Recently Updated Pages

File is attached but it was copied from: https://github.com/ismailtasdelen/xss-payload-list.git ...

Open Firewall When we try to access the login via internal network we won't be able to establish...

Before we install splunk we need to change some settings. First we remove the "virbr0" network i...

ARP Poisoning With ARP Poisoning you are able to be the Man in the middle and with that you can ...

SQL injection in general SQL Injection is when an attacker enters a malicious or malformed query...

An LFI vulnerability is found in various web applications. As an example, in the PHP, the followi...

As soon you was able to get a shell on the target you can spawn a stabilized bash shell python -...

linPEAS LinPEAS is a script that search for possible paths to escalate privileges on Linux/Unix*...

Printspoofer PrintSpoofer exploit that can be used to escalate service user permissions on Windo...

SUID PrivEsc Python Some files has Permissions to be executed by any user with full permissions ...

GTFOBins GTFOBins is a curated list of Unix binaries that can be used to bypass local security r...

Sometimes your target has running a WordPress website running on their end. There is also a too...

NMAP in general NMAP is a free open source “Network Mapper” for network exploration or security ...

Nikto Nikto is a perl based security testing tool and this means it will run on most operating s...

FTP Sometimes anonymous login is allowed on a FTP server. ftp <server/ip> During the login you...

Enum4linux is a tool for enumerating information from Windows and Samba systems and is capable of...

GoBuster scans the most common directories which are used on a WebApp / Website. To run this scan...

Sometimes it can be that a target network is in another subnet and you are not able to access it ...

John in general John the Ripper (JTR) is a fast, free and open-source password cracker.We will u...

Hydra is a parallelized login cracker which supports numerous protocols to attack. It is very fas...