706 commits

Author	SHA1	Message	Date
HackTricks	af3dd73501	Merge pull request #820 from 3v1lC0d3/3v1lC0d3-patch-1 ... Update 135-pentesting-msrpc.md	2024-03-25 15:04:50 +01:00
HackTricks	70759f62de	Merge pull request #819 from dekadentno/patch-1 ... Update 3128-pentesting-squid.md	2024-03-25 15:04:09 +01:00
HackTricks	b3c1ec5527	Merge pull request #817 from kabinet01/patch-1 ... Update 15672-pentesting-rabbitmq-management.md	2024-03-25 02:09:48 +01:00
CPol	2bba39459f	GITBOOK-4276: change request with no subject merged in GitBook	2024-03-24 11:49:57 +00:00
Carlos Polop	72f1bc0eec	a	2024-03-24 12:46:48 +01:00
Syzik	e786d810fa	Update 5000-pentesting-docker-registry.md ... update tool	2024-03-21 19:21:58 +01:00
CPol	5b120932f3	GITBOOK-4274: change request with no subject merged in GitBook	2024-03-17 14:42:04 +00:00
CPol	43ccbd4ee9	GITBOOK-4270: change request with no subject merged in GitBook	2024-03-15 22:07:01 +00:00
CPol	f3dc05632c	GITBOOK-4269: change request with no subject merged in GitBook	2024-03-15 21:27:36 +00:00
Carlos Polop	1fcb0ae066	a	2024-03-15 00:01:13 +01:00
Juan Martinez a.k.a 3vilC0d3	1b762e358f	Update 135-pentesting-msrpc.md ... Topic added "Executing a RCE with valid credentials"	2024-03-13 18:17:24 -05:00
Matej	d71084f47f	Update 3128-pentesting-squid.md ... Add credentials example for proxychains4.conf	2024-03-13 16:01:53 +01:00
HackTricks	dc260326fc	Merge pull request #809 from scmanjarrez/patch-1 ... Update 3632-pentesting-distcc.md	2024-03-11 15:43:14 +01:00
kabinet	cf3d2189b2	Update 15672-pentesting-rabbitmq-management.md	2024-03-10 01:34:57 +08:00
Carlos Polop	944eaa12c9	up	2024-03-09 14:02:01 +01:00
CPol	8ff32d8f1d	GITBOOK-4266: change request with no subject merged in GitBook	2024-03-09 12:57:16 +00:00
Sergio C	c45f02d0a4	Update 3632-pentesting-distcc.md ... Correction of the script name	2024-03-02 00:18:09 +01:00
CPol	384266bfd1	GITBOOK-4259: change request with no subject merged in GitBook	2024-02-25 22:26:40 +00:00
CPol	fc13d7264a	GITBOOK-4255: change request with no subject merged in GitBook	2024-02-23 15:34:31 +00:00
CPol	eff83f8dcf	GITBOOK-4251: change request with no subject merged in GitBook	2024-02-18 14:18:26 +00:00
CPol	54981cedc7	GITBOOK-4250: change request with no subject merged in GitBook	2024-02-14 23:23:50 +00:00
Carlos Polop	c41af08731	Merge pull request #796 from 0x4net/master ... Update Bacnet manual 47808-udp-bacnet.md	2024-02-14 11:04:35 +01:00
Maksym Vatsyk	11c80bb962	Update pentesting-postgresql.md	2024-02-13 22:32:32 +01:00
Carlos Polop	8073f5697c	a	2024-02-09 13:24:06 +01:00
Carlos Polop	e65a322118	a	2024-02-09 08:15:24 +01:00
Carlos Polop	a268747dc2	A	2024-02-09 08:14:36 +01:00
CPol	e29eb7bcb4	GITBOOK-4247: change request with no subject merged in GitBook	2024-02-09 00:32:07 +00:00
Carlos Polop	f24b096563	a	2024-02-08 22:36:50 +01:00
Carlos Polop	245b50b5a0	a	2024-02-08 22:36:35 +01:00
Carlos Polop	da6aaca1c2	a	2024-02-08 22:36:15 +01:00
Carlos Polop	10a3b640d6	a	2024-02-08 04:08:28 +01:00
