyber","outil","Social Engineering & Phishing"],"status":"publie","excerpt":"XSStrike — Détection et exploitation de XSS (Cross-Site Scripting)","words":3517,"readTime":16,"modified":"2026-10-06T22:23:57.360Z","links":[{"id":"outil-beef","hash":""},{"id":"xss-cross-site-scripting","hash":""},{"id":"tools","hash":""},{"id":"outil-burp-suite","hash":""},{"id":"outil-sqlmap","hash":""},{"id":"outil-wpscan","hash":""},{"id":"outil-nuclei","hash":""},{"id":"outil-owasp-zap","hash":""},{"id":"outil-nmap","hash":""},{"id":"clickjacking","hash":""},{"id":"open-redirect","hash":""},{"id":"csrf","hash":""},{"id":"exploitation-web","hash":""},{"id":"outil-wfuzz","hash":""}],"backlinks":["wireless-mitm-social-engineering","glossaire","tools"]},{"id":"outil-yara","path":"Cybersécurité Offensive/Outils/Outil - YARA.md","name":"Outil - YARA","title":"Outil - YARA","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"Forensics, Threat Intel & Honeypots","tags":["cyber","outil","Forensics, Threat Intel & Honeypots"],"status":"publie","excerpt":"YARA est un langage de règles pour identifier et classer les familles de malwares par signatures (chaînes, opcodes, heuristiques), utilisé dans toute la chaîne d'analyse : sandbox, SOC, threat intel et IR.","words":2490,"readTime":11,"modified":"2026-10-06T22:23:57.360Z","links":[{"id":"tools","hash":""},{"id":"outil-misp","hash":""},{"id":"outil-volatility","hash":""},{"id":"outil-autopsy","hash":""},{"id":"outil-wazuh","hash":""},{"id":"outil-cuckoo-sandbox","hash":""},{"id":"reverse-engineering-malware-analysis","hash":""},{"id":"glossaire","hash":""}],"backlinks":["reverse-engineering-malware-analysis","cheatsheets","glossaire","outil-autopsy","outil-cape","outil-cowrie","outil-cuckoo-sandbox","outil-dnspy","outil-elastic","outil-fakenet-ng","outil-flare-vm","outil-ftk-imager","outil-misp","outil-oletools","outil-opencti","outil-process-hacker","outil-remnux","outil-sigma","outil-sysinternals-suite","outil-unblob","outil-velociraptor","outil-volatility","outil-wazuh","outil-x64dbg","tools"]},{"id":"outil-zeek","path":"Cybersécurité Offensive/Outils/Outil - Zeek.md","name":"Outil - Zeek","title":"Outil - Zeek","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"IDS / SIEM / EDR","tags":["cyber","outil","IDS / SIEM / EDR"],"status":"publie","excerpt":"Zeek (ex-Bro) est un NSM (Network Security Monitor) qui, sans règles de signatures,","words":2622,"readTime":12,"modified":"2026-10-06T22:23:57.360Z","links":[{"id":"tools","hash":""},{"id":"outil-suricata","hash":""},{"id":"outil-snort","hash":""},{"id":"outil-elastic","hash":""},{"id":"outil-splunk","hash":""},{"id":"outil-graylog","hash":""},{"id":"outil-misp","hash":""},{"id":"outil-sigma","hash":""},{"id":"reverse-shells","hash":""},{"id":"pivoting-et-tunneling","hash":""},{"id":"llmnr-nbt-ns-poisoning","hash":""}],"backlinks":["glossaire","outil-elastic","outil-snort","outil-suricata","outil-tcpdump","outil-tcpreplay","outil-tshark","outil-wireshark","tools"]},{"id":"outil-zsteg","path":"Cybersécurité Offensive/Outils/Outil - zsteg.md","name":"Outil - zsteg","title":"Outil - zsteg","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"outil","category":"CTF & Développement","tags":["cyber","outil","ctf"],"status":"publie","excerpt":"zsteg — La détection automatique de stéganographie (PNG & BMP)","words":2373,"readTime":11,"modified":"2026-10-06T22:23:57.424Z","links":[{"id":"outil-stegsolve","hash":""},{"id":"outil-cyberchef","hash":""},{"id":"outil-exiftool","hash":""},{"id":"outil-binwalk","hash":""},{"id":"tools","hash":""},{"id":"cheatsheets","hash":""},{"id":"outil-ghidra","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-john-the-ripper","hash":""}],"backlinks":["reverse-engineering-malware-analysis","outil-binwalk","outil-cyberchef","outil-exiftool","outil-stegsolve","tools"]},{"id":"tools","path":"Cybersécurité