diff --git a/network-services-pentesting/11211-memcache/README.md b/network-services-pentesting/11211-memcache/README.md index 928c2b18a..cac944187 100644 --- a/network-services-pentesting/11211-memcache/README.md +++ b/network-services-pentesting/11211-memcache/README.md @@ -223,3 +223,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/11211-memcache/memcache-commands.md b/network-services-pentesting/11211-memcache/memcache-commands.md index d8d558e1a..b359dd7e0 100644 --- a/network-services-pentesting/11211-memcache/memcache-commands.md +++ b/network-services-pentesting/11211-memcache/memcache-commands.md @@ -165,3 +165,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/1521-1522-1529-pentesting-oracle-listener/README.md b/network-services-pentesting/1521-1522-1529-pentesting-oracle-listener/README.md index 9f01ef704..43bb31fd9 100644 --- a/network-services-pentesting/1521-1522-1529-pentesting-oracle-listener/README.md +++ b/network-services-pentesting/1521-1522-1529-pentesting-oracle-listener/README.md @@ -89,3 +89,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-finger.md b/network-services-pentesting/pentesting-finger.md index 753640faf..e12a515eb 100644 --- a/network-services-pentesting/pentesting-finger.md +++ b/network-services-pentesting/pentesting-finger.md @@ -109,3 +109,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-ftp/README.md b/network-services-pentesting/pentesting-ftp/README.md index 374d5e91d..866366c23 100644 --- a/network-services-pentesting/pentesting-ftp/README.md +++ b/network-services-pentesting/pentesting-ftp/README.md @@ -306,3 +306,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-ftp/ftp-bounce-attack.md b/network-services-pentesting/pentesting-ftp/ftp-bounce-attack.md index 46145fa59..f98b81252 100644 --- a/network-services-pentesting/pentesting-ftp/ftp-bounce-attack.md +++ b/network-services-pentesting/pentesting-ftp/ftp-bounce-attack.md @@ -61,3 +61,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-ftp/ftp-bounce-download-2oftp-file.md b/network-services-pentesting/pentesting-ftp/ftp-bounce-download-2oftp-file.md index 7e62da79d..81d48c29b 100644 --- a/network-services-pentesting/pentesting-ftp/ftp-bounce-download-2oftp-file.md +++ b/network-services-pentesting/pentesting-ftp/ftp-bounce-download-2oftp-file.md @@ -72,3 +72,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-irc.md b/network-services-pentesting/pentesting-irc.md index 86f6da765..d91c88959 100644 --- a/network-services-pentesting/pentesting-irc.md +++ b/network-services-pentesting/pentesting-irc.md @@ -110,3 +110,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-jdwp-java-debug-wire-protocol.md b/network-services-pentesting/pentesting-jdwp-java-debug-wire-protocol.md index 5e4dc4b62..da79fc5d5 100644 --- a/network-services-pentesting/pentesting-jdwp-java-debug-wire-protocol.md +++ b/network-services-pentesting/pentesting-jdwp-java-debug-wire-protocol.md @@ -104,3 +104,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-kerberos-88/README.md b/network-services-pentesting/pentesting-kerberos-88/README.md index eadd55bea..6040f4293 100644 --- a/network-services-pentesting/pentesting-kerberos-88/README.md +++ b/network-services-pentesting/pentesting-kerberos-88/README.md @@ -92,3 +92,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-kerberos-88/harvesting-tickets-from-linux.md b/network-services-pentesting/pentesting-kerberos-88/harvesting-tickets-from-linux.md index e65af068c..2dc5da334 100644 --- a/network-services-pentesting/pentesting-kerberos-88/harvesting-tickets-from-linux.md +++ b/network-services-pentesting/pentesting-kerberos-88/harvesting-tickets-from-linux.md @@ -48,3 +48,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-ldap.md b/network-services-pentesting/pentesting-ldap.md index 9666abd00..ef6fa5e64 100644 --- a/network-services-pentesting/pentesting-ldap.md +++ b/network-services-pentesting/pentesting-ldap.md @@ -439,3 +439,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-modbus.md b/network-services-pentesting/pentesting-modbus.md index 60ccbf028..ad24c88c1 100644 --- a/network-services-pentesting/pentesting-modbus.md +++ b/network-services-pentesting/pentesting-modbus.md @@ -68,3 +68,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-mssql-microsoft-sql-server/types-of-mssql-users.md b/network-services-pentesting/pentesting-mssql-microsoft-sql-server/types-of-mssql-users.md index 9ea254201..a1fa32eea 100644 --- a/network-services-pentesting/pentesting-mssql-microsoft-sql-server/types-of-mssql-users.md +++ b/network-services-pentesting/pentesting-mssql-microsoft-sql-server/types-of-mssql-users.md @@ -49,3 +49,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-mysql.md b/network-services-pentesting/pentesting-mysql.md index 60f08aa89..d83fb1d7b 100644 --- a/network-services-pentesting/pentesting-mysql.md +++ b/network-services-pentesting/pentesting-mysql.md @@ -688,3 +688,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-ntp.md b/network-services-pentesting/pentesting-ntp.md index eac2bc29e..bcc9e869b 100644 --- a/network-services-pentesting/pentesting-ntp.md +++ b/network-services-pentesting/pentesting-ntp.md @@ -138,3 +138,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-pop.md b/network-services-pentesting/pentesting-pop.md index a33d01c63..dc3e3596c 100644 --- a/network-services-pentesting/pentesting-pop.md +++ b/network-services-pentesting/pentesting-pop.md @@ -154,4 +154,4 @@ Learn & practice GCP Hacking: -{% endhint %} \ No newline at end of file +{% endhint %} diff --git a/network-services-pentesting/pentesting-postgresql.md b/network-services-pentesting/pentesting-postgresql.md index c3dd1d9bd..010f315e1 100644 --- a/network-services-pentesting/pentesting-postgresql.md +++ b/network-services-pentesting/pentesting-postgresql.md @@ -852,3 +852,4 @@ Use [**Trickest**](https://trickest.com/?utm_source=hacktricks&utm_medium=text&u Get Access Today: {% embed url="https://trickest.com/?utm_source=hacktricks&utm_medium=banner&utm_campaign=ppc&utm_content=pentesting-postgresql" %} + diff --git a/network-services-pentesting/pentesting-rdp.md b/network-services-pentesting/pentesting-rdp.md index 5e416ce5f..d83344daa 100644 --- a/network-services-pentesting/pentesting-rdp.md +++ b/network-services-pentesting/pentesting-rdp.md @@ -195,3 +195,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-remote-gdbserver.md b/network-services-pentesting/pentesting-remote-gdbserver.md index 6e5d5be58..3d8f31672 100644 --- a/network-services-pentesting/pentesting-remote-gdbserver.md +++ b/network-services-pentesting/pentesting-remote-gdbserver.md @@ -224,3 +224,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-rlogin.md b/network-services-pentesting/pentesting-rlogin.md index 147348e07..23607eddc 100644 --- a/network-services-pentesting/pentesting-rlogin.md +++ b/network-services-pentesting/pentesting-rlogin.md @@ -71,3 +71,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-rpcbind.md b/network-services-pentesting/pentesting-rpcbind.md index 00d50903e..c0454664f 100644 --- a/network-services-pentesting/pentesting-rpcbind.md +++ b/network-services-pentesting/pentesting-rpcbind.md @@ -145,3 +145,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-rsh.md b/network-services-pentesting/pentesting-rsh.md index 4b2933152..3edaac32a 100644 --- a/network-services-pentesting/pentesting-rsh.md +++ b/network-services-pentesting/pentesting-rsh.md @@ -57,3 +57,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-sap.md b/network-services-pentesting/pentesting-sap.md index 34e2a916f..4774dcd71 100644 --- a/network-services-pentesting/pentesting-sap.md +++ b/network-services-pentesting/pentesting-sap.md @@ -423,3 +423,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-smb/README.md b/network-services-pentesting/pentesting-smb/README.md index 2513567f8..700f90a7a 100644 --- a/network-services-pentesting/pentesting-smb/README.md +++ b/network-services-pentesting/pentesting-smb/README.md @@ -617,3 +617,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-smb/rpcclient-enumeration.md b/network-services-pentesting/pentesting-smb/rpcclient-enumeration.md index ea87890d0..029e7d999 100644 --- a/network-services-pentesting/pentesting-smb/rpcclient-enumeration.md +++ b/network-services-pentesting/pentesting-smb/rpcclient-enumeration.md @@ -125,3 +125,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-smtp/README.md b/network-services-pentesting/pentesting-smtp/README.md index ed04cd74b..8ce4e25e7 100644 --- a/network-services-pentesting/pentesting-smtp/README.md +++ b/network-services-pentesting/pentesting-smtp/README.md @@ -652,3 +652,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-smtp/smtp-commands.md b/network-services-pentesting/pentesting-smtp/smtp-commands.md index 8c5a4f975..0d99f8243 100644 --- a/network-services-pentesting/pentesting-smtp/smtp-commands.md +++ b/network-services-pentesting/pentesting-smtp/smtp-commands.md @@ -86,3 +86,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-smtp/smtp-smuggling.md b/network-services-pentesting/pentesting-smtp/smtp-smuggling.md index 269b1d652..0a3d54c23 100644 --- a/network-services-pentesting/pentesting-smtp/smtp-smuggling.md +++ b/network-services-pentesting/pentesting-smtp/smtp-smuggling.md @@ -59,3 +59,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-snmp/README.md b/network-services-pentesting/pentesting-snmp/README.md index a3e3b16b3..9a8854b68 100644 --- a/network-services-pentesting/pentesting-snmp/README.md +++ b/network-services-pentesting/pentesting-snmp/README.md @@ -319,3 +319,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-snmp/cisco-snmp.md b/network-services-pentesting/pentesting-snmp/cisco-snmp.md index 2252b20a2..de511c577 100644 --- a/network-services-pentesting/pentesting-snmp/cisco-snmp.md +++ b/network-services-pentesting/pentesting-snmp/cisco-snmp.md @@ -76,3 +76,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-snmp/snmp-rce.md b/network-services-pentesting/pentesting-snmp/snmp-rce.md index 97e0ae1e1..62968a654 100644 --- a/network-services-pentesting/pentesting-snmp/snmp-rce.md +++ b/network-services-pentesting/pentesting-snmp/snmp-rce.md @@ -83,3 +83,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-telnet.md b/network-services-pentesting/pentesting-telnet.md index aaea8fe33..ca910ce4f 100644 --- a/network-services-pentesting/pentesting-telnet.md +++ b/network-services-pentesting/pentesting-telnet.md @@ -119,3 +119,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-vnc.md b/network-services-pentesting/pentesting-vnc.md index 0e957c357..4a30ab115 100644 --- a/network-services-pentesting/pentesting-vnc.md +++ b/network-services-pentesting/pentesting-vnc.md @@ -88,3 +88,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-voip/README.md b/network-services-pentesting/pentesting-voip/README.md index 3cf7f4c7d..7da6c81b6 100644 --- a/network-services-pentesting/pentesting-voip/README.md +++ b/network-services-pentesting/pentesting-voip/README.md @@ -750,3 +750,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-voip/basic-voip-protocols/README.md b/network-services-pentesting/pentesting-voip/basic-voip-protocols/README.md index d3885c919..8b1be7b53 100644 --- a/network-services-pentesting/pentesting-voip/basic-voip-protocols/README.md +++ b/network-services-pentesting/pentesting-voip/basic-voip-protocols/README.md @@ -124,3 +124,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-voip/basic-voip-protocols/sip-session-initiation-protocol.md b/network-services-pentesting/pentesting-voip/basic-voip-protocols/sip-session-initiation-protocol.md index c4b1208ab..b86b43946 100644 --- a/network-services-pentesting/pentesting-voip/basic-voip-protocols/sip-session-initiation-protocol.md +++ b/network-services-pentesting/pentesting-voip/basic-voip-protocols/sip-session-initiation-protocol.md @@ -271,3 +271,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/403-and-401-bypasses.md b/network-services-pentesting/pentesting-web/403-and-401-bypasses.md index 465965988..5fd433235 100644 --- a/network-services-pentesting/pentesting-web/403-and-401-bypasses.md +++ b/network-services-pentesting/pentesting-web/403-and-401-bypasses.md @@ -160,3 +160,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/README.md b/network-services-pentesting/pentesting-web/README.md index 4ed3520eb..304721df4 100644 --- a/network-services-pentesting/pentesting-web/README.md +++ b/network-services-pentesting/pentesting-web/README.md @@ -463,3 +463,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/aem-adobe-experience-cloud.md b/network-services-pentesting/pentesting-web/aem-adobe-experience-cloud.md index 64b70a13e..cc52089a4 100644 --- a/network-services-pentesting/pentesting-web/aem-adobe-experience-cloud.md +++ b/network-services-pentesting/pentesting-web/aem-adobe-experience-cloud.md @@ -36,3 +36,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/artifactory-hacking-guide.md b/network-services-pentesting/pentesting-web/artifactory-hacking-guide.md index ffff82064..c520c2003 100644 --- a/network-services-pentesting/pentesting-web/artifactory-hacking-guide.md +++ b/network-services-pentesting/pentesting-web/artifactory-hacking-guide.md @@ -33,3 +33,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/buckets/README.md b/network-services-pentesting/pentesting-web/buckets/README.md index ff53e5669..09b7b6d07 100644 --- a/network-services-pentesting/pentesting-web/buckets/README.md +++ b/network-services-pentesting/pentesting-web/buckets/README.md @@ -33,3 +33,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/buckets/firebase-database.md b/network-services-pentesting/pentesting-web/buckets/firebase-database.md index 86767522c..b91fd18f9 100644 --- a/network-services-pentesting/pentesting-web/buckets/firebase-database.md +++ b/network-services-pentesting/pentesting-web/buckets/firebase-database.md @@ -37,3 +37,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/cgi.md b/network-services-pentesting/pentesting-web/cgi.md index a4f474531..4f5577469 100644 --- a/network-services-pentesting/pentesting-web/cgi.md +++ b/network-services-pentesting/pentesting-web/cgi.md @@ -122,3 +122,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/django.md b/network-services-pentesting/pentesting-web/django.md index 2028f6166..27a978049 100644 --- a/network-services-pentesting/pentesting-web/django.md +++ b/network-services-pentesting/pentesting-web/django.md @@ -6,3 +6,4 @@ Django's default cache storage method is [Python pickles](https://docs.python.or Django cache is stored in one of four places: [Redis](https://github.com/django/django/blob/48a1929ca050f1333927860ff561f6371706968a/django/core/cache/backends/redis.py#L12), [memory](https://github.com/django/django/blob/48a1929ca050f1333927860ff561f6371706968a/django/core/cache/backends/locmem.py#L16), [files](https://github.com/django/django/blob/48a1929ca050f1333927860ff561f6371706968a/django/core/cache/backends/filebased.py#L16), or a [database](https://github.com/django/django/blob/48a1929ca050f1333927860ff561f6371706968a/django/core/cache/backends/db.py#L95). Cache stored in a Redis server or database are the most likely attack vectors (Redis injection and SQL injection), but an attacker may also be able to use file-based cache to turn an arbitrary write into RCE. Maintainers have marked this as a non-issue. It's important to note that the cache file folder, SQL table name, and Redis server details will vary based on implementation. This HackerOne report provides a great, reproducible example of exploiting Django cache stored in a SQLite database: https://hackerone.com/reports/1415436 + diff --git a/network-services-pentesting/pentesting-web/dotnetnuke-dnn.md b/network-services-pentesting/pentesting-web/dotnetnuke-dnn.md index d6705e720..39d3e2aef 100644 --- a/network-services-pentesting/pentesting-web/dotnetnuke-dnn.md +++ b/network-services-pentesting/pentesting-web/dotnetnuke-dnn.md @@ -68,3 +68,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/drupal/README.md b/network-services-pentesting/pentesting-web/drupal/README.md index 8711cbe90..a78ec7b3b 100644 --- a/network-services-pentesting/pentesting-web/drupal/README.md +++ b/network-services-pentesting/pentesting-web/drupal/README.md @@ -134,4 +134,4 @@ Learn & practice GCP Hacking: * **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos. </details> -{% endhint %} \ No newline at end of file +{% endhint %} diff --git a/network-services-pentesting/pentesting-web/drupal/drupal-rce.md b/network-services-pentesting/pentesting-web/drupal/drupal-rce.md index f3932d8aa..12b3089cf 100644 --- a/network-services-pentesting/pentesting-web/drupal/drupal-rce.md +++ b/network-services-pentesting/pentesting-web/drupal/drupal-rce.md @@ -274,3 +274,4 @@ Learn & practice GCP Hacking: <img src= {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/electron-desktop-apps/electron-contextisolation-rce-via-electron-internal-code.md b/network-services-pentesting/pentesting-web/electron-desktop-apps/electron-contextisolation-rce-via-electron-internal-code.md index fa993ddb5..6614f3635 100644 --- a/network-services-pentesting/pentesting-web/electron-desktop-apps/electron-contextisolation-rce-via-electron-internal-code.md +++ b/network-services-pentesting/pentesting-web/electron-desktop-apps/electron-contextisolation-rce-via-electron-internal-code.md @@ -87,3 +87,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/electron-desktop-apps/electron-contextisolation-rce-via-ipc.md b/network-services-pentesting/pentesting-web/electron-desktop-apps/electron-contextisolation-rce-via-ipc.md index 9496f77d3..fde1a86cd 100644 --- a/network-services-pentesting/pentesting-web/electron-desktop-apps/electron-contextisolation-rce-via-ipc.md +++ b/network-services-pentesting/pentesting-web/electron-desktop-apps/electron-contextisolation-rce-via-ipc.md @@ -127,3 +127,4 @@ Learn & practice GCP Hacking: </details> {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/electron-desktop-apps/electron-contextisolation-rce-via-preload-code.md b/network-services-pentesting/pentesting-web/electron-desktop-apps/electron-contextisolation-rce-via-preload-code.md index 55b023763..31992241a 100644 --- a/network-services-pentesting/pentesting-web/electron-desktop-apps/electron-contextisolation-rce-via-preload-code.md +++ b/network-services-pentesting/pentesting-web/electron-desktop-apps/electron-contextisolation-rce-via-preload-code.md @@ -112,3 +112,4 @@ Learn & practice GCP Hacking: <img src= {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/flask.md b/network-services-pentesting/pentesting-web/flask.md index 5062bfb22..6b3112baf 100644 --- a/network-services-pentesting/pentesting-web/flask.md +++ b/network-services-pentesting/pentesting-web/flask.md @@ -140,3 +140,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/git.md b/network-services-pentesting/pentesting-web/git.md index 75bc59bf3..5c7032176 100644 --- a/network-services-pentesting/pentesting-web/git.md +++ b/network-services-pentesting/pentesting-web/git.md @@ -47,3 +47,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/golang.md b/network-services-pentesting/pentesting-web/golang.md index 3b13ffdba..36d041099 100644 --- a/network-services-pentesting/pentesting-web/golang.md +++ b/network-services-pentesting/pentesting-web/golang.md @@ -52,3 +52,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/graphql.md b/network-services-pentesting/pentesting-web/graphql.md index d1bda449b..425319bcc 100644 --- a/network-services-pentesting/pentesting-web/graphql.md +++ b/network-services-pentesting/pentesting-web/graphql.md @@ -690,3 +690,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/gwt-google-web-toolkit.md b/network-services-pentesting/pentesting-web/gwt-google-web-toolkit.md index 8a0780c9a..b6a87fda9 100644 --- a/network-services-pentesting/pentesting-web/gwt-google-web-toolkit.md +++ b/network-services-pentesting/pentesting-web/gwt-google-web-toolkit.md @@ -1,2 +1,3 @@ # GWT - Google Web Toolkit + diff --git a/network-services-pentesting/pentesting-web/h2-java-sql-database.md b/network-services-pentesting/pentesting-web/h2-java-sql-database.md index 28f6f0c30..3f132a25f 100644 --- a/network-services-pentesting/pentesting-web/h2-java-sql-database.md +++ b/network-services-pentesting/pentesting-web/h2-java-sql-database.md @@ -66,3 +66,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/iis-internet-information-services.md b/network-services-pentesting/pentesting-web/iis-internet-information-services.md index 0866abc8a..2eed56b09 100644 --- a/network-services-pentesting/pentesting-web/iis-internet-information-services.md +++ b/network-services-pentesting/pentesting-web/iis-internet-information-services.md @@ -301,3 +301,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/imagemagick-security.md b/network-services-pentesting/pentesting-web/imagemagick-security.md index 4bd92d5d3..b1a28ede8 100644 --- a/network-services-pentesting/pentesting-web/imagemagick-security.md +++ b/network-services-pentesting/pentesting-web/imagemagick-security.md @@ -69,3 +69,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/jboss.md b/network-services-pentesting/pentesting-web/jboss.md