Mirrors/hacktricks
2
0
Fork 0
mirror of https://github.com/carlospolop/hacktricks synced 2024-12-21 10:33:36 +00:00
Code Issues Projects Releases Packages Wiki Activity

re

Browse source
This commit is contained in:
Carlos Polop 2024-12-14 12:47:54 +01:00
parent cfff5cc9a8
commit 9f71c0cb84
199 changed files with 199 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
network-services-pentesting/11211-memcache/README.md
View file

@ -223,3 +223,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/11211-memcache/memcache-commands.md
View file

@ -165,3 +165,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/1521-1522-1529-pentesting-oracle-listener/README.md
View file

@ -89,3 +89,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-finger.md
View file

@ -109,3 +109,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-ftp/README.md
View file

@ -306,3 +306,4 @@ Learn & practice GCP Hacking: <img src="../../.gitbook/assets/grte.png" alt="" d
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-ftp/ftp-bounce-attack.md
View file

@ -61,3 +61,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-ftp/ftp-bounce-download-2oftp-file.md
View file

@ -72,3 +72,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-imap.md
View file

@ -219,3 +219,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-irc.md
View file

@ -110,3 +110,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-jdwp-java-debug-wire-protocol.md
View file

@ -104,3 +104,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-kerberos-88/README.md
View file

@ -92,3 +92,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-kerberos-88/harvesting-tickets-from-linux.md
View file

@ -48,3 +48,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-kerberos-88/harvesting-tickets-from-windows.md
View file

@ -66,3 +66,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-ldap.md
View file

@ -439,3 +439,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-modbus.md
View file

@ -68,3 +68,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-mssql-microsoft-sql-server/README.md
View file

@ -721,3 +721,4 @@ Learn & practice GCP Hacking: <img src="../../.gitbook/assets/grte.png" alt="" d
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-mssql-microsoft-sql-server/types-of-mssql-users.md
View file

@ -49,3 +49,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-mysql.md
View file

@ -688,3 +688,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-ntp.md
View file

@ -138,3 +138,4 @@ Learn & practice GCP Hacking: <img src="../.gitbook/assets/grte.png" alt="" data
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-postgresql.md
View file

@ -852,3 +852,4 @@ Use [**Trickest**](https://trickest.com/?utm_source=hacktricks&utm_medium=text&u
Get Access Today: Get Access Today:
{% embed url="https://trickest.com/?utm_source=hacktricks&utm_medium=banner&utm_campaign=ppc&utm_content=pentesting-postgresql" %} {% embed url="https://trickest.com/?utm_source=hacktricks&utm_medium=banner&utm_campaign=ppc&utm_content=pentesting-postgresql" %}

1
network-services-pentesting/pentesting-rdp.md
View file

@ -195,3 +195,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-remote-gdbserver.md
View file

@ -224,3 +224,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-rlogin.md
View file

@ -71,3 +71,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-rpcbind.md
View file

@ -145,3 +145,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-rsh.md
View file

@ -57,3 +57,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-sap.md
View file

@ -423,3 +423,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-smb.md
View file

@ -617,3 +617,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-smb/README.md
View file

@ -617,3 +617,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-smb/rpcclient-enumeration.md
View file

@ -125,3 +125,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-smtp/README.md
View file

@ -652,3 +652,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-smtp/smtp-commands.md
View file

@ -86,3 +86,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-smtp/smtp-smuggling.md
View file

@ -59,3 +59,4 @@ Learn & practice GCP Hacking: <img src="../../.gitbook/assets/grte.png" alt="" d
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-snmp/README.md
View file

@ -319,3 +319,4 @@ Learn & practice GCP Hacking: <img src="../../.gitbook/assets/grte.png" alt="" d
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-snmp/cisco-snmp.md
View file

@ -76,3 +76,4 @@ Learn & practice GCP Hacking: <img src="../../.gitbook/assets/grte.png" alt="" d
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-snmp/snmp-rce.md
View file

@ -83,3 +83,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-ssh.md
View file

@ -375,3 +375,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-telnet.md
View file

@ -119,3 +119,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-vnc.md
View file

@ -88,3 +88,4 @@ Learn & practice GCP Hacking: <img src="../.gitbook/assets/grte.png" alt="" data
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-voip/README.md
View file

@ -750,3 +750,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-voip/basic-voip-protocols/README.md
View file

@ -124,3 +124,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
{% endhint %} {% endhint %}
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-voip/basic-voip-protocols/sip-session-initiation-protocol.md
View file

@ -271,3 +271,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
{% endhint %} {% endhint %}
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/403-and-401-bypasses.md
View file

@ -160,3 +160,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/README.md
View file

