# Syslifters Handbook

> Syslifters is a specialized penetration testing company from Austria. Our specialisations are Microsoft-heavy enterprise environments (Active Directory), Microsoft Cloud (Entra ID, Azure, Microsoft 365) and web security.

## Table of Contents

- [👩‍💻 Secure Coding Policy](https://handbook.syslifters.com/organization/secure-coding.md): Secure coding requirements and OWASP checklist alignment for Syslifters projects.
- [📝 Information Security and Privacy Policy](https://handbook.syslifters.com/organization/information-security-policy.md): Policy defining how Syslifters protects information security and personal data.
- [🔥 Privacy Incident and Breach Management Process](https://handbook.syslifters.com/organization/incident-response.md): Process for identifying, containing, and reporting privacy incidents and data breaches.
- [About our organization](https://handbook.syslifters.com/organization.md): Overview of Syslifters’ organization, structure, and internal policies.
- [About the handbook](https://handbook.syslifters.com/about-the-handbook.md): What this handbook is, who it’s for, and how to contribute.
- [AD enumeration](https://handbook.syslifters.com/pentesting-manual/active-directory/enumeration/ad-enumeration.md): Tools and techniques for enumerating Active Directory and Entra ID environments.
- [ADCS](https://handbook.syslifters.com/pentesting-manual/active-directory/lateral-movement/adcs.md): Active Directory Certificate Services (AD CS) notes and references for common abuse paths.
- [Advisories](https://handbook.syslifters.com/advisories.md): Security advisories and disclosure reports published by Syslifters
- [Advisories](https://handbook.syslifters.com/de/advisories.md): Security Advisories und Disclosure-Berichte von Syslifters.
- [After our pentests](https://handbook.syslifters.com/after-pentests.md): What happens after a pentest - report delivery, retesting, and access deprovisioning guidance.
- [AMSI](https://handbook.syslifters.com/pentesting-manual/active-directory/defense-evasion/amsi.md): AMSI / ETW / Script Block Logging bypasses for PowerShell and .NET payloads.
- [Andere Lösungsvorschläge?](https://handbook.syslifters.com/de/microsoft-teams-status-disclosure.md): Wie der Microsoft-Teams-Status (Presence) sensible Gewohnheiten preisgeben kann und welche Admin-Optionen die Sichtbarkeit für Externe reduzieren.
- [Android emulation](https://handbook.syslifters.com/pentesting-manual/mobile/android-emulation.md): Set up Android Studio emulators for mobile testing, including proxying and CA certificates.
- [Ansible Automation Platform (AAP) audit](https://handbook.syslifters.com/pentesting-manual/ansible-automation-platform.md): How to assess Red Hat Ansible Automation Platform security using the aap-audit tool and Red Hat hardening guidance.
- [Antivirus & EDR](https://handbook.syslifters.com/pentesting-manual/active-directory/defense-evasion/antivirus-edr.md): Techniques for disabling, weakening or bypassing AV/EDR (Windows Defender and third-party products) on hosts during AD assessments.
- [API endpoints wordlists](https://handbook.syslifters.com/pentesting-manual/web-applications/wordlists/api-endpoints.md): Links and quick workflow for API route discovery wordlists/tools.
- [Aron Molnar](https://handbook.syslifters.com/about-us/aron.md): Profile page and CV for Aron Molnar with contact details, experience, and certifications.
- [Aron Molnar](https://handbook.syslifters.com/de/ueber-uns/aron.md): Profilseite und Lebenslauf von Aron Molnar mit Kontakt, Erfahrung und Zertifikaten.
- [ASP.NET endpoint checklist](https://handbook.syslifters.com/pentesting-manual/web-applications/dotnet-endpoints.md): Common ASP.NET MVC / Identity endpoints and files to probe during testing.
- [ASP.NET ViewState](https://handbook.syslifters.com/pentesting-manual/web-applications/viewstate.md): ViewState deserialization background and tooling references.
- [Attack-path data collection](https://handbook.syslifters.com/pentesting-manual/entraid-azure/enumeration/attack-path-data-collection.md): Collect Entra ID and Azure resource data for BloodHound attack-path enumeration with AzureHound.
- [Azure Arc](https://handbook.syslifters.com/pentesting-manual/entraid-azure/lateral-movement/azure-arc.md): Abusing Azure Arc as a bidirectional pivot between on-premises Active Directory and Azure, with an audit checklist for engagements.
- [Azure resource configuration audit](https://handbook.syslifters.com/pentesting-manual/entraid-azure/enumeration/azure-resource-configuration-audit.md): Audit Azure subscription (resource / control plane) configuration with ScoutSuite to surface storage, NSG, Key Vault, and SQL misconfigurations.
- [Before our pentests](https://handbook.syslifters.com/before-pentests.md): What to expect before a pentest - scoping, timeboxing, permission to attack, lead times, and preparation steps.
- [BitLocker](https://handbook.syslifters.com/pentesting-manual/active-directory/privilege-escalation/bitlocker.md): Local privilege escalation by booting into WinRE with a BitLocker recovery key and tampering with the OS.
- [Burp Proxy tips and tricks](https://handbook.syslifters.com/pentesting-manual/web-applications/burp-proxy-tips-and-tricks.md)
- [Canvas apps vs model-driven apps](https://handbook.syslifters.com/pentesting-manual/power-platform/difference-between-canvas-apps-and-model-driven-apps.md): Key differences between Power Apps canvas apps and model-driven apps, and when to use each.
- [Cheat sheets](https://handbook.syslifters.com/pentesting-manual/web-applications/cheat-sheets.md): Curated external cheat sheets referenced in our web application testing notes.
- [Checklist](https://handbook.syslifters.com/pentesting-manual/entraid-azure/checklist.md): Practical checklist for Entra ID and Azure assessments, including CA policy review, tooling, and common risk areas.
- [Christoph Mahrl](https://handbook.syslifters.com/about-us/christoph.md): Profile page for Christoph Mahrl with contact details, experience, and certifications.
- [Christoph Mahrl](https://handbook.syslifters.com/de/ueber-uns/christoph.md): Profilseite und Lebenslauf von Christoph Mahrl mit Kontakt, Erfahrung und Zertifikaten.
- [Claude cli](https://handbook.syslifters.com/organization/human-resources/ai-tool-setup.md)
- [Common security issues in financial web apps](https://handbook.syslifters.com/pentesting-manual/web-applications/common-security-issues-financial-apps.md): Reference material for checkout/payment and financially oriented web application issues.
- [Conditional Access](https://handbook.syslifters.com/pentesting-manual/entraid-azure/defense-evasion/conditional-access.md): Auditing Entra ID Conditional Access policies and the built-in bypasses that apply to a tenant.
- [Contact us](https://handbook.syslifters.com/contact-us.md): How to contact Syslifters — get in touch with our team by email (S/MIME supported), Signal, phone, LinkedIn, or GitHub.
- [Corporate identity](https://handbook.syslifters.com/organization/corporate-identity.md): Brand assets and guidelines for Syslifters/SysReptor/SysLeaks - logos, colors, badges, and fonts.
- [Crassus](https://handbook.syslifters.com/pentesting-manual/active-directory/privilege-escalation/crassus.md): Using Crassus to discover LPE candidates (writable paths, missing DLLs) from a Process Monitor boot log and weaponise them via DLL hijacking.