index a33eef281..fd468e512 100644 --- a/network-services-pentesting/pentesting-web/jboss.md +++ b/network-services-pentesting/pentesting-web/jboss.md @@ -58,3 +58,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/jira.md b/network-services-pentesting/pentesting-web/jira.md index 882c3cf65..4d82adcac 100644 --- a/network-services-pentesting/pentesting-web/jira.md +++ b/network-services-pentesting/pentesting-web/jira.md @@ -155,3 +155,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/joomla.md b/network-services-pentesting/pentesting-web/joomla.md index d4b859edc..eb3171a81 100644 --- a/network-services-pentesting/pentesting-web/joomla.md +++ b/network-services-pentesting/pentesting-web/joomla.md @@ -161,3 +161,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/jsp.md b/network-services-pentesting/pentesting-web/jsp.md index 28dd4c276..fb8438d2a 100644 --- a/network-services-pentesting/pentesting-web/jsp.md +++ b/network-services-pentesting/pentesting-web/jsp.md @@ -41,3 +41,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/laravel.md b/network-services-pentesting/pentesting-web/laravel.md index 3b4742890..99e66fbac 100644 --- a/network-services-pentesting/pentesting-web/laravel.md +++ b/network-services-pentesting/pentesting-web/laravel.md @@ -140,3 +140,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/moodle.md b/network-services-pentesting/pentesting-web/moodle.md index f371fc1bb..b0af4aeb2 100644 --- a/network-services-pentesting/pentesting-web/moodle.md +++ b/network-services-pentesting/pentesting-web/moodle.md @@ -145,3 +145,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/nextjs.md b/network-services-pentesting/pentesting-web/nextjs.md index 05a7d64cf..18bd9f958 100644 --- a/network-services-pentesting/pentesting-web/nextjs.md +++ b/network-services-pentesting/pentesting-web/nextjs.md @@ -35,3 +35,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/nginx.md b/network-services-pentesting/pentesting-web/nginx.md index 3e5e380d8..3ce15c090 100644 --- a/network-services-pentesting/pentesting-web/nginx.md +++ b/network-services-pentesting/pentesting-web/nginx.md @@ -340,3 +340,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/nodejs-express.md b/network-services-pentesting/pentesting-web/nodejs-express.md index 96d0b27e6..49e133266 100644 --- a/network-services-pentesting/pentesting-web/nodejs-express.md +++ b/network-services-pentesting/pentesting-web/nodejs-express.md @@ -35,3 +35,4 @@ iI you know the secret you can sign a the cookie. ```bash cookie-monster -e -f new_cookie.json -k secret ``` + diff --git a/network-services-pentesting/pentesting-web/php-tricks-esp/README.md b/network-services-pentesting/pentesting-web/php-tricks-esp/README.md index 7787264b7..7f0d36523 100644 --- a/network-services-pentesting/pentesting-web/php-tricks-esp/README.md +++ b/network-services-pentesting/pentesting-web/php-tricks-esp/README.md @@ -546,3 +546,4 @@ Learn & practice GCP Hacking: </details> {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/php-tricks-esp/php-rce-abusing-object-creation-new-usd_get-a-usd_get-b.md b/network-services-pentesting/pentesting-web/php-tricks-esp/php-rce-abusing-object-creation-new-usd_get-a-usd_get-b.md index 93a27d387..92ef27fcd 100644 --- a/network-services-pentesting/pentesting-web/php-tricks-esp/php-rce-abusing-object-creation-new-usd_get-a-usd_get-b.md +++ b/network-services-pentesting/pentesting-web/php-tricks-esp/php-rce-abusing-object-creation-new-usd_get-a-usd_get-b.md @@ -128,3 +128,4 @@ Learn & practice GCP Hacking: <img src= {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/php-tricks-esp/php-ssrf.md b/network-services-pentesting/pentesting-web/php-tricks-esp/php-ssrf.md index bc9a5b66b..0818b3f68 100644 --- a/network-services-pentesting/pentesting-web/php-tricks-esp/php-ssrf.md +++ b/network-services-pentesting/pentesting-web/php-tricks-esp/php-ssrf.md @@ -95,3 +95,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/README.md b/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/README.md index 7e53e7f26..007a244bb 100644 --- a/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/README.md +++ b/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/README.md @@ -842,3 +842,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-dl-function.md b/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-dl-function.md index 1f683f57b..c12ab2246 100644 --- a/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-dl-function.md +++ b/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-dl-function.md @@ -110,3 +110,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-php-fpm-fastcgi.md b/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-php-fpm-fastcgi.md index 899423ddb..74dd28579 100644 --- a/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-php-fpm-fastcgi.md +++ b/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-php-fpm-fastcgi.md @@ -461,3 +461,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-php-less-than-5.2.9-on-windows.md b/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-php-less-than-5.2.9-on-windows.md index 2787af9d8..6a20dbe3c 100644 --- a/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-php-less-than-5.2.9-on-windows.md +++ b/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-php-less-than-5.2.9-on-windows.md @@ -103,3 +103,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/put-method-webdav.md b/network-services-pentesting/pentesting-web/put-method-webdav.md index ae60051a8..257ad2378 100644 --- a/network-services-pentesting/pentesting-web/put-method-webdav.md +++ b/network-services-pentesting/pentesting-web/put-method-webdav.md @@ -148,3 +148,4 @@ Use [**Trickest**](https://trickest.com/?utm_source=hacktricks\&utm_medium=text\ Get Access Today: {% embed url="https://trickest.com/?utm_source=hacktricks&utm_medium=banner&utm_campaign=ppc&utm_content=put-method-webdav" %} + diff --git a/network-services-pentesting/pentesting-web/python.md b/network-services-pentesting/pentesting-web/python.md index 180b2fc5d..914ba6bad 100644 --- a/network-services-pentesting/pentesting-web/python.md +++ b/network-services-pentesting/pentesting-web/python.md @@ -51,3 +51,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/rocket-chat.md b/network-services-pentesting/pentesting-web/rocket-chat.md index 4602e96b9..d72531c7e 100644 --- a/network-services-pentesting/pentesting-web/rocket-chat.md +++ b/network-services-pentesting/pentesting-web/rocket-chat.md @@ -69,3 +69,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/special-http-headers.md b/network-services-pentesting/pentesting-web/special-http-headers.md index 2e7992b01..1c6909854 100644 --- a/network-services-pentesting/pentesting-web/special-http-headers.md +++ b/network-services-pentesting/pentesting-web/special-http-headers.md @@ -226,3 +226,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/spring-actuators.md b/network-services-pentesting/pentesting-web/spring-actuators.md index 25b9b4bbe..fd579e026 100644 --- a/network-services-pentesting/pentesting-web/spring-actuators.md +++ b/network-services-pentesting/pentesting-web/spring-actuators.md @@ -89,3 +89,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/symphony.md b/network-services-pentesting/pentesting-web/symphony.md index 8895cd9e7..e9f6c825f 100644 --- a/network-services-pentesting/pentesting-web/symphony.md +++ b/network-services-pentesting/pentesting-web/symphony.md @@ -35,3 +35,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/tomcat/README.md b/network-services-pentesting/pentesting-web/tomcat/README.md index 7bf01a018..88940a50a 100644 --- a/network-services-pentesting/pentesting-web/tomcat/README.md +++ b/network-services-pentesting/pentesting-web/tomcat/README.md @@ -290,3 +290,4 @@ Learn & practice GCP Hacking: </details> {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/uncovering-cloudflare.md b/network-services-pentesting/pentesting-web/uncovering-cloudflare.md index e2d6f4fce..47d871ec4 100644 --- a/network-services-pentesting/pentesting-web/uncovering-cloudflare.md +++ b/network-services-pentesting/pentesting-web/uncovering-cloudflare.md @@ -168,3 +168,4 @@ Learn & practice GCP Hacking: <img src= {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/vmware-esx-vcenter....md b/network-services-pentesting/pentesting-web/vmware-esx-vcenter....md index c0d0070f5..9687024b5 100644 --- a/network-services-pentesting/pentesting-web/vmware-esx-vcenter....md +++ b/network-services-pentesting/pentesting-web/vmware-esx-vcenter....md @@ -56,3 +56,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/werkzeug.md b/network-services-pentesting/pentesting-web/werkzeug.md index 8ce72c8c7..ebcbd0267 100644 --- a/network-services-pentesting/pentesting-web/werkzeug.md +++ b/network-services-pentesting/pentesting-web/werkzeug.md @@ -212,3 +212,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/network-services-pentesting/pentesting-web/wordpress.md b/network-services-pentesting/pentesting-web/wordpress.md index 4a54e5b48..28fdbb919 100644 --- a/network-services-pentesting/pentesting-web/wordpress.md +++ b/network-services-pentesting/pentesting-web/wordpress.md @@ -499,3 +499,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/2fa-bypass.md b/pentesting-web/2fa-bypass.md index d40acb173..2d67fd88a 100644 --- a/pentesting-web/2fa-bypass.md +++ b/pentesting-web/2fa-bypass.md @@ -155,3 +155,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/abusing-hop-by-hop-headers.md b/pentesting-web/abusing-hop-by-hop-headers.md index 946098dda..2ae296e39 100644 --- a/pentesting-web/abusing-hop-by-hop-headers.md +++ b/pentesting-web/abusing-hop-by-hop-headers.md @@ -78,3 +78,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/account-takeover.md b/pentesting-web/account-takeover.md index 82d1ea213..5e7062e6f 100644 --- a/pentesting-web/account-takeover.md +++ b/pentesting-web/account-takeover.md @@ -148,3 +148,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/browser-extension-pentesting-methodology/README.md b/pentesting-web/browser-extension-pentesting-methodology/README.md index 6c5824d07..3a0b03196 100644 --- a/pentesting-web/browser-extension-pentesting-methodology/README.md +++ b/pentesting-web/browser-extension-pentesting-methodology/README.md @@ -791,3 +791,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/browser-extension-pentesting-methodology/browext-clickjacking.md b/pentesting-web/browser-extension-pentesting-methodology/browext-clickjacking.md index 4d29c15cd..165c8b29c 100644 --- a/pentesting-web/browser-extension-pentesting-methodology/browext-clickjacking.md +++ b/pentesting-web/browser-extension-pentesting-methodology/browext-clickjacking.md @@ -129,3 +129,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/browser-extension-pentesting-methodology/browext-permissions-and-host_permissions.md b/pentesting-web/browser-extension-pentesting-methodology/browext-permissions-and-host_permissions.md index 557cc1620..15b57f881 100644 --- a/pentesting-web/browser-extension-pentesting-methodology/browext-permissions-and-host_permissions.md +++ b/pentesting-web/browser-extension-pentesting-methodology/browext-permissions-and-host_permissions.md @@ -141,3 +141,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/browser-extension-pentesting-methodology/browext-xss-example.md b/pentesting-web/browser-extension-pentesting-methodology/browext-xss-example.md index d9dc0fdd1..2d06fb643 100644 --- a/pentesting-web/browser-extension-pentesting-methodology/browext-xss-example.md +++ b/pentesting-web/browser-extension-pentesting-methodology/browext-xss-example.md @@ -134,3 +134,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/bypass-payment-process.md b/pentesting-web/bypass-payment-process.md index 1d3a44269..6c39f77da 100644 --- a/pentesting-web/bypass-payment-process.md +++ b/pentesting-web/bypass-payment-process.md @@ -61,3 +61,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/cache-deception/cache-poisoning-to-dos.md b/pentesting-web/cache-deception/cache-poisoning-to-dos.md index b7993561c..b50c389c7 100644 --- a/pentesting-web/cache-deception/cache-poisoning-to-dos.md +++ b/pentesting-web/cache-deception/cache-poisoning-to-dos.md @@ -170,3 +170,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/cache-deception/cache-poisoning-via-url-discrepancies.md b/pentesting-web/cache-deception/cache-poisoning-via-url-discrepancies.md index 9b28e61d9..f8c03f802 100644 --- a/pentesting-web/cache-deception/cache-poisoning-via-url-discrepancies.md +++ b/pentesting-web/cache-deception/cache-poisoning-via-url-discrepancies.md @@ -77,3 +77,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/captcha-bypass.md b/pentesting-web/captcha-bypass.md index e5de64d62..43a696bd0 100644 --- a/pentesting-web/captcha-bypass.md +++ b/pentesting-web/captcha-bypass.md @@ -61,3 +61,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/clickjacking.md b/pentesting-web/clickjacking.md index 634d83ec3..e113a29a5 100644 --- a/pentesting-web/clickjacking.md +++ b/pentesting-web/clickjacking.md @@ -241,3 +241,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/client-side-path-traversal.md b/pentesting-web/client-side-path-traversal.md index a382b11ca..5e67b71af 100644 --- a/pentesting-web/client-side-path-traversal.md +++ b/pentesting-web/client-side-path-traversal.md @@ -40,3 +40,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/client-side-template-injection-csti.md b/pentesting-web/client-side-template-injection-csti.md index 8dfefa3ea..dec9c6070 100644 --- a/pentesting-web/client-side-template-injection-csti.md +++ b/pentesting-web/client-side-template-injection-csti.md @@ -126,3 +126,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/command-injection.md b/pentesting-web/command-injection.md index 8d4220e68..b0ab2f72d 100644 --- a/pentesting-web/command-injection.md +++ b/pentesting-web/command-injection.md @@ -181,3 +181,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/content-security-policy-csp-bypass/csp-bypass-self-+-unsafe-inline-with-iframes.md b/pentesting-web/content-security-policy-csp-bypass/csp-bypass-self-+-unsafe-inline-with-iframes.md