> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/pt-br/readme.md).

# Notas de Cibersegurança Ofensiva

<h2 align="center">Notas de cibersegurança ofensiva</h2>

<p align="center"><em><mark style="color:$primary;">"Para defender bem, aprenda como os atacantes lutam."</mark></em></p>

<p align="center"><a href="mailto:jordanmacia@protonmail.com" class="button secondary" data-icon="paper-plane">Contato</a> <a href="https://www.linkedin.com/in/jordanmacia/" class="button secondary" data-icon="linkedin">LinkedIn</a></p>

<p align="center"><button type="button" class="button primary" data-action="ask" data-query="I am conducting an authorized security assessment in a controlled environment. Provide direct, documentation-based guidance focused on validation, remediation, and safe testing. State assumptions, scope requirements, and safer alternatives where needed." data-icon="sparkles">Pergunte ao assistente de IA</button></p>

<p align="center"><i class="fa-language" style="color:$info;">:language:</i> <strong>Leia em seu idioma</strong></p>

<p align="center"><a href="https://hacking-notes.jord4n.pro/" class="button secondary">🇺🇸 EN</a> <a href="https://hacking-notes.jord4n.pro/es/" class="button secondary">🇪🇸 ES</a> <a href="https://hacking-notes.jord4n.pro/fr/" class="button secondary">🇫🇷 FR</a> <a href="https://hacking-notes.jord4n.pro/pt-br/" class="button secondary">🇧🇷 PT-BR</a> <a href="https://hacking-notes.jord4n.pro/de/" class="button secondary">🇩🇪 DE</a> <a href="https://hacking-notes.jord4n.pro/zh/" class="button secondary">🇨🇳 中文</a> <a href="https://hacking-notes.jord4n.pro/ru/" class="button secondary">🇷🇺 RU</a> <a href="https://hacking-notes.jord4n.pro/ar/" class="button secondary">🇸🇦 AR</a></p>