Offensive/Outils/Tools.md","name":"Tools","title":"Tools","folder":"Cybersécurité Offensive/Outils","group":"Outils","type":"hub","category":"hub","tags":["cyber","hub"],"status":"publie","excerpt":"Chaque fiche décrit un outil de cybersécurité en détail : concept, installation, commandes","words":2951,"readTime":13,"modified":"2026-10-06T22:23:57.424Z","links":[{"id":"outil-amass","hash":""},{"id":"outil-censys","hash":""},{"id":"outil-chaos","hash":""},{"id":"outil-dnsx","hash":""},{"id":"outil-gau","hash":""},{"id":"outil-httpx","hash":""},{"id":"outil-katana","hash":""},{"id":"outil-maltego","hash":""},{"id":"outil-masscan","hash":""},{"id":"outil-naabu","hash":""},{"id":"outil-nmap","hash":""},{"id":"outil-recon-ng","hash":""},{"id":"outil-rustscan","hash":""},{"id":"outil-shodan","hash":""},{"id":"outil-shodan-cli","hash":""},{"id":"outil-spiderfoot","hash":""},{"id":"outil-subfinder","hash":""},{"id":"outil-theharvester","hash":""},{"id":"outil-waybackurls","hash":""},{"id":"outil-burp-extensions-bapp-store","hash":""},{"id":"outil-burp-suite","hash":""},{"id":"outil-caido","hash":""},{"id":"outil-dirsearch","hash":""},{"id":"outil-feroxbuster","hash":""},{"id":"outil-ffuf","hash":""},{"id":"gobuster-brute-force-de-repertoires-dns-et-vhosts","hash":""},{"id":"outil-mitmproxy","hash":""},{"id":"outil-nikto","hash":""},{"id":"outil-nuclei","hash":""},{"id":"outil-owasp-zap","hash":""},{"id":"outil-wfuzz","hash":""},{"id":"outil-wpscan","hash":""},{"id":"outil-crackmapexec","hash":""},{"id":"outil-hashcat","hash":""},{"id":"outil-hashid","hash":""},{"id":"outil-hash-identifier","hash":""},{"id":"outil-hydra","hash":""},{"id":"outil-john-the-ripper","hash":""},{"id":"outil-linpeas","hash":""},{"id":"outil-medusa","hash":""},{"id":"outil-name-that-hash","hash":""},{"id":"outil-ncrack","hash":""},{"id":"outil-patator","hash":""},{"id":"outil-searchsploit","hash":""},{"id":"outil-sqlmap","hash":""},{"id":"outil-bloodhound","hash":""},{"id":"outil-evil-winrm","hash":""},{"id":"outil-impacket","hash":""},{"id":"outil-kerbrute","hash":""},{"id":"outil-mimikatz","hash":""},{"id":"outil-mitm6","hash":""},{"id":"outil-responder","hash":""},{"id":"outil-rubeus","hash":""},{"id":"outil-chisel","hash":""},{"id":"outil-covenant","hash":""},{"id":"outil-havoc","hash":""},{"id":"outil-ligolo-ng","hash":""},{"id":"outil-metasploit","hash":""},{"id":"outil-mythic","hash":""},{"id":"outil-powershell-empire","hash":""},{"id":"outil-sliver","hash":""},{"id":"outil-aircrack-ng","hash":""},{"id":"outil-bettercap","hash":""},{"id":"outil-hcxdumptool","hash":""},{"id":"outil-kismet","hash":""},{"id":"outil-mdk4","hash":""},{"id":"outil-reaver","hash":""},{"id":"outil-wifiphisher","hash":""},{"id":"outil-wifite","hash":""},{"id":"outil-apktool","hash":""},{"id":"outil-cutter","hash":""},{"id":"outil-frida","hash":""},{"id":"outil-ghidra","hash":""},{"id":"outil-jadx","hash":""},{"id":"outil-mobsf","hash":""},{"id":"outil-objection","hash":""},{"id":"outil-radare2","hash":""},{"id":"outil-beef","hash":""},{"id":"outil-credsniper","hash":""},{"id":"outil-evilginx2","hash":""},{"id":"outil-gophish","hash":""},{"id":"outil-king-phisher","hash":""},{"id":"outil-modlishka","hash":""},{"id":"outil-set","hash":""},{"id":"outil-socialfish","hash":""},{"id":"outil-weeman","hash":""},{"id":"outil-xsstrike","hash":""},{"id":"outil-bash-bunny","hash":""},{"id":"outil-duckuino","hash":""},