index ca7ebde90..115e7898f 100644 --- a/pentesting-web/content-security-policy-csp-bypass/csp-bypass-self-+-unsafe-inline-with-iframes.md +++ b/pentesting-web/content-security-policy-csp-bypass/csp-bypass-self-+-unsafe-inline-with-iframes.md @@ -93,3 +93,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/crlf-0d-0a.md b/pentesting-web/crlf-0d-0a.md index d227ae531..cd03ec8ae 100644 --- a/pentesting-web/crlf-0d-0a.md +++ b/pentesting-web/crlf-0d-0a.md @@ -254,3 +254,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/csrf-cross-site-request-forgery.md b/pentesting-web/csrf-cross-site-request-forgery.md index a0cb02376..688349483 100644 --- a/pentesting-web/csrf-cross-site-request-forgery.md +++ b/pentesting-web/csrf-cross-site-request-forgery.md @@ -653,3 +653,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/dangling-markup-html-scriptless-injection/README.md b/pentesting-web/dangling-markup-html-scriptless-injection/README.md index 59de630ac..a4b1ac310 100644 --- a/pentesting-web/dangling-markup-html-scriptless-injection/README.md +++ b/pentesting-web/dangling-markup-html-scriptless-injection/README.md @@ -297,3 +297,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/dangling-markup-html-scriptless-injection/ss-leaks.md b/pentesting-web/dangling-markup-html-scriptless-injection/ss-leaks.md index c2c42faa5..5bbc89396 100644 --- a/pentesting-web/dangling-markup-html-scriptless-injection/ss-leaks.md +++ b/pentesting-web/dangling-markup-html-scriptless-injection/ss-leaks.md @@ -31,3 +31,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/dependency-confusion.md b/pentesting-web/dependency-confusion.md index 5ff01deb7..235a3807c 100644 --- a/pentesting-web/dependency-confusion.md +++ b/pentesting-web/dependency-confusion.md @@ -77,3 +77,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/deserialization/README.md b/pentesting-web/deserialization/README.md index 33c59a24f..090939e29 100644 --- a/pentesting-web/deserialization/README.md +++ b/pentesting-web/deserialization/README.md @@ -988,3 +988,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/deserialization/basic-.net-deserialization-objectdataprovider-gadgets-expandedwrapper-and-json.net.md b/pentesting-web/deserialization/basic-.net-deserialization-objectdataprovider-gadgets-expandedwrapper-and-json.net.md index 0f26488e8..76de4ce3e 100644 --- a/pentesting-web/deserialization/basic-.net-deserialization-objectdataprovider-gadgets-expandedwrapper-and-json.net.md +++ b/pentesting-web/deserialization/basic-.net-deserialization-objectdataprovider-gadgets-expandedwrapper-and-json.net.md @@ -221,3 +221,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/deserialization/basic-java-deserialization-objectinputstream-readobject.md b/pentesting-web/deserialization/basic-java-deserialization-objectinputstream-readobject.md index 030ec10e8..e72fa9608 100644 --- a/pentesting-web/deserialization/basic-java-deserialization-objectinputstream-readobject.md +++ b/pentesting-web/deserialization/basic-java-deserialization-objectinputstream-readobject.md @@ -119,3 +119,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/deserialization/java-dns-deserialization-and-gadgetprobe.md b/pentesting-web/deserialization/java-dns-deserialization-and-gadgetprobe.md index 57aa09edc..99b8d40c5 100644 --- a/pentesting-web/deserialization/java-dns-deserialization-and-gadgetprobe.md +++ b/pentesting-web/deserialization/java-dns-deserialization-and-gadgetprobe.md @@ -225,3 +225,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/deserialization/java-jsf-viewstate-.faces-deserialization.md b/pentesting-web/deserialization/java-jsf-viewstate-.faces-deserialization.md index 68c810640..4c6cfd8fd 100644 --- a/pentesting-web/deserialization/java-jsf-viewstate-.faces-deserialization.md +++ b/pentesting-web/deserialization/java-jsf-viewstate-.faces-deserialization.md @@ -36,3 +36,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/deserialization/jndi-java-naming-and-directory-interface-and-log4shell.md b/pentesting-web/deserialization/jndi-java-naming-and-directory-interface-and-log4shell.md index e966d65df..711ef419c 100644 --- a/pentesting-web/deserialization/jndi-java-naming-and-directory-interface-and-log4shell.md +++ b/pentesting-web/deserialization/jndi-java-naming-and-directory-interface-and-log4shell.md @@ -491,3 +491,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/deserialization/nodejs-proto-prototype-pollution/README.md b/pentesting-web/deserialization/nodejs-proto-prototype-pollution/README.md index abe798704..94935e730 100644 --- a/pentesting-web/deserialization/nodejs-proto-prototype-pollution/README.md +++ b/pentesting-web/deserialization/nodejs-proto-prototype-pollution/README.md @@ -405,3 +405,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/deserialization/nodejs-proto-prototype-pollution/client-side-prototype-pollution.md b/pentesting-web/deserialization/nodejs-proto-prototype-pollution/client-side-prototype-pollution.md index 59202b416..e72d8b909 100644 --- a/pentesting-web/deserialization/nodejs-proto-prototype-pollution/client-side-prototype-pollution.md +++ b/pentesting-web/deserialization/nodejs-proto-prototype-pollution/client-side-prototype-pollution.md @@ -142,3 +142,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/deserialization/nodejs-proto-prototype-pollution/express-prototype-pollution-gadgets.md b/pentesting-web/deserialization/nodejs-proto-prototype-pollution/express-prototype-pollution-gadgets.md index c25555200..c0c7ca10b 100644 --- a/pentesting-web/deserialization/nodejs-proto-prototype-pollution/express-prototype-pollution-gadgets.md +++ b/pentesting-web/deserialization/nodejs-proto-prototype-pollution/express-prototype-pollution-gadgets.md @@ -150,3 +150,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/deserialization/nodejs-proto-prototype-pollution/prototype-pollution-to-rce.md b/pentesting-web/deserialization/nodejs-proto-prototype-pollution/prototype-pollution-to-rce.md index 94db19eb0..0fb200a34 100644 --- a/pentesting-web/deserialization/nodejs-proto-prototype-pollution/prototype-pollution-to-rce.md +++ b/pentesting-web/deserialization/nodejs-proto-prototype-pollution/prototype-pollution-to-rce.md @@ -744,3 +744,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/deserialization/php-deserialization-+-autoload-classes.md b/pentesting-web/deserialization/php-deserialization-+-autoload-classes.md index 6a5eea148..d066b6c1b 100644 --- a/pentesting-web/deserialization/php-deserialization-+-autoload-classes.md +++ b/pentesting-web/deserialization/php-deserialization-+-autoload-classes.md @@ -99,3 +99,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/deserialization/python-yaml-deserialization.md b/pentesting-web/deserialization/python-yaml-deserialization.md index 477a65b21..e42354f60 100644 --- a/pentesting-web/deserialization/python-yaml-deserialization.md +++ b/pentesting-web/deserialization/python-yaml-deserialization.md @@ -175,3 +175,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/deserialization/ruby-class-pollution.md