# Background & Preparation

| **`Introduction`**                                                                 |
| ---------------------------------------------------------------------------------- |
| 1. [Penetration Testing Process](https://academy.hackthebox.com/module/details/90) |
| 2. [Getting Started](https://academy.hackthebox.com/module/details/77)             |

| **`Reconnaissance, Enumeration & Attack Planning`**                                         |
| ------------------------------------------------------------------------------------------- |
| 3. [Network Enumeration with Nmap](https://academy.hackthebox.com/module/details/19)        |
| 4. [Footprinting](https://academy.hackthebox.com/module/details/112)                        |
| 5. [Information Gathering - Web Edition](https://academy.hackthebox.com/module/details/144) |
| 6. [Vulnerability Assessment](https://academy.hackthebox.com/module/details/108)            |
| 7. [File Transfers](https://academy.hackthebox.com/module/details/24)                       |
| 8. [Shells & Payloads](https://academy.hackthebox.com/module/details/115)                   |
| 9. [Using the Metasploit Framework](https://academy.hackthebox.com/module/details/39)       |

| **`Exploitation & Lateral Movement`**                                                             |
| ------------------------------------------------------------------------------------------------- |
| 10. [Password Attacks](https://academy.hackthebox.com/module/details/147)                         |
| 11. [Attacking Common Services](https://academy.hackthebox.com/module/details/116)                |
| 12. [Pivoting, Tunneling, and Port Forwarding](https://academy.hackthebox.com/module/details/158) |
| 13. [Active Directory Enumeration & Attacks](https://academy.hackthebox.com/module/details/143)   |

| **`Web Exploitation`**                                                                       |
| -------------------------------------------------------------------------------------------- |
| 14. [Using Web Proxies](https://academy.hackthebox.com/module/details/110)                   |
| 15. [Attacking Web Applications with Ffuf](https://academy.hackthebox.com/module/details/54) |
| 16. [Login Brute Forcing](https://academy.hackthebox.com/module/details/57)                  |
| 17. [SQL Injection Fundamentals](https://academy.hackthebox.com/module/details/33)           |
| 18. [SQLMap Essentials](https://academy.hackthebox.com/module/details/58)                    |
| 19. [Cross-Site Scripting (XSS)](https://academy.hackthebox.com/module/details/103)          |
| 20. [File Inclusion](https://academy.hackthebox.com/module/details/23)                       |
| 21. [File Upload Attacks](https://academy.hackthebox.com/module/details/136)                 |
| 22. [Command Injections](https://academy.hackthebox.com/module/details/109)                  |
| 23. [Web Attacks](https://academy.hackthebox.com/module/details/134)                         |
| 24. [Attacking Common Applications](https://academy.hackthebox.com/module/details/113)       |

| **`Post-Exploitation`**                                                              |
| ------------------------------------------------------------------------------------ |
| 25. [Linux Privilege Escalation](https://academy.hackthebox.com/module/details/51)   |
| 26. [Windows Privilege Escalation](https://academy.hackthebox.com/module/details/67) |

| **`Reporting & Capstone`**                                                             |
| -------------------------------------------------------------------------------------- |
| 27. [Documentation & Reporting](https://academy.hackthebox.com/module/details/162)     |
| 28. [Attacking Enterprise Networks](https://academy.hackthebox.com/module/details/163) |

<figure><img src="https://3697469405-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FSrcwXlKGkwhzbrKa8vLU%2Fuploads%2FbTJm6q9aX4Uy2YlUwxcK%2Fimage.png?alt=media&#x26;token=be55f0a9-12aa-4fe3-8cc1-f2362155c0de" alt=""><figcaption></figcaption></figure>