- [Create security roles and set permissions](https://handbook.syslifters.com/pentesting-manual/power-platform/create-security-roles-and-set-permissions.md): Microsoft Learn references for Dataverse security roles, privileges, and user security configuration.
- [Credential dumping](https://handbook.syslifters.com/pentesting-manual/active-directory/credential-access/credential-dumping.md): Notes and commands for credential dumping in AD environments (e.g., Mimikatz, SCCM).
- [Credential Guard](https://handbook.syslifters.com/pentesting-manual/active-directory/defense-evasion/credential-guard.md): Tools and checklists for bypassing Credential Guard.
- [CRLF injection to add email CC](https://handbook.syslifters.com/pentesting-manual/web-applications/auth/crlf-email-cc.md): Steal password reset links by injecting new headers (CC) via newline injection.
- [Customer communication](https://handbook.syslifters.com/pentesting-manual/customer-communication.md): How we gather context during an engagement and how we handle unclear business impact.
- [Data protection and security](https://handbook.syslifters.com/data-protection.md): How we handle customer data and protect evidence, notes, and reports during pentests.
- [Datenschutzerklärung](https://handbook.syslifters.com/de/datenschutz.md): Datenschutzerklärung für handbook.syslifters.com
- [Datensicherheit](https://handbook.syslifters.com/de/datensicherheit.md): Wie wir Kundendaten behandeln und während Pentests Evidenzen, Notizen und Berichte schützen.
- [Default permissions and access](https://handbook.syslifters.com/pentesting-manual/power-platform/default-permissions-and-access.md): How default environment permissions and Dataverse security roles typically work, plus governance pitfalls and recommendations.
- [Delegations overview](https://handbook.syslifters.com/pentesting-manual/active-directory/lateral-movement/kerberos-delegation/delegations-overview.md): Overview page for Kerberos delegation topics.
- [DNS manipulation](https://handbook.syslifters.com/pentesting-manual/active-directory/lateral-movement/dns-manipulation.md): Notes and tooling references for DNS manipulation and related coercion setups.
- [Downloading m3u8 playlists](https://handbook.syslifters.com/pentesting-manual/web-applications/m3u8-playlist-download.md): Practical ways to download HLS streams using browser extensions, yt-dlp, or ffmpeg.
- [During our pentests](https://handbook.syslifters.com/during-pentests.md): How we work during a pentest, including communication, confidentiality, source IP, and retest policy.
- [Email setup](https://handbook.syslifters.com/organization/human-resources/email-setup.md): Configure email encryption (S/MIME) and legally required signatures/footers for eM Client, Nextcloud Mail, and Thunderbird.
- [Environment variables stored as plain text](https://handbook.syslifters.com/pentesting-manual/power-platform/environment-variables-stored-as-plain-text.md): Avoid storing secrets in text environment variables; use secret variables backed by Azure Key Vault.
- [Executive summaries](https://handbook.syslifters.com/pentesting-manual/reporting/executive-summaries.md): Coming soon.
- [Fileshare enumeration](https://handbook.syslifters.com/pentesting-manual/active-directory/enumeration/fileshare-enumeration.md): Techniques and tools for discovering and analyzing SMB file shares in AD environments.
- [Finding descriptions](https://handbook.syslifters.com/pentesting-manual/reporting/findings/descriptions.md): Coming soon.
- [Finding recommendations](https://handbook.syslifters.com/pentesting-manual/reporting/findings/recommendations.md): Coming soon.
- [Finding summaries](https://handbook.syslifters.com/pentesting-manual/reporting/findings/summaries.md): Coming soon.
- [Finding titles](https://handbook.syslifters.com/pentesting-manual/reporting/findings/titles.md): How to write concise, concrete pentest finding titles that communicate impact and root cause.
- [Firefox Multi-Account Containers](https://handbook.syslifters.com/pentesting-manual/web-applications/firefox-multicontainer.md): Use Firefox Multi-Account Containers to test multiple user accounts and permission levels in one browser window.
- [Flutter app setup (proxy & TLS)](https://handbook.syslifters.com/pentesting-manual/mobile/flutter-app-setup.md): Practical steps to work around Flutter apps ignoring proxy settings and system trust stores.
- [Food vouchers](https://handbook.syslifters.com/organization/human-resources/food-vouchers.md): Quarterly Pluxee meal vouchers (€2/day, tax-exempt)—amounts, eligibility, and how payouts work for full- and part-time employees.
- [Framework-specific wordlists](https://handbook.syslifters.com/pentesting-manual/web-applications/wordlists/framework-specific.md): Starting points for framework and service endpoint discovery.
- [Hallo! Wir sind die Syslifters.](https://handbook.syslifters.com/de.md): Syslifters ist ein spezialisiertes Pentesting-Unternehmen aus Österreich mit Fokus auf Microsoft-lastige Unternehmensumgebungen, Microsoft Cloud und Web Security.
- [Hash cracking](https://handbook.syslifters.com/pentesting-manual/active-directory/credential-access/hash-cracking.md): Hash cracking workflows and references for AD passwords and Kerberos material.
- [Hijack RDP session](https://handbook.syslifters.com/pentesting-manual/active-directory/credential-access/hijack-rdp-session.md): Techniques for taking over existing RDP sessions for lateral movement or privilege escalation.
- [Host and service discovery](https://handbook.syslifters.com/pentesting-manual/active-directory/enumeration/network-enumeration/host-and-service-discovery.md): Host, port, and service discovery for AD engagements using SmartScanner.
- [Host enumeration](https://handbook.syslifters.com/pentesting-manual/active-directory/enumeration/host-enumeration.md): Tools and checklists for enumerating Windows hosts during Active Directory assessments.
- [HTTP / RPC relaying](https://handbook.syslifters.com/pentesting-manual/active-directory/lateral-movement/http-rpc-relaying.md): ntlmrelayx workflows for relaying to AD CS via HTTP and RPC interfaces.
- [HTTPS traffic decryption with Wireshark](https://handbook.syslifters.com/pentesting-manual/fat-clients/https-traffic-decryption-with-wireshark.md): Decrypt TLS traffic by logging ephemeral session keys with SSLKEYLOGFILE and loading them into Wireshark.
- [Human Resources](https://handbook.syslifters.com/organization/human-resources.md): Coming soon.
- [Identity & policy enumeration](https://handbook.syslifters.com/pentesting-manual/entraid-azure/enumeration/identity-and-policy-enumeration.md): Enumerate Entra ID identities, role assignments, and Conditional Access policies with ROADtools / ROADrecon.
- [Infos für den Einkauf](https://handbook.syslifters.com/de/fuer-den-einkauf.md): Hinweise für den Einkauf - Spesen/Barauslagen, Abrechnung, Storno-Regeln und Verweis auf AGB.
- [Internal Tools of a Pentesting company](https://handbook.syslifters.com/pentesting-manual/internal-toolset.md): Internal tools and providers we use to run the company, with a note about migrating toward European/open-source solutions.
- [IPv6 MitM](https://handbook.syslifters.com/pentesting-manual/active-directory/lateral-movement/ipv6-mitm.md): Abusing Windows IPv6 defaults with mitm6 to become DNS for a target host and chain into NTLM relaying.
