pentest-everything VS AutoRecon

Credits to the creator of these resources - Tib3rius Privilege Escalation Courses (Windows & Linux) - Tib3rius AutoRecon: https://github.com/Tib3rius/AutoRecon - https://github.com/mchern1kov/pentest-everything - https://kashz.gitbook.io/kashz-jewels/ - https://book.hacktricks.xyz/

My suggestions - Work-life-study balance, of course. Don't try too hard. Take as much time as you need, stay balanced and healthy. Your health is more important than any certification. And stay calm. Really, don't think about it too much, just live your life. - Prepare a cheatsheet for the exam. I know there are many websites with pentester cheatsheets, but I still suggest you to create your own one in which you'd be sure of. Here's what I created: https://github.com/mchern1kov/pentest-everything. Don't worry, Offsec, I made it before even starting the PWK, no materials from the course are used. Again, I suggest you to use mine just as an example and CREATE YOUR OWN.

pipx install git+https://github.com/Tib3rius/AutoRecon.git

Yeah it's been out for about a year now. Same repo, just a version update. https://github.com/Tib3rius/AutoRecon

smbmap - I believe so as it is a part of https://github.com/Tib3rius/AutoRecon

It sounds like you’re looking for something like AutoRecon.

I used AutoRecon (thanks tibs) and PEAS for both linux and windows privesc. But again, the reason I failed the first time was because I relied to heavily on these tools. I really like the disclaimer on the autorecon github:

Initial Recon/Exploitation - Initial scan your target with either autorecon (https://github.com/Tib3rius/AutoRecon) or an in-depth nmap scan. Then, for each port, enumerate with commands from hacktricks (https://book.hacktricks.xyz/), (https://fareedfauzi.gitbook.io/oscp-notes/services-enumeration/http-s/enumeration-checklist) and (https://web.archive.org/web/20200309204648/http://0daysecurity.com/penetration-testing/enumeration.html) but you could honestly just get away with hacktricks. If you see any sort of service, CMS, or whatever running, searchsploit it. Sometimes, you might get lucky and find an exploit that you can use or can keep in your back pocket for PE later. If you need help with how to actually do an exploit (https://ippsec.rocks/?#) is your friend. IPPSEC is the GOAT.

Credits to the creator of these resources - Tib3rius Privilege Escalation Courses (Windows & Linux) - Tib3rius AutoRecon: https://github.com/Tib3rius/AutoRecon - https://github.com/mchern1kov/pentest-everything - https://kashz.gitbook.io/kashz-jewels/ - https://book.hacktricks.xyz/