d4Rk's 1337 h4x0r guide

⌘Ctrlk

d4Rk's 1337 h4x0r guide

Introduction
Reconnaissance
- Recon
- OSINT
Enumeration
Exploitation
Privilege escalation
- Linux
- Windows
Post exploitation
Services
- TCP
- UDP
- Misc
File transfer
Misc
Bug Bounty
- Platforms
- Tools

Powered by GitBook

On this page

Exploitation

Web

SQL injection (SQLi)Cross site scripting (XSS)File inclusions (LFI, RFI)Directory traversal Cross site request forgery (CSRF)XML external entity (XXE)Cross origin resource sharing (CORS)Server-side request forgery (SSRF)Server-side template injection (SSTI)Access control vulnerabilities Authentication vulnerabilities JWT attacks File uploads Host header attacks Clickjacking Logic flaws OS command injection HTTP Request smuggling Insecure deserialization DOM-based WebSockets Web cache poisoning

PreviousPasswords & credentials NextSQL injection (SQLi)