- [Java RMI](https://handbook.syslifters.com/pentesting-manual/fat-clients/java-rmi.md): Quick primer on Java RMI, what to look for during testing, and tools/approaches for exploration.
- [JWT attacks](https://handbook.syslifters.com/pentesting-manual/web-applications/jwt-attacks.md): Quick usage snippet for jwt_tool playbook scanning.
- [Katana recon pipeline](https://handbook.syslifters.com/pentesting-manual/web-applications/recon/katana-pipeline.md): Crawl + archive URL collection, JS discovery, and secret scanning workflow.
- [Kontaktiert uns](https://handbook.syslifters.com/de/contact-us.md): Wie Sie Syslifters kontaktieren können — nehmen Sie Kontakt mit unserem Team per E-Mail (S/MIME unterstützt), Signal, Telefon, LinkedIn oder GitHub auf.
- [LDAP relaying](https://handbook.syslifters.com/pentesting-manual/active-directory/lateral-movement/ldap-relaying.md): Techniques for relaying NTLM authentication to LDAP, including WebClient coercion workflows.
- [Learn and practice](https://handbook.syslifters.com/pentesting-manual/web-applications/learn-and-practice.md): Curated resources for web application hacking practice and staying up to date.
- [Leonard Rosian](https://handbook.syslifters.com/about-us/leonard.md): Profile page and CV for Leonard Rosian with contact details, experience, and training/certifications.
- [Leonard Rosian](https://handbook.syslifters.com/de/ueber-uns/leonard.md): Profilseite und Lebenslauf von Leonard Rosian mit Kontakt, Erfahrung und Ausbildung/Zertifikaten.
- [License to role mapping risks](https://handbook.syslifters.com/pentesting-manual/power-platform/license-to-role-mapping-risks.md): How license assignment and app sharing can implicitly grant Dataverse roles and lead to unintended data access.
- [Limit environment creation for users](https://handbook.syslifters.com/pentesting-manual/power-platform/limit-environment-creation-for-users.md): Reference for controlling who can create Power Platform environments in a tenant.
- [Limited audit trail due to missing logging configuration](https://handbook.syslifters.com/pentesting-manual/power-platform/limited-audit-trail-missing-logging-configuration.md): Enable Dataverse auditing and review retention settings to avoid gaps in audit trails.
- [LPE via NTLM and Kerberos relaying](https://handbook.syslifters.com/pentesting-manual/active-directory/privilege-escalation/kerberos-relaying.md): Local privilege escalation on domain-joined Windows hosts by relaying machine-account authentication to LDAP and abusing RBCD or shadow credentials.
- [Making changes](https://handbook.syslifters.com/making-changes.md): Guidelines for contributing changes to the handbook, including sensitivity and review expectations.
- [Mass assignment in password resets](https://handbook.syslifters.com/pentesting-manual/web-applications/auth/mass-assignment-password-resets.md): Try adding extra parameters to change another user's password.
- [Matthäus Förster](https://handbook.syslifters.com/about-us/matthaeus.md): Profile page and CV for Matthäus Förster with contact details, experience, and certifications.
- [Matthäus Förster](https://handbook.syslifters.com/de/ueber-uns/matthaeus.md): Profilseite und Lebenslauf von Matthäus Förster mit Kontakt, Erfahrung und Zertifikaten.
- [Michael Wedl](https://handbook.syslifters.com/about-us/michael.md): Profile page and CV for Michael Wedl with contact details, experience, and certifications.
- [Michael Wedl](https://handbook.syslifters.com/de/ueber-uns/michael.md): Profilseite und Lebenslauf von Michael Wedl mit Kontakt, Erfahrung und Zertifikaten.
- [Microsoft 365 pillaging](https://handbook.syslifters.com/pentesting-manual/entraid-azure/enumeration/microsoft-365-pillaging.md): Post-exploitation enumeration and pillaging of Microsoft 365 (mail, SharePoint, OneDrive, Teams) via Microsoft Graph with GraphRunner.
- [Missing data policy (Data Loss Prevention)](https://handbook.syslifters.com/pentesting-manual/power-platform/missing-data-loss-prevention-policy.md): Missing DLP policies can enable unwanted connectors and data exfiltration from Power Platform environments.
- [Nach unseren Pentests](https://handbook.syslifters.com/de/nach-pentests.md): Nach dem Pentest - Bericht, kostenlose Nachtests (unter Bedingungen) und Hinweise zum Deprovisionieren von Zugängen.
- [Network access control (NAC)](https://handbook.syslifters.com/pentesting-manual/active-directory/enumeration/network-enumeration/nac.md): VLAN discovery, 802.1X / NAC assessment, and voice-VLAN pivoting on access ports.
- [Normalization and Unicode attacks (password resets)](https://handbook.syslifters.com/pentesting-manual/web-applications/auth/normalization-unicode-attacks.md): Use Unicode/punycode edge cases to redirect reset links or bypass validation.
- [Not found](https://handbook.syslifters.com/404.md): Page not found.
- [NTLM channel binding for web apps](https://handbook.syslifters.com/pentesting-manual/web-applications/ntlm-channel-binding.md): Notes on testing "Extended Protection for Authentication" (EPA) / channel binding for NTLM over HTTPS.
- [OIDC (quick note)](https://handbook.syslifters.com/pentesting-manual/web-applications/oidc.md): Flow choices and PKCE reminder.
- [Open redirect via HTML file upload](https://handbook.syslifters.com/pentesting-manual/web-applications/file-upload/open-redirect.md): Upload an HTML file that instantly redirects users via meta refresh; prevent by blocking HTML or forcing safe download headers.
- [Our pentesters](https://handbook.syslifters.com/about-us.md): Meet our pentesters—highly qualified security professionals with strong academic backgrounds, industry certifications, and experience in top international cyber security competitions and exercises.
- [Our pentesting approach](https://handbook.syslifters.com/pentesting-approach.md): How timeboxing and available knowledge affect pentest efficiency, and when we prefer grey/white-box approaches.
- [Overview of Microsoft Power Platform](https://handbook.syslifters.com/pentesting-manual/power-platform/overview-of-microsoft-power-platform.md): A quick overview of the Power Platform components and how they relate (Power BI, Power Apps, Power Automate, Power Virtual Agents, Dataverse, connectors).
- [Overview of our pentesting procedure](https://handbook.syslifters.com/pentesting-procedure.md): Our pentesting approach from kickoff and execution to reporting, remediation, and a free retest within eight weeks.
- [Parameter pollution (password resets)](https://handbook.syslifters.com/pentesting-manual/web-applications/auth/parameter-pollution.md): Account takeover patterns when duplicate parameters are interpreted in surprising ways.
- [Password managers](https://handbook.syslifters.com/pentesting-manual/active-directory/credential-access/password-managers.md): Post-compromise credential extraction from enterprise password-manager / vault solutions encountered on internal engagements.
- [Password spraying](https://handbook.syslifters.com/pentesting-manual/active-directory/credential-access/password-spraying.md): Password spraying starting points for AD environments.
- [Patrick Pirker](https://handbook.syslifters.com/about-us/patrick.md): Profile page and CV for Patrick Pirker with contact details, experience, and certifications.