b/pentesting-web/deserialization/ruby-class-pollution.md index b6a3c21ad..c373818eb 100644 --- a/pentesting-web/deserialization/ruby-class-pollution.md +++ b/pentesting-web/deserialization/ruby-class-pollution.md @@ -448,3 +448,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/domain-subdomain-takeover.md b/pentesting-web/domain-subdomain-takeover.md index 86378e62d..ebc923f6c 100644 --- a/pentesting-web/domain-subdomain-takeover.md +++ b/pentesting-web/domain-subdomain-takeover.md @@ -120,3 +120,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/email-injections.md b/pentesting-web/email-injections.md index 861cb121f..ea8dc7c7f 100644 --- a/pentesting-web/email-injections.md +++ b/pentesting-web/email-injections.md @@ -247,3 +247,4 @@ Use [**Trickest**](https://trickest.com/?utm_source=hacktricks\&utm_medium=text\ Get Access Today: {% embed url="https://trickest.com/?utm_source=hacktricks&utm_medium=banner&utm_campaign=ppc&utm_content=email-injections" %} + diff --git a/pentesting-web/file-inclusion/README.md b/pentesting-web/file-inclusion/README.md index 0d87a5116..128b33c10 100644 --- a/pentesting-web/file-inclusion/README.md +++ b/pentesting-web/file-inclusion/README.md @@ -771,3 +771,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/file-inclusion/lfi2rce-via-compress.zlib-+-php_stream_prefer_studio-+-path-disclosure.md b/pentesting-web/file-inclusion/lfi2rce-via-compress.zlib-+-php_stream_prefer_studio-+-path-disclosure.md index bfd8bb733..6f9c87505 100644 --- a/pentesting-web/file-inclusion/lfi2rce-via-compress.zlib-+-php_stream_prefer_studio-+-path-disclosure.md +++ b/pentesting-web/file-inclusion/lfi2rce-via-compress.zlib-+-php_stream_prefer_studio-+-path-disclosure.md @@ -67,3 +67,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/file-inclusion/lfi2rce-via-eternal-waiting.md b/pentesting-web/file-inclusion/lfi2rce-via-eternal-waiting.md index 252446f05..7458e3842 100644 --- a/pentesting-web/file-inclusion/lfi2rce-via-eternal-waiting.md +++ b/pentesting-web/file-inclusion/lfi2rce-via-eternal-waiting.md @@ -127,3 +127,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/file-inclusion/lfi2rce-via-nginx-temp-files.md b/pentesting-web/file-inclusion/lfi2rce-via-nginx-temp-files.md index 78c85e3e6..6d3f0c0d4 100644 --- a/pentesting-web/file-inclusion/lfi2rce-via-nginx-temp-files.md +++ b/pentesting-web/file-inclusion/lfi2rce-via-nginx-temp-files.md @@ -74,3 +74,4 @@ Learn & practice GCP Hacking: {% endhint %} ``` + diff --git a/pentesting-web/file-inclusion/lfi2rce-via-php-filters.md b/pentesting-web/file-inclusion/lfi2rce-via-php-filters.md index e7ae44af6..1b2daae0e 100644 --- a/pentesting-web/file-inclusion/lfi2rce-via-php-filters.md +++ b/pentesting-web/file-inclusion/lfi2rce-via-php-filters.md @@ -303,3 +303,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/file-inclusion/lfi2rce-via-phpinfo.md b/pentesting-web/file-inclusion/lfi2rce-via-phpinfo.md index 8b9ee6268..ff9af1258 100644 --- a/pentesting-web/file-inclusion/lfi2rce-via-phpinfo.md +++ b/pentesting-web/file-inclusion/lfi2rce-via-phpinfo.md @@ -103,3 +103,4 @@ Learn & practice GCP Hacking: -{% endhint %} \ No newline at end of file +{% endhint %} diff --git a/pentesting-web/file-inclusion/lfi2rce-via-temp-file-uploads.md b/pentesting-web/file-inclusion/lfi2rce-via-temp-file-uploads.md index 80797472a..f6c7f60fb 100644 --- a/pentesting-web/file-inclusion/lfi2rce-via-temp-file-uploads.md +++ b/pentesting-web/file-inclusion/lfi2rce-via-temp-file-uploads.md @@ -66,3 +66,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/file-inclusion/via-php_session_upload_progress.md b/pentesting-web/file-inclusion/via-php_session_upload_progress.md index 0c5a0dc5d..f9ee15019 100644 --- a/pentesting-web/file-inclusion/via-php_session_upload_progress.md +++ b/pentesting-web/file-inclusion/via-php_session_upload_progress.md @@ -63,4 +63,4 @@ Learn & practice GCP Hacking: -{% endhint %} \ No newline at end of file +{% endhint %} diff --git a/pentesting-web/file-upload/README.md b/pentesting-web/file-upload/README.md index a8e6c6097..6a7ba1508 100644 --- a/pentesting-web/file-upload/README.md +++ b/pentesting-web/file-upload/README.md @@ -361,3 +361,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/file-upload/pdf-upload-xxe-and-cors-bypass.md b/pentesting-web/file-upload/pdf-upload-xxe-and-cors-bypass.md index cddbfb1a5..e762791ea 100644 --- a/pentesting-web/file-upload/pdf-upload-xxe-and-cors-bypass.md +++ b/pentesting-web/file-upload/pdf-upload-xxe-and-cors-bypass.md @@ -31,3 +31,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/formula-csv-doc-latex-ghostscript-injection.md b/pentesting-web/formula-csv-doc-latex-ghostscript-injection.md index 68bfeea4b..6320026b4 100644 --- a/pentesting-web/formula-csv-doc-latex-ghostscript-injection.md +++ b/pentesting-web/formula-csv-doc-latex-ghostscript-injection.md @@ -225,3 +225,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/grpc-web-pentest.md b/pentesting-web/grpc-web-pentest.md index 3b6e96453..3c3ad2b59 100644 --- a/pentesting-web/grpc-web-pentest.md +++ b/pentesting-web/grpc-web-pentest.md @@ -160,4 +160,4 @@ Learn & practice GCP Hacking: -{% endhint %} \ No newline at end of file +{% endhint %} diff --git a/pentesting-web/h2c-smuggling.md b/pentesting-web/h2c-smuggling.md index 4e4778bc6..25c7f8740 100644 --- a/pentesting-web/h2c-smuggling.md +++ b/pentesting-web/h2c-smuggling.md @@ -120,3 +120,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/hacking-jwt-json-web-tokens.md b/pentesting-web/hacking-jwt-json-web-tokens.md index 38431974e..87892e89c 100644 --- a/pentesting-web/hacking-jwt-json-web-tokens.md +++ b/pentesting-web/hacking-jwt-json-web-tokens.md @@ -302,3 +302,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/http-connection-contamination.md b/pentesting-web/http-connection-contamination.md index 881466d7a..907fd42b0 100644 --- a/pentesting-web/http-connection-contamination.md +++ b/pentesting-web/http-connection-contamination.md @@ -45,3 +45,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/http-connection-request-smuggling.md b/pentesting-web/http-connection-request-smuggling.md index 45296f7ce..96e3a8654 100644 --- a/pentesting-web/http-connection-request-smuggling.md +++ b/pentesting-web/http-connection-request-smuggling.md @@ -63,3 +63,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/http-response-smuggling-desync.md b/pentesting-web/http-response-smuggling-desync.md index f682e30b3..b01eaa49b 100644 --- a/pentesting-web/http-response-smuggling-desync.md +++ b/pentesting-web/http-response-smuggling-desync.md @@ -157,3 +157,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/idor.md b/pentesting-web/idor.md index a9ad6d34b..bde21e991 100644 --- a/pentesting-web/idor.md +++ b/pentesting-web/idor.md @@ -33,3 +33,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/ldap-injection.md b/pentesting-web/ldap-injection.md index 819ca425e..14ddd1330 100644 --- a/pentesting-web/ldap-injection.md +++ b/pentesting-web/ldap-injection.md @@ -256,3 +256,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/nosql-injection.md b/pentesting-web/nosql-injection.md index bd2c16ac1..5dc8ea2b8 100644 --- a/pentesting-web/nosql-injection.md +++ b/pentesting-web/nosql-injection.md @@ -304,3 +304,4 @@ Use [**Trickest**](https://trickest.com/?utm_source=hacktricks&utm_medium=text&u Get Access Today: {% embed url="https://trickest.com/?utm_source=hacktricks&utm_medium=banner&utm_campaign=ppc&utm_content=nosql-injection" %} + diff --git a/pentesting-web/oauth-to-account-takeover.md b/pentesting-web/oauth-to-account-takeover.md index 040075d51..c33730c30 100644 --- a/pentesting-web/oauth-to-account-takeover.md +++ b/pentesting-web/oauth-to-account-takeover.md @@ -266,3 +266,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/open-redirect.md b/pentesting-web/open-redirect.md index 5faee5c93..94a8ebbbf 100644 --- a/pentesting-web/open-redirect.md +++ b/pentesting-web/open-redirect.md @@ -224,3 +224,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/orm-injection.md b/pentesting-web/orm-injection.md index c1a0b109e..34d6cd919 100644 --- a/pentesting-web/orm-injection.md +++ b/pentesting-web/orm-injection.md @@ -363,3 +363,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/parameter-pollution.md b/pentesting-web/parameter-pollution.md index 7b6f55683..b2a526a81 100644 --- a/pentesting-web/parameter-pollution.md +++ b/pentesting-web/parameter-pollution.md @@ -263,3 +263,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/phone-number-injections.md b/pentesting-web/phone-number-injections.md index 5e7a14533..97331b8df 100644 --- a/pentesting-web/phone-number-injections.md +++ b/pentesting-web/phone-number-injections.md @@ -43,3 +43,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/proxy-waf-protections-bypass.md b/pentesting-web/proxy-waf-protections-bypass.md index c1f44e75b..d791df2bf 100644 --- a/pentesting-web/proxy-waf-protections-bypass.md +++ b/pentesting-web/proxy-waf-protections-bypass.md @@ -235,3 +235,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/race-condition.md b/pentesting-web/race-condition.md index 234aa35c4..37574d947 100644 --- a/pentesting-web/race-condition.md +++ b/pentesting-web/race-condition.md @@ -438,3 +438,4 @@ Use [**Trickest**](https://trickest.com/?utm\_source=hacktricks\&utm\_medium=tex Get Access Today: {% embed url="https://trickest.com/?utm_source=hacktricks&utm_medium=banner&utm_campaign=ppc&utm_content=race-condition" %} + diff --git a/pentesting-web/rate-limit-bypass.md b/pentesting-web/rate-limit-bypass.md index 594f50ec8..d6ea986c1 100644 --- a/pentesting-web/rate-limit-bypass.md +++ b/pentesting-web/rate-limit-bypass.md @@ -97,3 +97,4 @@ Use [**Trickest**](https://trickest.com/?utm_source=hacktricks\&utm_medium=text\ Get Access Today: {% embed url="https://trickest.com/?utm_source=hacktricks&utm_medium=banner&utm_campaign=ppc&utm_content=rate-limit-bypass" %} + diff --git a/pentesting-web/registration-vulnerabilities.md b/pentesting-web/registration-vulnerabilities.md index f2f3286ef..456e4143e 100644 --- a/pentesting-web/registration-vulnerabilities.md +++ b/pentesting-web/registration-vulnerabilities.md @@ -208,3 +208,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/regular-expression-denial-of-service-redos.md b/pentesting-web/regular-expression-denial-of-service-redos.md index f8ac0b77b..a79175fb0 100644 --- a/pentesting-web/regular-expression-denial-of-service-redos.md +++ b/pentesting-web/regular-expression-denial-of-service-redos.md @@ -107,3 +107,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/reset-password.md b/pentesting-web/reset-password.md index 5d67c7f7c..ee4bdf8b0 100644 --- a/pentesting-web/reset-password.md +++ b/pentesting-web/reset-password.md @@ -243,3 +243,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/reverse-tab-nabbing.md b/pentesting-web/reverse-tab-nabbing.md index e1de8a70f..4b2ce4c4b 100644 --- a/pentesting-web/reverse-tab-nabbing.md +++ b/pentesting-web/reverse-tab-nabbing.md @@ -121,3 +121,4 @@ Learn & practice GCP Hacking: -{% endhint %} \ No newline at end of file +{% endhint %} diff --git a/pentesting-web/timing-attacks.md b/pentesting-web/timing-attacks.md index c13964b41..56bbfee98 100644 --- a/pentesting-web/timing-attacks.md +++ b/pentesting-web/timing-attacks.md @@ -64,3 +64,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/uuid-insecurities.md b/pentesting-web/uuid-insecurities.md index 5ef87783d..362287dfa 100644 --- a/pentesting-web/uuid-insecurities.md +++ b/pentesting-web/uuid-insecurities.md @@ -90,3 +90,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/web-tool-wfuzz.md b/pentesting-web/web-tool-wfuzz.md index 7e860b0b9..37d815d20 100644 --- a/pentesting-web/web-tool-wfuzz.md +++ b/pentesting-web/web-tool-wfuzz.md @@ -180,3 +180,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/web-vulnerabilities-methodology.md b/pentesting-web/web-vulnerabilities-methodology.md index 9289a3aaa..68b0dbfd8 100644 --- a/pentesting-web/web-vulnerabilities-methodology.md +++ b/pentesting-web/web-vulnerabilities-methodology.md @@ -174,3 +174,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/websocket-attacks.md b/pentesting-web/websocket-attacks.md index 8285c0c1a..c3487d714 100644 --- a/pentesting-web/websocket-attacks.md +++ b/pentesting-web/websocket-attacks.md @@ -200,3 +200,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/xpath-injection.md b/pentesting-web/xpath-injection.md index 10c7bc752..cf6bcfa72 100644 --- a/pentesting-web/xpath-injection.md +++ b/pentesting-web/xpath-injection.md @@ -347,3 +347,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/xs-search.md b/pentesting-web/xs-search.md index c864b8889..1a15d37fe 100644 --- a/pentesting-web/xs-search.md +++ b/pentesting-web/xs-search.md @@ -979,3 +979,4 @@ Use [**Trickest**](https://trickest.com/?utm\_campaign=hacktrics\&utm\_medium=ba Get Access Today: {% embed url="https://trickest.com/?utm_campaign=hacktrics&utm_medium=banner&utm_source=hacktricks" %} + diff --git a/pentesting-web/xslt-server-side-injection-extensible-stylesheet-language-transformations.md b/pentesting-web/xslt-server-side-injection-extensible-stylesheet-language-transformations.md index 7d9b56468..484684ac2 100644 --- a/pentesting-web/xslt-server-side-injection-extensible-stylesheet-language-transformations.md +++ b/pentesting-web/xslt-server-side-injection-extensible-stylesheet-language-transformations.md @@ -460,3 +460,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/xssi-cross-site-script-inclusion.md b/pentesting-web/xssi-cross-site-script-inclusion.md index b86a224e3..5ec3f38d4 100644 --- a/pentesting-web/xssi-cross-site-script-inclusion.md +++ b/pentesting-web/xssi-cross-site-script-inclusion.md @@ -105,3 +105,4 @@ Learn & practice GCP Hacking: {% endhint %} + diff --git a/pentesting-web/xxe-xee-xml-external-entity.md b/pentesting-web/xxe-xee-xml-external-entity.md index 8cf4c6b1c..15bb68156 100644 --- a/pentesting-web/xxe-xee-xml-external-entity.md +++ b/pentesting-web/xxe-xee-xml-external-entity.md @@ -809,3 +809,4 @@ Learn & practice GCP Hacking: {% endhint %} +