@ -463,3 +463,4 @@ Learn & practice GCP Hacking: <img src="../../.gitbook/assets/grte.png" alt="" d
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/aem-adobe-experience-cloud.md
View file

@ -36,3 +36,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/angular.md
View file

@ -611,3 +611,4 @@ According to the W3C documentation, the `window.location` and `document.location
* [Angular Document](https://angular.io/api/common/DOCUMENT) * [Angular Document](https://angular.io/api/common/DOCUMENT)
* [Angular Location](https://angular.io/api/common/Location) * [Angular Location](https://angular.io/api/common/Location)
* [Angular Router](https://angular.io/api/router/Router) * [Angular Router](https://angular.io/api/router/Router)

1
network-services-pentesting/pentesting-web/apache.md
View file

@ -304,3 +304,4 @@ Learn & practice GCP Hacking: <img src="../../.gitbook/assets/grte.png" alt="" d
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/artifactory-hacking-guide.md
View file

@ -33,3 +33,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/bolt-cms.md
View file

@ -49,3 +49,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/buckets/README.md
View file

@ -33,3 +33,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/buckets/firebase-database.md
View file

@ -37,3 +37,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/cgi.md
View file

@ -122,3 +122,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/code-review-tools.md
View file

@ -503,3 +503,4 @@ Learn & practice GCP Hacking: <img src="../../.gitbook/assets/grte.png" alt="" d
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/django.md
View file

@ -6,3 +6,4 @@ Django's default cache storage method is [Python pickles](https://docs.python.or
Django cache is stored in one of four places: [Redis](https://github.com/django/django/blob/48a1929ca050f1333927860ff561f6371706968a/django/core/cache/backends/redis.py#L12), [memory](https://github.com/django/django/blob/48a1929ca050f1333927860ff561f6371706968a/django/core/cache/backends/locmem.py#L16), [files](https://github.com/django/django/blob/48a1929ca050f1333927860ff561f6371706968a/django/core/cache/backends/filebased.py#L16), or a [database](https://github.com/django/django/blob/48a1929ca050f1333927860ff561f6371706968a/django/core/cache/backends/db.py#L95). Cache stored in a Redis server or database are the most likely attack vectors (Redis injection and SQL injection), but an attacker may also be able to use file-based cache to turn an arbitrary write into RCE. Maintainers have marked this as a non-issue. It's important to note that the cache file folder, SQL table name, and Redis server details will vary based on implementation. Django cache is stored in one of four places: [Redis](https://github.com/django/django/blob/48a1929ca050f1333927860ff561f6371706968a/django/core/cache/backends/redis.py#L12), [memory](https://github.com/django/django/blob/48a1929ca050f1333927860ff561f6371706968a/django/core/cache/backends/locmem.py#L16), [files](https://github.com/django/django/blob/48a1929ca050f1333927860ff561f6371706968a/django/core/cache/backends/filebased.py#L16), or a [database](https://github.com/django/django/blob/48a1929ca050f1333927860ff561f6371706968a/django/core/cache/backends/db.py#L95). Cache stored in a Redis server or database are the most likely attack vectors (Redis injection and SQL injection), but an attacker may also be able to use file-based cache to turn an arbitrary write into RCE. Maintainers have marked this as a non-issue. It's important to note that the cache file folder, SQL table name, and Redis server details will vary based on implementation.
This HackerOne report provides a great, reproducible example of exploiting Django cache stored in a SQLite database: https://hackerone.com/reports/1415436 This HackerOne report provides a great, reproducible example of exploiting Django cache stored in a SQLite database: https://hackerone.com/reports/1415436

1
network-services-pentesting/pentesting-web/dotnetnuke-dnn.md
View file

@ -68,3 +68,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/drupal/drupal-rce.md
View file

@ -274,3 +274,4 @@ Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/grte.png" alt="
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/electron-desktop-apps/README.md
View file

@ -351,3 +351,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/electron-desktop-apps/electron-contextisolation-rce-via-electron-internal-code.md
View file

@ -87,3 +87,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/electron-desktop-apps/electron-contextisolation-rce-via-ipc.md
View file

@ -127,3 +127,4 @@ Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/grte.png" alt="
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/electron-desktop-apps/electron-contextisolation-rce-via-preload-code.md
View file

@ -112,3 +112,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/flask.md
View file

@ -140,3 +140,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/git.md
View file

@ -47,3 +47,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/golang.md
View file

@ -52,3 +52,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/grafana.md
View file

@ -39,3 +39,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/graphql.md
View file

@ -690,3 +690,4 @@ Learn & practice GCP Hacking: <img src="../../.gitbook/assets/grte.png" alt="" d
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/gwt-google-web-toolkit.md
View file