- [Patrick Pirker](https://handbook.syslifters.com/de/ueber-uns/patrick.md): Profilseite und Lebenslauf von Patrick Pirker mit Kontakt, Erfahrung und Zertifikaten.
- [Penetration Testing-Praktikum](https://handbook.syslifters.com/de/pentesting-praktikum.md): Praktikumsstelle im Penetration Testing (remote) mit Aufgaben, Anforderungen, Rahmenbedingungen und Bewerbung.
- [Pentest operation rules](https://handbook.syslifters.com/pentesting-manual/operation-rules.md): A practical checklist for prep, collaboration, evidence hygiene, and secure handling of customer data during pentests.
- [Pentest planning process](https://handbook.syslifters.com/pentesting-manual/pentest-planning-process.md): This document describes the Syslifters pentest planning process and the kanban-style Pentest Planning Board we use to run it.
- [Pentestbox setup](https://handbook.syslifters.com/organization/human-resources/pentestbox-setup.md): Setup guide for running offensive tooling in an isolated, capability-restricted Kali container from our internal registry instead of installing it on your host.
- [Pentesting Demo-Berichte](https://handbook.syslifters.com/de/pentesting-demo-reports.md): Demo-Pentestberichte (AD, Web, Extern) zum Einblick in Aufbau und Qualität unserer Reports.
- [Pentesting in Aachen: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-aachen.md): A compiled list of pentesting providers in Aachen.
- [Pentesting in Aachen: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-aachen.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Aachen.
- [Pentesting in Aarau: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-aarau.md): A compiled list of pentesting providers in Aarau.
- [Pentesting in Aarau: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-aarau.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Aarau.
- [Pentesting in Aargau: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-aargau.md): A compiled list of pentesting providers in Aargau.
- [Pentesting in Aargau: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-aargau.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Aargau.
- [Pentesting in Amstetten: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-amstetten.md): A compiled list of pentesting providers in Amstetten.
- [Pentesting in Amstetten: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-amstetten.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Amstetten.
- [Pentesting in Austria: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-austria.md): A compiled list of pentesting providers in Austria.
- [Pentesting in Baar: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-baar.md): A compiled list of pentesting providers in Baar.
- [Pentesting in Baar: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-baar.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Baar.
- [Pentesting in Baden-Württemberg: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-baden-wuerttemberg.md): A compiled list of pentesting providers in Baden-Württemberg.
- [Pentesting in Baden-Württemberg: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-baden-wuerttemberg.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Baden-Württemberg.
- [Pentesting in Bamberg: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-bamberg.md): A compiled list of pentesting providers in Bamberg.
- [Pentesting in Bamberg: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-bamberg.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Bamberg.
- [Pentesting in Basel-Landschaft: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-basel-landschaft.md): A compiled list of pentesting providers in Basel-Landschaft.
- [Pentesting in Basel-Landschaft: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-basel-landschaft.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Basel-Landschaft.
- [Pentesting in Bavaria: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-bavaria.md): A compiled list of pentesting providers in Bavaria.
- [Pentesting in Bayern: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-bayern.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Bayern.
- [Pentesting in Bensheim: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-bensheim.md): A compiled list of pentesting providers in Bensheim.
- [Pentesting in Bensheim: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-bensheim.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Bensheim.
- [Pentesting in Berlin: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-berlin.md): A compiled list of pentesting providers in Berlin.
- [Pentesting in Berlin: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-berlin.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Berlin.
- [Pentesting in Bern: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-bern.md): A compiled list of pentesting providers in Bern.
- [Pentesting in Bern: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-bern.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Bern.
- [Pentesting in Bochum: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-bochum.md): A compiled list of pentesting providers in Bochum.
- [Pentesting in Bochum: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-bochum.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Bochum.
- [Pentesting in Bonn: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-bonn.md): A compiled list of pentesting providers in Bonn.
- [Pentesting in Bonn: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-bonn.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Bonn.
- [Pentesting in Brandenburg: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-brandenburg.md): A compiled list of pentesting providers in Brandenburg.
- [Pentesting in Brandenburg: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-brandenburg.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Brandenburg.
- [Pentesting in Bremen: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-bremen.md): A compiled list of pentesting providers in Bremen.
- [Pentesting in Bremen: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-bremen.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Bremen.
- [Pentesting in Brunn am Gebirge: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-brunn-am-gebirge.md): A compiled list of pentesting providers in Brunn am Gebirge.
- [Pentesting in Brunn am Gebirge: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-brunn-am-gebirge.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Brunn am Gebirge.
- [Pentesting in Buchs: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-buchs.md): A compiled list of pentesting providers in Buchs.
- [Pentesting in Buchs: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-buchs.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Buchs.
- [Pentesting in Chemnitz: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-chemnitz.md): A compiled list of pentesting providers in Chemnitz.
- [Pentesting in Chemnitz: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-chemnitz.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Chemnitz.
- [Pentesting in Cologne: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-cologne.md): A compiled list of pentesting providers in Cologne.
- [Pentesting in Darmstadt: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-darmstadt.md): A compiled list of pentesting providers in Darmstadt.
- [Pentesting in Darmstadt: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-darmstadt.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Darmstadt.
- [Pentesting in der Schweiz: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-der-schweiz.md): Eine zusammengestellte Liste an Pentesting-Anbietern in der Schweiz.
- [Pentesting in Deutschland: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-deutschland.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Deutschland.
- [Pentesting in Dintikon: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-dintikon.md): A compiled list of pentesting providers in Dintikon.
- [Pentesting in Dintikon: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-dintikon.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Dintikon.
- [Pentesting in Dortmund: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-dortmund.md): A compiled list of pentesting providers in Dortmund.
- [Pentesting in Dortmund: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-dortmund.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Dortmund.
- [Pentesting in Eschborn: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-eschborn.md): A compiled list of pentesting providers in Eschborn.
- [Pentesting in Eschborn: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-eschborn.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Eschborn.
- [Pentesting in Essen: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-essen.md): A compiled list of pentesting providers in Essen.
- [Pentesting in Essen: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-essen.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Essen.
- [Pentesting in Flensburg: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-flensburg.md): A compiled list of pentesting providers in Flensburg.
- [Pentesting in Flensburg: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-flensburg.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Flensburg.
- [Pentesting in Frankfurt am Main: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-frankfurt-am-main.md): A compiled list of pentesting providers in Frankfurt am Main.
- [Pentesting in Frankfurt am Main: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-frankfurt-am-main.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Frankfurt am Main.
- [Pentesting in Frankfurt on the Main: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-frankfurt-on-the-main.md): A compiled list of pentesting providers in Frankfurt on the Main.
- [Pentesting in Frauenfeld: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-frauenfeld.md): A compiled list of pentesting providers in Frauenfeld.
- [Pentesting in Frauenfeld: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-frauenfeld.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Frauenfeld.
- [Pentesting in Gallen: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-gallen.md): A compiled list of pentesting providers in Gallen.
- [Pentesting in Gallen: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-gallen.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Gallen.
- [Pentesting in Gäufelden: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-gaeufelden.md): A compiled list of pentesting providers in Gäufelden.
- [Pentesting in Gäufelden: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-gaeufelden.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Gäufelden.
