Exploit Notes

Exploits related to Web

Method

HTTP Rate Limit Bypass

Virtual Hosts (VHOSTS) Enumeration

WAF (Web Application Firewall) Detection

Web Basic Pentesting

Web Content Discovery

Web Login Bypass

Security Risk

Blind XXE

Broken Access Control

Business Logic Attack

CORS (Cross-Origin Resource Sharing) Attack

CRLF (Carriage Return Line Feed) Injection

CSRF (Cross-Site Request Forgery)

Cookie Hijacking

Directory (Path) Traversal

File Inclusion

File Upload Attack

HTTP Request Smuggling

IDOR (Insecure Direct Object References) Attack

Insecure Deserialization

JSON.NET Deserialization

NoSQL Injection

Node.js Deserialization Attack

OAuth Attack

OS Command Injection

Open Redirect

PHP Object Injection

SQL Injection Cheat Sheet

SQL Injection with Sqlmap

SSRF (Server-Side Request Forgery)

SSTI (Server-Side Template Injection)

XSS (Cross-Site Scripting)

XSS with Dynamic PDF

XST (Cross-Site Tracing)

XXE (XML External Entity)

CMS

Bolt CMS Pentesting

CMS (Content Management System) Pentesting

Cockpit CMS Pentesting

Concrete CMS Pentesting

FUEL CMS Pentesting

Joomla CMS Pentesting

Mara CMS Pentesting

Subrion CMS Pentesting

TYPO3 Pentesting

WordPress Pentesting

Framework

AJP (Apache JServ Protocol) Pentesting

Angular Pentesting

Apache Struts Pentesting

Django Pentesting

Flask Jinja2 Pentesting

Spring Cloud Function RCE

Spring Pentesting

Werkzeug Pentesting

API

API Pentesting

GraphQL Pentesting

Cloud

AWS (Amazon Web Services) Pentesting

Spring Cloud Function RCE

Tool

How to Use Burp Suite

How to Use OWASP ZAP

Others

Apache ActiveMQ Pentesting

Apache Tomcat Pentesting

Atlassian Confluence Pentesting

Browser in the Browser (BITB) Attack

ClipBucket Pentesting

Code Deobfuscation

Codiad Pentesting

Dompdf RCE

Dump Git Repository from Website

Grafana Pentesting

HashiCorp Consul Pentesting

JBOSS Pentesting

JWT (Json Web Token) Pentesting

Jenkins Pentesting

Log4j Pentesting

OpenCATS Pentesting

PHP Srand Time Abusing

Restaurant Management System (RMS) Pentesting

TeamCity Pentesting

Tiny File Manager Pentesting

Web Browser Settings for Pentesting

Web PHP Pentesting

WebAnno Pentesting

WebDAV Pentesting

WebSocket Pentesting

Webmin Pentesting

SSTI (Server-Side Template Injection)

Last modified: 2022-12-01

Web

Automation

Tplmap is a program for Server-Side Template Injection and Code Injection.

./tplmap.py -u http://vulnerable.com/?name=test

Identify the Template Engine

a{*comment*}b       -> Smarty
${"z".join("ab")}   -> Mako or ???
{{ '7'*7 }}         -> Jinja2 or Twig or ???

Tools by HDKS

Fuzzagotchi

Automatic web fuzzer.

aut0rec0n

Auto reconnaissance CLI.

Hash Cracker

Hash identifier.