@ -1,2 +1,3 @@
# GWT - Google Web Toolkit # GWT - Google Web Toolkit

1
network-services-pentesting/pentesting-web/h2-java-sql-database.md
View file

@ -66,3 +66,4 @@ Learn & practice GCP Hacking: <img src="../../.gitbook/assets/grte.png" alt="" d
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/iis-internet-information-services.md
View file

@ -301,3 +301,4 @@ Learn & practice GCP Hacking: <img src="../../.gitbook/assets/grte.png" alt="" d
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/imagemagick-security.md
View file

@ -69,3 +69,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/jboss.md
View file

@ -58,3 +58,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/jira.md
View file

@ -155,3 +155,4 @@ Learn & practice GCP Hacking: <img src="../../.gitbook/assets/grte.png" alt="" d
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/joomla.md
View file

@ -161,3 +161,4 @@ Learn & practice GCP Hacking: <img src="../../.gitbook/assets/grte.png" alt="" d
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/jsp.md
View file

@ -41,3 +41,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/laravel.md
View file

@ -140,3 +140,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/moodle.md
View file

@ -145,3 +145,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
{% endhint %} {% endhint %}
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/nextjs.md
View file

@ -35,3 +35,4 @@ Learn & practice GCP Hacking: <img src="../../.gitbook/assets/grte.png" alt="" d
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/nginx.md
View file

@ -340,3 +340,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/nodejs-express.md
View file

@ -35,3 +35,4 @@ iI you know the secret you can sign a the cookie.
```bash ```bash
cookie-monster -e -f new_cookie.json -k secret cookie-monster -e -f new_cookie.json -k secret
``` ```

1
network-services-pentesting/pentesting-web/php-tricks-esp/README.md
View file

@ -546,3 +546,4 @@ Learn & practice GCP Hacking: <img src="../../../.gitbook/assets/grte.png" alt="
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/php-tricks-esp/php-rce-abusing-object-creation-new-usd_get-a-usd_get-b.md
View file

@ -128,3 +128,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/php-tricks-esp/php-ssrf.md
View file

@ -95,3 +95,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/README.md
View file

@ -842,3 +842,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-dl-function.md
View file

@ -110,3 +110,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-imagick-less-than-3.3.0-php-greater-than-5.4-exploit.md
View file

@ -88,3 +88,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-mod_cgi.md
View file

@ -78,3 +78,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-php-4-greater-than-4.2.0-php-5-pcntl_exec.md
View file

@ -62,3 +62,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-php-5.2-fopen-exploit.md
View file

@ -42,3 +42,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-php-5.2.3-win32std-ext-protections-bypass.md
View file

@ -62,3 +62,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-php-5.2.4-and-5.2.5-php-curl.md
View file

@ -50,3 +50,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-php-7.0-7.4-nix-only.md
View file

@ -254,3 +254,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-php-fpm-fastcgi.md
View file

@ -461,3 +461,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-php-less-than-5.2.9-on-windows.md
View file

@ -103,3 +103,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-php-perl-extension-safe_mode-bypass-exploit.md
View file

@ -64,3 +64,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-php-safe_mode-bypass-via-proc_open-and-custom-environment-exploit.md
View file

@ -50,3 +50,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-via-mem.md
View file

@ -165,3 +165,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-php-5.2.4-ioncube-extension-exploit.md
View file

@ -74,3 +74,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-php-5.x-shellshock-exploit.md
View file

@ -63,3 +63,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/prestashop.md
View file

@ -34,3 +34,4 @@ Learn & practice GCP Hacking: <img src="../../.gitbook/assets/grte.png" alt="" d
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/put-method-webdav.md
View file

@ -148,3 +148,4 @@ Use [**Trickest**](https://trickest.com/?utm_source=hacktricks\&utm_medium=text\
Get Access Today: Get Access Today:
{% embed url="https://trickest.com/?utm_source=hacktricks&utm_medium=banner&utm_campaign=ppc&utm_content=put-method-webdav" %} {% embed url="https://trickest.com/?utm_source=hacktricks&utm_medium=banner&utm_campaign=ppc&utm_content=put-method-webdav" %}

1
network-services-pentesting/pentesting-web/python.md
View file

@ -51,3 +51,4 @@ Learn & practice GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-s
</details> </details>
{% endhint %} {% endhint %}

1
network-services-pentesting/pentesting-web/rocket-chat.md
View file

@ -69,3 +69,4 @@ Learn & practice GCP Hacking: <img src="../../.gitbook/assets/grte.png" alt="" d
</details> </details>
{% endhint %} {% endhint %}

Some files were not shown because too many files have changed in this diff Show more