- [Pentesting in Geisenheim: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-geisenheim.md): A compiled list of pentesting providers in Geisenheim.
- [Pentesting in Geisenheim: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-geisenheim.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Geisenheim.
- [Pentesting in Geldern: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-geldern.md): A compiled list of pentesting providers in Geldern.
- [Pentesting in Geldern: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-geldern.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Geldern.
- [Pentesting in Gelsenkirchen: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-gelsenkirchen.md): A compiled list of pentesting providers in Gelsenkirchen.
- [Pentesting in Gelsenkirchen: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-gelsenkirchen.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Gelsenkirchen.
- [Pentesting in Gerlafingen: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-gerlafingen.md): A compiled list of pentesting providers in Gerlafingen.
- [Pentesting in Gerlafingen: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-gerlafingen.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Gerlafingen.
- [Pentesting in Germany: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-germany.md): A compiled list of pentesting providers in Germany.
- [Pentesting in Glattbrugg: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-glattbrugg.md): A compiled list of pentesting providers in Glattbrugg.
- [Pentesting in Glattbrugg: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-glattbrugg.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Glattbrugg.
- [Pentesting in Göllersdorf: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-goellersdorf.md): A compiled list of pentesting providers in Göllersdorf.
- [Pentesting in Göllersdorf: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-goellersdorf.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Göllersdorf.
- [Pentesting in Graz: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-graz.md): A compiled list of pentesting providers in Graz.
- [Pentesting in Graz: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-graz.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Graz.
- [Pentesting in Grenchen: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-grenchen.md): A compiled list of pentesting providers in Grenchen.
- [Pentesting in Grenchen: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-grenchen.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Grenchen.
- [Pentesting in Hagenberg: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-hagenberg.md): A compiled list of pentesting providers in Hagenberg.
- [Pentesting in Hagenberg: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-hagenberg.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Hagenberg.
- [Pentesting in Hallwil: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-hallwil.md): A compiled list of pentesting providers in Hallwil.
- [Pentesting in Hallwil: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-hallwil.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Hallwil.
- [Pentesting in Hamburg: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-hamburg.md): A compiled list of pentesting providers in Hamburg.
- [Pentesting in Hamburg: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-hamburg.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Hamburg.
- [Pentesting in Heilbronn: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-heilbronn.md): A compiled list of pentesting providers in Heilbronn.
- [Pentesting in Heilbronn: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-heilbronn.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Heilbronn.
- [Pentesting in Hesse: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-hesse.md): A compiled list of pentesting providers in Hesse.
- [Pentesting in Hessen: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-hessen.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Hessen.
- [Pentesting in Hof: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-hof.md): A compiled list of pentesting providers in Hof.
- [Pentesting in Hof: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-hof.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Hof.
- [Pentesting in Hollabrunn: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-hollabrunn.md): A compiled list of pentesting providers in Hollabrunn.
- [Pentesting in Hollabrunn: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-hollabrunn.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Hollabrunn.
- [Pentesting in Ilmmünster: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-ilmmuenster.md): A compiled list of pentesting providers in Ilmmünster.
- [Pentesting in Ilmmünster: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-ilmmuenster.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Ilmmünster.
- [Pentesting in Innsbruck: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-innsbruck.md): A compiled list of pentesting providers in Innsbruck.
- [Pentesting in Innsbruck: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-innsbruck.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Innsbruck.
- [Pentesting in Karlsruhe: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-karlsruhe.md): A compiled list of pentesting providers in Karlsruhe.
- [Pentesting in Karlsruhe: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-karlsruhe.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Karlsruhe.
- [Pentesting in Köln: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-koeln.md): A compiled list of pentesting providers in Köln.
- [Pentesting in Köln: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-koeln.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Köln.
- [Pentesting in Korneuburg: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-korneuburg.md): A compiled list of pentesting providers in Korneuburg.
- [Pentesting in Korneuburg: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-korneuburg.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Korneuburg.
- [Pentesting in Krems an der Donau: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-krems-an-der-donau.md): A compiled list of pentesting providers in Krems an der Donau.
- [Pentesting in Krems an der Donau: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-krems-an-der-donau.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Krems an der Donau.
- [Pentesting in Krummnußbaum: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-krummnussbaum.md): A compiled list of pentesting providers in Krummnußbaum.
- [Pentesting in Krummnußbaum: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-krummnussbaum.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Krummnußbaum.
- [Pentesting in Leipzig: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-leipzig.md): A compiled list of pentesting providers in Leipzig.
- [Pentesting in Leipzig: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-leipzig.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Leipzig.
- [Pentesting in Lower Austria: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-lower-austria.md): A compiled list of pentesting providers in Lower Austria.
- [Pentesting in Lünen: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-luenen.md): A compiled list of pentesting providers in Lünen.
- [Pentesting in Lünen: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-luenen.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Lünen.
- [Pentesting in Luzern: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-luzern.md): A compiled list of pentesting providers in Luzern.
- [Pentesting in Luzern: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-luzern.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Luzern.
- [Pentesting in Mecklenburg-Vorpommern: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-mecklenburg-vorpommern.md): A compiled list of pentesting providers in Mecklenburg-Vorpommern.
- [Pentesting in Mecklenburg-Vorpommern: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-mecklenburg-vorpommern.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Mecklenburg-Vorpommern.
- [Pentesting in Melk: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-melk.md): A compiled list of pentesting providers in Melk.
- [Pentesting in Melk: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-melk.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Melk.
- [Pentesting in Möhrendorf: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-moehrendorf.md): A compiled list of pentesting providers in Möhrendorf.
- [Pentesting in Möhrendorf: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-moehrendorf.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Möhrendorf.
- [Pentesting in München: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-muenchen.md): Eine zusammengestellte Liste an Pentesting-Anbietern in München.
- [Pentesting in Münchenstein: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-muenchenstein.md): A compiled list of pentesting providers in Münchenstein.
- [Pentesting in Münchenstein: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-muenchenstein.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Münchenstein.
- [Pentesting in Munich: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-munich.md): A compiled list of pentesting providers in Munich.
- [Pentesting in Neu-Isenburg: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-neu-isenburg.md): A compiled list of pentesting providers in Neu-Isenburg.
- [Pentesting in Neu-Isenburg: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-neu-isenburg.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Neu-Isenburg.
- [Pentesting in Neu-Ulm: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-neu-ulm.md): A compiled list of pentesting providers in Neu-Ulm.
- [Pentesting in Neu-Ulm: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-neu-ulm.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Neu-Ulm.
- [Pentesting in Neumarkt in der Oberpfalz: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-neumarkt-in-der-oberpfalz.md): A compiled list of pentesting providers in Neumarkt in der Oberpfalz.
- [Pentesting in Neumarkt in der Oberpfalz: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-neumarkt-in-der-oberpfalz.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Neumarkt in der Oberpfalz.
- [Pentesting in Neustadt an der Weinstraße: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-neustadt-an-der-weinstrasse.md): A compiled list of pentesting providers in Neustadt an der Weinstraße.
- [Pentesting in Neustadt an der Weinstraße: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-neustadt-an-der-weinstrasse.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Neustadt an der Weinstraße.
- [Pentesting in Neverin: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-neverin.md): A compiled list of pentesting providers in Neverin.