{"id":"outil-flipper-zero-usb-radio","hash":""},{"id":"outil-hak5-payload-studio","hash":""},{"id":"outil-o-mg-cable","hash":""},{"id":"outil-p4wnp1-a-l-o-a","hash":""},{"id":"outil-usb-host-shield","hash":""},{"id":"outil-usb-rubber-ducky","hash":""},{"id":"outil-wifi-pineapple","hash":""},{"id":"outil-binwalk","hash":""},{"id":"outil-cyberchef","hash":""},{"id":"outil-exiftool","hash":""},{"id":"outil-gdb-peda","hash":""},{"id":"outil-pwntools","hash":""},{"id":"outil-ropgadget","hash":""},{"id":"outil-rsactftool","hash":""},{"id":"outil-stegsolve","hash":""},{"id":"outil-zsteg","hash":""},{"id":"outil-brutedum","hash":""},{"id":"outil-cewl","hash":""},{"id":"outil-crunch","hash":""},{"id":"outil-cupp","hash":""},{"id":"outil-kwprocessor","hash":""},{"id":"outil-mentalist","hash":""},{"id":"outil-oneruletorulethemall","hash":""},{"id":"outil-pydictor","hash":""},{"id":"outil-rsmangler","hash":""},{"id":"outil-seclists","hash":""},{"id":"outil-blackarch","hash":""},{"id":"outil-commando-vm","hash":""},{"id":"outil-flare-vm","hash":""},{"id":"outil-kali-linux","hash":""},{"id":"outil-parrot-os","hash":""},{"id":"outil-remnux","hash":""},{"id":"outil-sift-workstation","hash":""},{"id":"outil-tails-os","hash":""},{"id":"outil-cloudfox","hash":""},{"id":"outil-kubectl","hash":""},{"id":"outil-pacu","hash":""},{"id":"outil-prowler","hash":""},{"id":"outil-scoutsuite","hash":""},{"id":"outil-hping3","hash":""},{"id":"outil-nload","hash":""},{"id":"outil-scapy","hash":""},{"id":"outil-tcpdump","hash":""},{"id":"outil-tcpreplay","hash":""},{"id":"outil-tshark","hash":""},{"id":"outil-wireshark","hash":""},{"id":"outil-cape","hash":""},{"id":"outil-cuckoo-sandbox","hash":""},{"id":"outil-dnspy","hash":""},{"id":"outil-fakenet-ng","hash":""},{"id":"outil-oletools","hash":""},{"id":"outil-process-hacker","hash":""},{"id":"outil-sysinternals-suite","hash":""},{"id":"outil-unblob","hash":""},{"id":"outil-x64dbg","hash":""},{"id":"outil-elastic","hash":""},{"id":"outil-graylog","hash":""},{"id":"outil-osquery","hash":""},{"id":"outil-snort","hash":""},{"id":"outil-splunk","hash":""},{"id":"outil-suricata","hash":""},{"id":"outil-velociraptor","hash":""},{"id":"outil-wazuh","hash":""},{"id":"outil-zeek","hash":""},{"id":"outil-autopsy","hash":""},{"id":"outil-canarytokens","hash":""},{"id":"outil-cowrie","hash":""},{"id":"outil-ftk-imager","hash":""},{"id":"outil-misp","hash":""},{"id":"outil-opencti","hash":""},{"id":"outil-sigma","hash":""},{"id":"outil-volatility","hash":""},{"id":"outil-yara","hash":""},{"id":"outil-grype","hash":""},{"id":"outil-kube-bench","hash":""},{"id":"outil-kube-hunter","hash":""},{"id":"outil-peirates","hash":""},{"id":"outil-syft","hash":""},{"id":"outil-trivy","hash":""},{"id":"outil-ncat","hash":""},{"id":"outil-netcat","hash":""},{"id":"outil-socat","hash":""},{"id":"bibliotheque-technique","hash":""},{"id":"tools","hash":""},{"id":"cheatsheets","hash":""},{"id":"ressources-lab","hash":""}],"backlinks":["reconnaissance","scan-enumeration","exploitation-reseau","active-directory","password-cracking","reverse-engineering-malware-analysis","index","outil-aircrack-ng","outil-amass","outil-apktool","outil-autopsy","outil-bash-bunny","outil-beef","outil-bettercap","outil-binwalk","outil-blackarch","outil-brutedum","outil-burp-extensions-bapp-store","outil-burp-suite","outil-caido","outil-canarytokens","outil-cape","outil-censys","outil-cewl","outil-chaos","outil-chisel","outil-cloudfox","outil-commando-vm","outil-covenant","outil-cowrie","outil-crackmapexec","outil-credsniper","outil-crunch","outil-cuckoo-sandbox","outil-cupp","outil-cutter","outil-cyberchef","outil