🖥️
[Deletion impending]
Ctrlk
  • Intro
  • Misc Security Notes
    • NMAP
    • File Transfer
    • Shells and Command Execution
    • Bruteforcing passwords
    • Dumping hashes
    • Pivoting
  • Enum/exploit by port
    • Types of Web Vulnerabilities
      • Server Side Request Forgery
      • SQL Injection
      • Cross Site Scripting
      • Command Injection
      • File Inclusion
      • Broken Authentication
      • Insecure Direct Object Reference
    • 80/443 Web
    • 88 Kerberoasting
    • 111 RPCbind
    • 135 RPCCLIENT enum (SMB/Samba)
    • 139/445 SMB
    • 389 LDAP
  • Windows
    • Endpoint Basics
    • Logging
    • Useful CMD commands
    • Useful powershell commands
    • Local Privilege Escalation
    • Credentials on Windows
  • Linux
    • Basic enumeration checklist
    • GTFObins
    • SUID
    • Exploiting writable files and directories
    • Cronjobs / Crontab
  • AD specific tools and methods
    • Active Directory methodology
  • Run outdated python scripts that require equally outdated modules
  • Binary exploitation
    • Assembly
  • Malware analysis
    • Static Analysis
    • Dynamic Analysis
  • Forensics
    • Volatility
    • Trashcan
Powered by GitBook
On this page

Was this helpful?

  1. Enum/exploit by port

Types of Web Vulnerabilities

Server Side Request ForgerySQL InjectionCross Site ScriptingCommand InjectionFile InclusionBroken AuthenticationInsecure Direct Object Reference
PreviousPivotingNextServer Side Request Forgery

Last updated 2 years ago

Was this helpful?