- [Pentesting in Neverin: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-neverin.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Neverin.
- [Pentesting in Niederösterreich: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-niederoesterreich.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Niederösterreich.
- [Pentesting in Nordrhein-Westfalen: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-nordrhein-westfalen.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Nordrhein-Westfalen.
- [Pentesting in North Rhine-Westphalia: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-north-rhine-westphalia.md): A compiled list of pentesting providers in North Rhine-Westphalia.
- [Pentesting in North Rhine-Westphalia: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-north-rhine-westphalia.md): Eine zusammengestellte Liste an Pentesting-Anbietern in North Rhine-Westphalia.
- [Pentesting in Oberösterreich: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-oberoesterreich.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Oberösterreich.
- [Pentesting in Österreich: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-oesterreich.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Österreich.
- [Pentesting in Paderborn: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-paderborn.md): A compiled list of pentesting providers in Paderborn.
- [Pentesting in Paderborn: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-paderborn.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Paderborn.
- [Pentesting in Peygarten-Ottenstein: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-peygarten-ottenstein.md): A compiled list of pentesting providers in Peygarten-Ottenstein.
- [Pentesting in Peygarten-Ottenstein: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-peygarten-ottenstein.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Peygarten-Ottenstein.
- [Pentesting in Polch: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-polch.md): A compiled list of pentesting providers in Polch.
- [Pentesting in Polch: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-polch.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Polch.
- [Pentesting in Premstätten: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-premstaetten.md): A compiled list of pentesting providers in Premstätten.
- [Pentesting in Premstätten: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-premstaetten.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Premstätten.
- [Pentesting in Puch bei Hallein: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-puch-bei-hallein.md): A compiled list of pentesting providers in Puch bei Hallein.
- [Pentesting in Puch bei Hallein: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-puch-bei-hallein.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Puch bei Hallein.
- [Pentesting in Rapperswil: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-rapperswil.md): A compiled list of pentesting providers in Rapperswil.
- [Pentesting in Rapperswil: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-rapperswil.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Rapperswil.
- [Pentesting in Regensburg: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-regensburg.md): A compiled list of pentesting providers in Regensburg.
- [Pentesting in Regensburg: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-regensburg.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Regensburg.
- [Pentesting in Rheinland-Pfalz: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-rheinland-pfalz.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Rheinland-Pfalz.
- [Pentesting in Rhineland-Palatinate: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-rhineland-palatinate.md): A compiled list of pentesting providers in Rhineland-Palatinate.
- [Pentesting in Sachsen: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-sachsen.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Sachsen.
- [Pentesting in Salzburg: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-salzburg.md): A compiled list of pentesting providers in Salzburg.
- [Pentesting in Salzburg: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-salzburg.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Salzburg.
- [Pentesting in Sankt Gallen: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-sankt-gallen.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Sankt Gallen.
- [Pentesting in Saxony: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-saxony.md): A compiled list of pentesting providers in Saxony.
- [Pentesting in Schärding: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-schaerding.md): A compiled list of pentesting providers in Schärding.
- [Pentesting in Schärding: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-schaerding.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Schärding.
- [Pentesting in Schleswig-Holstein: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-schleswig-holstein.md): A compiled list of pentesting providers in Schleswig-Holstein.
- [Pentesting in Schleswig-Holstein: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-schleswig-holstein.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Schleswig-Holstein.
- [Pentesting in Schwechat: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-schwechat.md): A compiled list of pentesting providers in Schwechat.
- [Pentesting in Schwechat: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-schwechat.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Schwechat.
- [Pentesting in Schweinern: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-schweinern.md): A compiled list of pentesting providers in Schweinern.
- [Pentesting in Schweinern: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-schweinern.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Schweinern.
- [Pentesting in Seeon: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-seeon.md): A compiled list of pentesting providers in Seeon.
- [Pentesting in Seeon: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-seeon.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Seeon.
- [Pentesting in Solothurn: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-solothurn.md): A compiled list of pentesting providers in Solothurn.
- [Pentesting in Solothurn: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-solothurn.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Solothurn.
- [Pentesting in St. Gallen: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-st-gallen.md): A compiled list of pentesting providers in St. Gallen.
- [Pentesting in St. Gallen: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-st-gallen.md): Eine zusammengestellte Liste an Pentesting-Anbietern in St. Gallen.
- [Pentesting in St. Marienkirchen: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-st-marienkirchen.md): A compiled list of pentesting providers in St. Marienkirchen.
- [Pentesting in St. Marienkirchen: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-st-marienkirchen.md): Eine zusammengestellte Liste an Pentesting-Anbietern in St. Marienkirchen.
- [Pentesting in St. Pölten: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-st-poelten.md): A compiled list of pentesting providers in St. Pölten.
- [Pentesting in St. Pölten: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-st-poelten.md): Eine zusammengestellte Liste an Pentesting-Anbietern in St. Pölten.
- [Pentesting in Steiermark: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-steiermark.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Steiermark.
- [Pentesting in Stockerau: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-stockerau.md): A compiled list of pentesting providers in Stockerau.
- [Pentesting in Stockerau: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-stockerau.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Stockerau.
- [Pentesting in Stuttgart: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-stuttgart.md): A compiled list of pentesting providers in Stuttgart.
- [Pentesting in Stuttgart: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-stuttgart.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Stuttgart.
- [Pentesting in Styria: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-styria.md): A compiled list of pentesting providers in Styria.
- [Pentesting in Switzerland: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-switzerland.md): A compiled list of pentesting providers in Switzerland.
- [Pentesting in Thurgau: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-thurgau.md): A compiled list of pentesting providers in Thurgau.
- [Pentesting in Thurgau: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-thurgau.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Thurgau.
- [Pentesting in Tirol: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-tirol.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Tirol.
- [Pentesting in Tübingen: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-tuebingen.md): A compiled list of pentesting providers in Tübingen.
- [Pentesting in Tübingen: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-tuebingen.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Tübingen.
- [Pentesting in Tyrol: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-tyrol.md): A compiled list of pentesting providers in Tyrol.
- [Pentesting in Ulm: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-ulm.md): A compiled list of pentesting providers in Ulm.
- [Pentesting in Ulm: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-ulm.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Ulm.
- [Pentesting in Upper Austria: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-upper-austria.md): A compiled list of pentesting providers in Upper Austria.
- [Pentesting in Vienna: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-vienna.md): A compiled list of pentesting providers in Vienna.
- [Pentesting in Weimar: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-weimar.md): A compiled list of pentesting providers in Weimar.
- [Pentesting in Weimar: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-weimar.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Weimar.
- [Pentesting in Wettingen: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-wettingen.md): A compiled list of pentesting providers in Wettingen.
- [Pentesting in Wettingen: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-wettingen.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Wettingen.
- [Pentesting in Wien: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-wien.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Wien.
- [Pentesting in Wiesbaden: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-wiesbaden.md): A compiled list of pentesting providers in Wiesbaden.
- [Pentesting in Wiesbaden: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-wiesbaden.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Wiesbaden.
- [Pentesting in Wiesendangen: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-wiesendangen.md): A compiled list of pentesting providers in Wiesendangen.
- [Pentesting in Wiesendangen: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-wiesendangen.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Wiesendangen.