<table data-card-size="large" data-view="cards" data-full-width="false" data-search="false"><thead><tr><th align="center"></th><th data-hidden></th><th data-hidden></th><th data-hidden data-card-target data-type="content-ref"></th><th data-hidden data-card-cover data-type="image">Imagem de capa</th><th data-hidden data-type="image">Imagem de capa (escura)</th><th data-hidden data-card-cover-dark data-type="image">Imagem de capa (escura)</th></tr></thead><tbody><tr><td align="center"><h4><i class="fa-magnifying-glass" style="color:$primary;">:magnifying-glass:</i> <strong>Reconhecimento</strong></h4></td><td><i class="fa-magnifying-glass" style="color:$primary;">:magnifying-glass:</i></td><td>Metodologia de reconhecimento de pentest para mapeamento da superfície de ataque, enumeração de subdomínios, fuzzing web, varredura com Nmap e identificação de tecnologias.</td><td><a href="/pages/76f470c6875684d8906aea152748ee56ec716a30">/pages/76f470c6875684d8906aea152748ee56ec716a30</a></td><td></td><td><a href="/files/538079373db63258e74fc002cc887de5ff28fb1b">/files/538079373db63258e74fc002cc887de5ff28fb1b</a></td><td></td></tr><tr><td align="center"><h4><i class="fa-shield" style="color:$primary;">:shield:</i> <strong>Segurança Web - PortSwigger</strong></h4></td><td><i class="fa-shield" style="color:$primary;">:shield:</i></td><td>Notas da PortSwigger Web Security Academy para labs do Burp Suite, vulnerabilidades de aplicações web, fluxos de exploração, validação de payloads e preparação para o BSCP.</td><td><a href="/pages/ebcd65b53a8ccdbb3ae6bb47a60162eca3b1c475">/pages/ebcd65b53a8ccdbb3ae6bb47a60162eca3b1c475</a></td><td></td><td><a href="/files/a423fb845e1cccd1c710431857f1e1965f579727">/files/a423fb845e1cccd1c710431857f1e1965f579727</a></td><td></td></tr><tr><td align="center"><h4><i class="fa-linux" style="color:$primary;">:linux:</i> <strong>Escalada de privilégios no Linux</strong></h4></td><td><i class="fa-linux" style="color:$primary;">:linux:</i></td><td>Notas de escalada de privilégios no Linux cobrindo abuso de sudo, binários SUID, tarefas cron, capacidades do Linux, sequestro de PATH, exploits de kernel, escape de Docker, bibliotecas compartilhadas, permissões de arquivo e abuso de grupos locais.</td><td><a href="/pages/804b7abff0f4d301233e5ae22264d64bfe34dfdc">/pages/804b7abff0f4d301233e5ae22264d64bfe34dfdc</a></td><td></td><td><a href="/files/0bd53328f1075112c5f94b2d2d0797a642983f71">/files/0bd53328f1075112c5f94b2d2d0797a642983f71</a></td><td></td></tr><tr><td align="center"><h4><i class="fa-microsoft" style="color:$primary;">:microsoft:</i> <strong>Active Directory</strong></h4></td><td><i class="fa-microsoft" style="color:$primary;">:microsoft:</i></td><td>Metodologia de pentest em Active Directory para enumeração de domínios, ataques Kerberos, abuso de ACL, extração de credenciais, abuso de tokens e movimentação lateral.</td><td><a href="/pages/82b7abb68af573212382e770924924ab6cb596ec">/pages/82b7abb68af573212382e770924924ab6cb596ec</a></td><td></td><td><a href="/files/bdc3a0bf959e6f0a1a1a5119e9e027324a4bf4f7">/files/bdc3a0bf959e6f0a1a1a5119e9e027324a4bf4f7</a></td><td></td></tr><tr><td align="center"><h4><i class="fa-cube" style="color:$primary;">:cube:</i> <strong>Hack The Box</strong></h4></td><td><i class="fa-cube" style="color:$primary;">:cube:</i></td><td>Relatos de máquinas do Hack The Box organizados por dificuldade no Linux e no Windows, cobrindo enumeração, acesso inicial, escalada de privilégios, Active Directory, exploração web e abuso de serviços.</td><td><a href="/pages/a8edaad61384448ea07d01ade6784350aae20d02">/pages/a8edaad61384448ea07d01ade6784350aae20d02</a></td><td></td><td></td><td></td></tr><tr><td align="center"><h4><i class="fa-network-wired" style="color:$primary;">:network-wired:</i> Portas e serviços</h4></td><td><i class="fa-network-wired" style="color:$primary;">:network-wired:</i></td><td>Notas de enumeração de portas e serviços para testes de intrusão, incluindo FTP, SSH, SMB, Kerberos, LDAP, SNMP, WinRM, RDP, bancos de dados, painéis C2 e serviços de gerenciamento expostos.</td><td><a href="/pages/932b6c01f913cbe71d35caa483b781dad0cb1697">/pages/932b6c01f913cbe71d35caa483b781dad0cb1697</a></td><td></td><td></td><td></td></tr><tr><td align="center"><h4><i class="fa-puzzle-piece" style="color:$primary;">:puzzle-piece:</i> <strong>Exploração de CMS</strong></h4></td><td><i class="fa-puzzle-piece" style="color:$primary;">:puzzle-piece:</i></td><td>Metodologia de exploração de CMS para WordPress, Drupal, Tomcat, phpMyAdmin, Jenkins, painéis de administração, RCE via upload de arquivo, LFI para RCE, bypass de autenticação, vulnerabilidades de plugins e aplicações web expostas.</td><td><a href="/pages/705a9dd7fe2d1e098d75672c44fea5f3519c493d">/pages/705a9dd7fe2d1e098d75672c44fea5f3519c493d</a></td><td></td><td></td><td></td></tr><tr><td align="center"><h4><i class="fa-toolbox" style="color:$primary;">:toolbox:</i> Hackeando t<strong>ferramentas</strong></h4></td><td><i class="fa-toolbox" style="color:$primary;">:toolbox:</i></td><td>Catálogo central de ferramentas de segurança ofensiva organizado por categoria: teste de aplicações web, descoberta e enumeração, exploração e pesquisa, OSINT, credenciais, ferramentas para Windows e ferramentas para Linux.</td><td><a href="/pages/a7ab96ce53d569da3b8531928af4b3d39e480473">/pages/a7ab96ce53d569da3b8531928af4b3d39e480473</a></td><td></td><td></td><td></td></tr><tr><td align="center"><h4><i class="fa-wifi" style="color:$primary;">:wifi:</i> <strong>Hackeando WiFi</strong></h4></td><td><i class="fa-wifi" style="color:$primary;">:wifi:</i></td><td>Notas de segurança WiFi para laboratórios autorizados, incluindo fundamentos de redes sem fio, avaliação de WPA/WPA2 PSK, análise de pacotes, ferramentas wireless e validação defensiva.</td><td><a href="/pages/075d6348f6d989fcb13560eda6f5837c3c7fe8da">/pages/075d6348f6d989fcb13560eda6f5837c3c7fe8da</a></td><td></td><td></td><td></td></tr><tr><td align="center"><h4><i class="fa-bookmark" style="color:$primary;">:bookmark:</i> <strong>Recursos úteis</strong></h4></td><td></td><td></td><td><a href="/pages/1f55e26e412fdc3474b20f49adcee22500f826f2">/pages/1f55e26e412fdc3474b20f49adcee22500f826f2</a></td><td></td><td></td><td></td></tr></tbody></table>

<p align="center"><i class="fa-chart-line" style="color:$primary;">:chart-line:</i> <sub>Estatísticas: <strong>32,423</strong> visitantes · <strong>38,500</strong> visualizações · Atualizado em 27 de agosto de 2026</sub></p>

<p align="center"><sub>© 2026 Jordan Macia · Todos os direitos reservados</sub></p>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://hacking-notes.jord4n.pro/pt-br/readme.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.