-dirsearch","outil-dnspy","outil-dnsx","outil-duckuino","outil-elastic","outil-evilginx2","outil-exiftool","outil-fakenet-ng","outil-feroxbuster","outil-ffuf","outil-flare-vm","outil-flipper-zero-usb-radio","outil-frida","outil-ftk-imager","outil-gau","outil-gdb-peda","outil-ghidra","gobuster-brute-force-de-repertoires-dns-et-vhosts","outil-gophish","outil-graylog","outil-grype","outil-hak5-payload-studio","outil-hash-identifier","outil-hashcat","outil-hashid","outil-havoc","outil-hcxdumptool","outil-hping3","outil-httpx","outil-hydra","outil-jadx","outil-john-the-ripper","outil-kali-linux","outil-katana","outil-king-phisher","outil-kismet","outil-kube-bench","outil-kube-hunter","outil-kubectl","outil-kwprocessor","outil-ligolo-ng","outil-linpeas","outil-maltego","outil-masscan","outil-mdk4","outil-medusa","outil-mentalist","outil-metasploit","outil-misp","outil-mitmproxy","outil-mobsf","outil-modlishka","outil-mythic","outil-naabu","outil-name-that-hash","outil-ncat","outil-ncrack","outil-netcat","outil-nikto","outil-nload","outil-nmap","outil-nuclei","outil-o-mg-cable","outil-objection","outil-oletools","outil-oneruletorulethemall","outil-opencti","outil-osquery","outil-owasp-zap","outil-p4wnp1-a-l-o-a","outil-pacu","outil-parrot-os","outil-patator","outil-peirates","outil-powershell-empire","outil-process-hacker","outil-prowler","outil-pwntools","outil-pydictor","outil-radare2","outil-reaver","outil-recon-ng","outil-remnux","outil-ropgadget","outil-rsactftool","outil-rsmangler","outil-rustscan","outil-scapy","outil-scoutsuite","outil-searchsploit","outil-seclists","outil-set","outil-shodan-cli","outil-shodan","outil-sift-workstation","outil-sigma","outil-sliver","outil-snort","outil-socat","outil-socialfish","outil-spiderfoot","outil-splunk","outil-sqlmap","outil-stegsolve","outil-subfinder","outil-suricata","outil-syft","outil-sysinternals-suite","outil-tails-os","outil-tcpdump","outil-tcpreplay","outil-theharvester","outil-trivy","outil-tshark","outil-unblob","outil-usb-host-shield","outil-usb-rubber-ducky","outil-velociraptor","outil-volatility","outil-waybackurls","outil-wazuh","outil-weeman","outil-wfuzz","outil-wifi-pineapple","outil-wifiphisher","outil-wifite","outil-wireshark","outil-wpscan","outil-x64dbg","outil-xsstrike","outil-yara","outil-zeek","outil-zsteg","tools","outil-nom"]},{"id":"outil-nom","path":"Templates/Outil - Fiche.md","name":"Outil - Fiche","title":"Outil - <Nom>","folder":"Templates","group":"Templates","type":"outil","category":"<Catégorie du vault>","tags":["cyber","outil","<categorie>"],"status":"publie","excerpt":"Type d'outil CLI / GUI / framework / library / service","words":385,"readTime":2,"modified":"2026-10-06T22:23:57.548Z","links":[{"id":"tools","hash":""}],"backlinks":[]},{"id":"tp-file-title","path":"Templates/Technique - Fiche.md","name":"Technique - Fiche","title":"<% tp.file.title %>","folder":"Templates","group":"Templates","type":"technique","category":"","tags":["[cyber, technique]"],"status":"brouillon","excerpt":"Note du vault Offsidian.","words":67,"readTime":1,"modified":"2026-10-06T22:23:57.548Z","links":[{"id":"index","hash":""}],"backlinks":[]},{"id":"templates-tp-file-title","path":"Templates/Technique - Hardware Fiche.md","name":"Technique - Hardware Fiche","title":"<% tp.file.title %>","folder":"Templates","group":"Templates","type":"technique","category":"hardware","tags":["cyber","technique","hardware","iot"],"status":"brouillon","excerpt":"Type Protocole / Bus / Outil / Carte / Concept","words":763,"readTime":3,"modified":"2026-10-06T22:23:57.548Z","links":[{"id":"hardware-iot-pentesting","hash":""}],"backlinks":[]}]}