- [Pentesting in Wundschuh: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-wundschuh.md): A compiled list of pentesting providers in Wundschuh.
- [Pentesting in Wundschuh: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-wundschuh.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Wundschuh.
- [Pentesting in Wuppertal: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-wuppertal.md): A compiled list of pentesting providers in Wuppertal.
- [Pentesting in Wuppertal: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-wuppertal.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Wuppertal.
- [Pentesting in Zug: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-zug.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Zug.
- [Pentesting in Zurich: a list of pentesting providers](https://handbook.syslifters.com/p/pentesting-in-zurich.md): A compiled list of pentesting providers in Zurich.
- [Pentesting in Zürich: eine Liste von Pentesting-Anbietern](https://handbook.syslifters.com/de/p/pentesting-in-zuerich.md): Eine zusammengestellte Liste an Pentesting-Anbietern in Zürich.
- [Pentesting Manual](https://handbook.syslifters.com/pentesting-manual.md): Overview and entry point to our pentesting notes, playbooks, and reporting guidance.
- [Pentesting Sample Reports](https://handbook.syslifters.com/pentesting-sample-reports.md): Downloadable pentest sample reports (AD, web, external) showcasing our reporting style.
- [Physical security](https://handbook.syslifters.com/pentesting-manual/physical-security.md): A collection of ideas for assessing physical security around offices, devices, documents, and access control.
- [Power Platform dataverse](https://handbook.syslifters.com/pentesting-manual/power-platform/power-platform-dataverse.md): What Dataverse is, when to use it, and a practical overview of the Dataverse security model and common pitfalls.
- [Power Platform environments](https://handbook.syslifters.com/pentesting-manual/power-platform/power-platform-environments.md): What environments are, how they relate to Dataverse, and common environment types and governance notes.
- [Pre-mortem exercise](https://handbook.syslifters.com/organization/human-resources/pre-mortem.md): Imagine leaving Syslifters one year from now and surface risks, blind spots, and improvements before they become real problems.
- [Pricing](https://handbook.syslifters.com/de/pricing.md): Preisgestaltung für Pentests inkl. Tagsatz, Richtwerte, Rabatte und Partnerhinweise.
- [Pricing](https://handbook.syslifters.com/pricing.md): Pricing model for pentests, including day rates, typical project ranges, and discount rules.
- [PrivescCheck](https://handbook.syslifters.com/pentesting-manual/active-directory/privilege-escalation/privesc-check.md): Running PrivescCheck to enumerate local privilege escalation opportunities on a Windows host.
- [Pro Bono Pentests](https://handbook.syslifters.com/de/pro-bono-pentests.md): Pro-Bono-Pentestprogramm - Voraussetzungen, Erwartungen, verpflichtende Retests und Kontakt.
- [Pro Bono Pentests](https://handbook.syslifters.com/pro-bono-pentests.md): Pro bono pentest program - eligibility, expectations, retesting requirements, and how to apply.
- [Project retention](https://handbook.syslifters.com/organization/human-resources/project-retention.md): Keep local pentest project files only as long as needed. Set up Project Sense to delete stale data after 90 days.
- [Projektförderung für Web-Pentests](https://handbook.syslifters.com/de/kmu-cybersecurity-web-pentest.md): CC BY Vorlage für einen Projektantrag zur AWS-Förderung KMU.Cybersecurity für einen Web-Pentest.
- [PXE boot](https://handbook.syslifters.com/pentesting-manual/active-directory/credential-access/pxe-boot.md): PXE boot attack chain notes for extracting SCCM secrets and certificates.
- [Read access to tables with compiled assemblies](https://handbook.syslifters.com/pentesting-manual/power-platform/read-access-to-tables-with-compiled-assemblies.md): How overly broad table permissions can allow users to list and download compiled Dataverse/D365 plugin assemblies.
- [Remote debugging on mobile](https://handbook.syslifters.com/pentesting-manual/mobile/remote-debugging.md): Use Chrome remote debugging when TLS interception breaks on-device traffic inspection.
- [Report writing](https://handbook.syslifters.com/pentesting-manual/reporting/report-writing.md): Style and clarity guidelines for pentest reports (voice, tense, recommendations, and redaction).
- [Resource-Based Constrained Delegation (RBCD)](https://handbook.syslifters.com/pentesting-manual/active-directory/lateral-movement/kerberos-delegation/rbcd.md): Abusing msDS-AllowedToActOnBehalfOfOtherIdentity to impersonate any user against a target computer.
- [Samuel Haim](https://handbook.syslifters.com/about-us/samuel.md): Profile page and CV for Samuel Haim with contact details, experience, and certifications.
- [Samuel Haim](https://handbook.syslifters.com/de/ueber-uns/samuel.md): Profilseite und Lebenslauf von Samuel Haim mit Kontakt, Erfahrung und Zertifikaten.
- [Screenshots](https://handbook.syslifters.com/pentesting-manual/reporting/screenshots.md): How to take clear, useful, and properly redacted screenshots for pentest reports.
- [Search Shodan for SSH keys](https://handbook.syslifters.com/pentesting-manual/external/search-shodan-for-ssh-keys.md): Get an SSH host key fingerprint and use it to find reused keys across hosts via Shodan.
- [Self-evaluation questionnaire](https://handbook.syslifters.com/organization/human-resources/self-evaluation.md): Reflect on your technical and social skills as a pentester. Results are for personal development only—not used for salary, bonuses, or job classification.
- [Sending reports](https://handbook.syslifters.com/pentesting-manual/reporting/sending-reports.md): Guidance for securely sharing pentest reports - encrypted PDFs, password-protected links, expiry dates, and secondary-channel password delivery.
- [Sensitive data discovery](https://handbook.syslifters.com/pentesting-manual/entraid-azure/enumeration/sensitive-data-discovery.md): Hunt credential stores, secrets, and high-risk file types across SharePoint, OneDrive, and Exchange Online using Microsoft Purview eDiscovery content search.
- [Service description of penetration tests](https://handbook.syslifters.com/service-description.md): Service description (terms) for offensive security services.
- [Servicebeschreibung Penetration-Tests](https://handbook.syslifters.com/de/servicebeschreibung.md): Servicebeschreibung für Penetration-Tests und Phishing-Simulationen inkl. Umfang, Mitwirkungspflichten, Geheimhaltung, Haftung und Reporting.
- [Shadow credentials](https://handbook.syslifters.com/pentesting-manual/active-directory/lateral-movement/shadow-credentials.md): Abusing msDS-KeyCredentialLink (key trust) to request TGTs for target objects.
- [Small brute force password lists](https://handbook.syslifters.com/pentesting-manual/web-applications/wordlists/small-bruteforce-lists.md): Compact default credential lists for quick checks across common services.
- [SMB relaying](https://handbook.syslifters.com/pentesting-manual/active-directory/lateral-movement/smb-relaying.md): Methodology and tooling for NTLM relaying attacks over SMB in AD environments.
- [Social security numbers generator](https://handbook.syslifters.com/pentesting-manual/socialsecuritynumbersgenerator.md): Client-side generator for valid-format Austrian social security numbers.
- [Solutions in Power Platform](https://handbook.syslifters.com/pentesting-manual/power-platform/solutions-in-power-platform.md): How solutions bundle apps, flows, tables, and security components for deployment and governance across environments.
