Tester

Search CTRL + K

Tester

Search CTRL + K

Attack Cloud

AWS

flaws.cloud

AWS Practice - flaws.cloud

AWS Practice 2 -flaws2.cloud

Tips

AWS Signed API Request

AWS Signing and Authenticating REST requests

0. AWS Resources

1. AWS Cloud Services

2. AWS Enumeration Process

Azure

Azure General

IAM

How does a user authenticate to the cloud?

Security Token Service

AZURE CLI Tab Completion

Azure Powershell

Azure REST API with Azure CLI

Built-in Permissions

Enumerate with credentials

Enumerate without Credentials

Tenant, Subscription, Resource

Tool - AADInternal

Tool - Azrecon.sh

Tool - AZSubEnum - Subdomain Enum

Tool - BloodHound AzureHoundCustomQuery

Tool - BloodHound

Tool - GraphRunner

Tool - Name mesh

Tool- RoadRecon

Tools - Password spray

Azure Services

Active Directory Federation Services (ADFS)

Azure API Management

Azure App Services

Azure Automation

Azure Key Vault

Azure Resource Manager

Azure Storage Account

Azure Virtual Machine

Microsoft Graph

PwnedLabs

1. Azure Blob Container to Initial Access

2. Unlock Access with Azure Key Vault

3. Azure with Bloodhound and Microsoft.Graph

4. Loot Exchange, Teams and SharePoint with GraphRunner

5. Unmask Privileged Access in Azure

6. Azure Recon to Foothold and Profit

8. Execute Azure Credential Shuffle to Achieve Objectives

Attack Computer

AD

Port

135, 593 - Microsoft Remote Procedure Call

389, 636, 3268, 3269 - LDAP

Lateral Movement

Unauthenticated Path

Attack Linux

Attack Windows

Windows Authentication System

LSASS - Local and Domain

Enumerate Windows

USB - How does it work?

Windows Authentication Systems ( Pending)

Windows Management Instrumentation (WMI)

Windows Remote Management

Windows User Rights

Attack Web

Debugger and Logger

Debugger - vscode

Debugger - .net - DNN

Debugger - Apache Debugger start

Debugger - Docker and NodeJS

Debugger - ERPNext Frappe

Debugger - Java - VSCODE

Debugger-Docker

Debugger-VSCODE-Python

Logger - MongoDB

Logger - MS SQL Server

Logger - Oracle Database

Logger - PostgreSQL

Logger - SQLite

Deserialization - .net

Black Box Appraoch

Debug with dnspy - DNN

White Box Approach

XML Deserialization Vulnerabilities

GraphQL

0. GraphQL Attack Flow

0. GraphQL Resources

2. GraphQL Endpoints?

3. Introspection - Getting information

5. Connection Type

6. 'Something' doesn't exist on type 'Query'

JAVA

JAVA Servlets and Key Methods

JAVA Web Testing - White box

Javascript

Session Riding CSRF

javascript payload session riding - CSRF

Javascript, Nodejs, Express, Webpack

NodeJS - Handlebars

Templating Engine

MYSQL

Collation - MySQL

Logger - MariaDB

PHP

postgresSQL

0. PSQL Extensions attack - UDF

1. PSQL Large Object exploit

1.1 PSQL Large Object Shell -linux

1.2 PSQL Large Object Shell- Windows

Large Object Reverse shell Python code

poc.c Local execution arking.

PSQL Payload copy from, copy to

PSQL payload- RCE

psql poc.c - reverseshell

Remote execution py

Prototype

Main Prototype pollution

Regex

SOP_CORS

SSTI

Server Side Template Injection

web_pentesting_checklist

Resources

1. Javascript thing

1.1 Cross Site Scripting

2.2 SQLi Cheatsheet

3. Command Injection

5. Server Side Attack

5.1 Server Side Includes Injection

5.2 Edge-Side Includes (ESI)

5.3 Server-Side Template Injections

5.4 Extensible stylesheet Language Transformations (XSLT)

6.0 Brute Forcing

7.0 Authentication

9. File Inclusion

9.1 File Inclusion- Remote

9.2 File Inclusion - Log

9.3 File Inclusion - tool

JSON Web Tokens

Web application testing common vulnerability

Web Architecture 101

Automation

Automate OSWE starting routine

Publish Stuff

Digital Garden Resources

Enter to select

to navigate

ESC to close

Unauthenticated Path

https://github.com/ropnop/kerbrute

./kerbrute userenum --domain <domai_name> <wordlists> --dc <ip>

Connected Pages

Depth

Pages mentioning this page

No other pages mentions this page