Knowledge Base
Johan Beysen
Wat is dit?
Persoonlijke kennisbank voor cybersecurity, netwerken, systeembeheer, databanken, scripting en cloud.
Inhoud
Ethical Hacking — Web Application Security
| Pagina |
Onderwerp |
| SQL Injection |
SQLi detectie, UNION attacks, blind SQLi, cheat sheet |
| Broken Access Control |
IDOR, privilege escalation |
| Horizontal & Vertical Access Control |
Concept uitleg |
| XSS |
Reflected, stored, DOM-based, filter bypasses |
| CORS |
SOP, misconfiguraties, exploitatie |
| Information Disclosure |
Headers, error pages, .git exposure |
| Authentication Bypass |
Username enum, brute force, logic flaws, MFA bypass |
| SSRF |
Server-Side Request Forgery |
| Path Traversal |
Directory traversal aanvallen |
| File Upload Vulnerabilities |
Upload bypass technieken |
| Server Side Vulnerabilities |
Path traversal, SSRF, file upload, command injection |
| Webapp Pentest Stappenplan |
OWASP-gebaseerd stappenplan |
Ethical Hacking — API Security
| Pagina |
Onderwerp |
| Nmap |
Port scanning, service detection, NSE scripts |
| Mimikatz |
Credential dumping, Kerberos, DCSync |
| Atomic Red Team |
Detection validation, purple teaming, ATT&CK |
| AMSI Testing |
Antimalware Scan Interface testing |
| EICAR Testing |
AV validatie met EICAR test file |
| Arya |
OT/ICS security scanner |
Cybersecurity
| Pagina |
Onderwerp |
| Cybersecurity Intro |
CIA, cryptografie, frameworks, GDPR, IAM, PKI, firewalls |
| Cybersecurity S1 |
DDoS, SSH/TLS, IDS/IPS/NDR, WAF, SIEM, VPN, DNS-beveiliging, Metasploit |
Netwerken
| Pagina |
Onderwerp |
| Datacom & Netwerken |
OSI-model, subnetting, IPv4/IPv6, transport- en applicatielaag |
| Wireless |
Radiogolven, antennes, Wi-Fi-beveiliging, site survey |
| Routering & Switching (Cisco) |
IOS, VLANs, STP, EtherChannel, OSPF, ACL/NAT/DHCP |
| STP / Link Aggregation / FHRP |
Redundantietechnieken |
| OSPF / BGP / WAN & VPN |
Routeringstechnieken |
| L2 Bedreigingen / L2 Veiligheid / Endpoint Security |
Securitytechnieken |
| Network Discovery / Port Mirroring |
Optimalisatietechnieken |
| Cheatsheet |
Volledige configuratiegids (basis → redundantie → security → routing) |
Linux
Serverbeheer
| Pagina |
Onderwerp |
| Serverbeheer Intro |
Hyper-V, Windows Server, Active Directory, storage, DHCP/DNS |
| Serverbeheer Advanced |
PXE, GPO, FSMO, NTFS/AGDLP, filesharing, redundantie, backup/recovery |
Cloud & Infrastructuur
| Pagina |
Onderwerp |
| SNB Project |
CAMPUS-ontwerp, Azure/M365/Entra/Intune, TrueNAS/ESXi/iSCSI, IIS/NGINX, Docker, Ansible |
Databanken
| Pagina |
Onderwerp |
| Planning & Installatie |
Lab-architectuur, installatie, service accounts |
| SQL Processen & Databases |
Services, system databases, recovery models |
| Logins, Users & Rechten |
Logins vs. users, server/database roles, GRANT/DENY |
| Managed Service Accounts |
sMSA/gMSA voor SQL Server-services |
| Backup & Restore |
Full/differential/log backups, restore-volgorde |
| DDL / DQL / DML |
T-SQL-taal |
| Views, Stored Procedures & Functies |
Database-objecten |
| Import & Export |
Data verplaatsen tussen systemen |
| Migratie & Scalability |
Schalen en migreren van databases |
| Automatisatie van Taken |
SQL Server Agent, maintenance plans |
| Performance & Indexing |
Indexen en queryprestaties |
| Reporting Services |
SSRS |
| Troubleshooting |
Probleemaanpak |
| Cheatsheet |
Volledige T-SQL-referentie |
Scripting
Auditing & Monitoring
| Pagina |
Onderwerp |
| Cheatsheet |
Logging, Linux/Windows-monitoring, Zabbix, SNMP |
Regelgeving
| Pagina |
Onderwerp |
| NIS2 |
NIS2-richtlijn en Cyfun-kader |
Overig
MkDocs commando's
mkdocs serve # Live preview op http://localhost:8000
mkdocs build # Statische site genereren