- [SQLi and XSS payloads in filenames](https://handbook.syslifters.com/pentesting-manual/web-applications/file-upload/sqli-xss-in-filename.md): Basic payload examples when filenames are concatenated into SQL/HTML contexts.
- [Stellenausschreibung: Senior Penetrationtester](https://handbook.syslifters.com/de/pentesting-senior.md): Stellenausschreibung für einen Senior-Penetrationtester (remote, unbefristet) inkl. Aufgaben, Anforderungen und Bewerbung.
- [This could be important for procurement](https://handbook.syslifters.com/for-procurement.md): Procurement notes - billable expenses, time-based billing, cancellation terms, and where to find formal terms.
- [Tool cheat sheet](https://handbook.syslifters.com/pentesting-manual/active-directory/tool-cheat-sheet.md): Quick-reference commands for common Active Directory tooling.
- [Toolset for Security Penetration Tests](https://handbook.syslifters.com/pentesting-manual/pentesting-toolset.md): Recommended tools and plugins we use for pentesting across web, AD/Windows, and reporting workflows.
- [Travel expenses](https://handbook.syslifters.com/organization/human-resources/travel-expenses.md): General guide for business travel - choosing a hotel, picking the right transportation (ÖBB or car), tracking costs and getting compensation.
- [Überblick zu unserem Vorgehen bei Pentests](https://handbook.syslifters.com/de/pentesting-vorgehen.md): Unser Vorgehen beim Pentest – von Vorbesprechung und Durchführung bis Bericht, Behebung und kostenlosem Re-Test innerhalb von 8 Wochen.
- [Unconstrained Kerberos delegation](https://handbook.syslifters.com/pentesting-manual/active-directory/lateral-movement/kerberos-delegation/unconstrained-delegation.md): Abusing TRUSTED_FOR_DELEGATION to capture forwardable TGTs and impersonate users who authenticate to a compromised host.
- [Universal WAF bypass (request padding)](https://handbook.syslifters.com/pentesting-manual/web-applications/universal-waf-bypass.md): Many WAFs inspect only the first N KB of a request body; prepend junk to push payload past inspection limits.
- [Unser Pentesting-Ansatz](https://handbook.syslifters.com/de/pentesting-ansatz.md): Wie sich Zeit und Wissen auf die Effizienz von Penetrationstests auswirken und wann wir Grey- oder White-Box-Ansätze bevorzugen.
- [Unser Vesting-Vertrag](https://handbook.syslifters.com/de/vesting-vertrag.md): Erklärung und Auszug der Vesting-Vereinbarung der Syslifters-Gründer (Vesting-Zeitraum, Einziehung/Clawback bei vorzeitigem Ausstieg).
- [Unsere Pentester](https://handbook.syslifters.com/de/ueber-uns.md): Lernt unsere Pentester kennen – hochqualifizierte Security-Profis mit fundiertem akademischem Hintergrund, relevanten Zertifizierungen sowie Erfahrung aus internationalen Cybersecurity-Wettbewerben und Übungen.
- [Unsere Skill-Matrix](https://handbook.syslifters.com/de/skill-matrix.md): Skill-Matrix mit Selbsteinschätzung unserer Stärken in Pentesting- und Security-Bereichen.
- [Untitled](https://handbook.syslifters.com/privacy.md): Privacy notice for handbook.syslifters.com.
- [User agent wordlists](https://handbook.syslifters.com/pentesting-manual/web-applications/wordlists/user-agents.md): Links and exported UA lists for fuzzing / WAF behavior checks.
- [UUID v1 sandwich attack](https://handbook.syslifters.com/pentesting-manual/web-applications/auth/uuidv1-sandwich-attack.md): If password reset links use UUIDv1, try a sandwich attack to guess adjacent UUIDs.
- [Vor unseren Pentests](https://handbook.syslifters.com/de/vor-pentests.md): Ablauf vor dem Pentest - Scoping, Timebox, Permission to Attack, Vorlaufzeit und organisatorische Vorbereitung.
- [Vulnerability Disclosure](https://handbook.syslifters.com/de/vulnerability-disclosure.md): Wie du Schwachstellen meldest und unsere Vulnerability-Disclosure-Policy (Scope, Safe Harbour, Regeln).
- [Vulnerability Disclosure](https://handbook.syslifters.com/vulnerability-disclosure.md): How to report vulnerabilities to Syslifters and our vulnerability disclosure policy (including scope and safe harbour).
- [Während unserer Pentests](https://handbook.syslifters.com/de/waehrend-pentests.md): Zusammenarbeit während des Pentests inkl. Austausch, Vertraulichkeit, Quell-IP und Nachtest-Regelung.
- [Was kostet die Gründung einer Pentesting-Firma?](https://handbook.syslifters.com/de/gruendungskosten.md): Aufschlüsselung der Gründungskosten einer Pentesting-Firma in Österreich (2022) inkl. laufender Kosten und Lizenzen.
- [Was wir anbieten](https://handbook.syslifters.com/de/was-wir-anbieten.md): Überblick über unsere offensiven Security-Services, unseren effizienten Pentest-Ansatz und Leistungen, die wir nicht anbieten.
- [WDAC & AppLocker](https://handbook.syslifters.com/pentesting-manual/active-directory/defense-evasion/wdac-applocker.md): Bypassing WDAC and concept and implementation notes for restricting PowerShell capabilities via WDAC and AppLocker.
- [WebSocket hijacking (origin/SOP note)](https://handbook.syslifters.com/pentesting-manual/web-applications/websocket-hijacking.md): WebSockets bypass some expectations of SOP; validate Origin and authenticate the channel.
- [What we provide](https://handbook.syslifters.com/what-we-provide.md): Overview of Syslifters offensive security services, our efficient pentesting approach, and services we do not offer.
- [Working together in projects](https://handbook.syslifters.com/pentesting-manual/working-together.md): How we collaborate during pentests depending on the timebox.
- [WSUS](https://handbook.syslifters.com/pentesting-manual/active-directory/lateral-movement/wsus.md): Abusing legitimate WSUS admin access to push SYSTEM-level code to downstream clients via SharpWSUS.
- [WSUS](https://handbook.syslifters.com/pentesting-manual/active-directory/privilege-escalation/wsus.md): Local privilege escalation by MitM-ing an HTTP WSUS feed and injecting a fake Microsoft-signed update that runs as SYSTEM.
- [XMP metadata injection in PNG uploads](https://handbook.syslifters.com/pentesting-manual/web-applications/file-upload/xmp-metadata-injection-png.md): Embed XML/HTML payloads in PNG XMP metadata to exploit downstream processing or unsafe rendering.
- [XSS via SVG file upload](https://handbook.syslifters.com/pentesting-manual/web-applications/file-upload/svg-xss.md): SVG can embed scripts that execute when rendered; validate content and serve safely.
- [XXE payloads](https://handbook.syslifters.com/pentesting-manual/web-applications/xxe-payloads.md): Payloads and techniques for in-band and blind XXE testing and exfiltration.
- [YubiKey setup](https://handbook.syslifters.com/organization/human-resources/yubikey-setup.md): Setup guide for using a YubiKey for PIV/SSH (Windows) and basic GPG/SSH agent configuration.