Carlos Polop	79b80044a8	a	2024-02-08 04:06:37 +01:00
0x4net	2a5db77396	Update 47808-udp-bacnet.md	2024-02-07 10:01:20 -06:00
Carlos Polop	43da32d5b8	a	2024-02-07 05:06:18 +01:00
Carlos Polop	06a639f4af	a	2024-02-07 05:05:50 +01:00
Carlos Polop	5c23ce2893	a	2024-02-06 04:10:38 +01:00
Carlos Polop	77e7b548a3	a	2024-02-05 21:00:40 +01:00
Carlos Polop	797ab87ac5	a	2024-02-05 03:29:11 +01:00
Carlos Polop	a01ea62620	a	2024-02-05 03:28:59 +01:00
Carlos Polop	7cc077db55	a	2024-02-04 17:10:29 +01:00
Carlos Polop	c8d0bff233	t	2024-02-04 11:58:49 +01:00
Carlos Polop	213f0fc6f6	a	2024-02-03 17:02:14 +01:00
Carlos Polop	04ccc172f4	fix	2024-02-03 13:22:53 +01:00
Carlos Polop	78e3793a1e	arte	2024-02-03 02:15:34 +01:00
Justin Applegate	09b618c00e	Flask extension isn't vulnerable anymore actually	2024-01-30 22:15:31 -05:00
Justin Applegate	8ebee8912b	Mixing up Django and Flask	2024-01-30 22:05:13 -05:00
Justin Applegate	d8a6d00b9d	Adding CVE number for Django cache manipulation	2024-01-30 22:00:55 -05:00
Justin Applegate	094bfcace9	Create django.md ... Added cache manipulation	2024-01-30 21:52:51 -05:00
gitlab.com/beune	e0fd0a99d7	Update README.md ... Fix typo	2024-01-26 10:39:53 +01:00
Valtteri Lehtinen	6a0ea1a28e	Add 4840-pentesting-opc-ua	2024-01-14 21:54:55 +02:00
Carlos Polop	cc62aeca66	arte	2024-01-12 08:54:15 +01:00
Carlos Polop	c61eef67c4	arte	2024-01-12 08:53:44 +01:00
Carlos Polop	37bb97ea8e	pentest-tools	2024-01-11 14:23:18 +01:00
Carlos Polop	ad1f5a6cf5	dns	2024-01-11 14:18:30 +01:00
Carlos Polop	4e607e95d5	Merge pull request #779 from MegaManSec/patch-1 ... Update pentesting-ssh.md	2024-01-11 01:08:42 +01:00
Carlos Polop	b045c000b2	Merge branch 'master' of github.com:carlospolop/hacktricks	2024-01-10 11:21:56 +01:00
Carlos Polop	f0b5bcb9d2	arte	2024-01-10 11:21:44 +01:00
Joshua Rogers	8018901584	Update pentesting-ssh.md ... Add SSH-Snake info.	2024-01-10 04:55:52 +01:00
CPol	bdb5a4b010	GITBOOK-4230: change request with no subject merged in GitBook	2024-01-10 00:59:55 +00:00
Carlos Polop	4d6eff6732	arte	2024-01-08 12:25:42 +01:00
Carlos Polop	d15c2e37d1	arte	2024-01-08 12:25:09 +01:00
Carlos Polop	977350907c	arte	2024-01-05 23:37:11 +01:00
Carlos Polop	48d9033854	arte	2024-01-05 23:36:48 +01:00
Carlos Polop	8f1aed6958	Merge pull request #775 from NaxnN/patch-9 ... add missing space in 6379-pentesting-redis.md	2024-01-04 10:02:30 +01:00
Carlos Polop	5d26a0c40a	arte	2024-01-03 11:43:38 +01:00
Carlos Polop	5da23fa278	arte	2024-01-03 11:42:55 +01:00
Carlos Polop	c2d34d11b4	arte	2024-01-02 19:28:27 +01:00
KeoOp	2da93f568b	update 6379-pentesting-redis.md	2024-01-01 17:46:15 +09:00
Carlos Polop	f61bdeceae	arte	2023-12-31 02:24:39 +01:00
Carlos Polop	3bc68642e2	Merge pull request #771 from manesec/master ... Update 6000-pentesting-x11.md	2023-12-29 17:46:19 +01:00
Mane	1562d6185c	Update 6000-pentesting-x11.md ... Add example for `xxd` and `w`. # Reference https://0xdf.gitlab.io/2022/11/21/htb-squashed.html	2023-12-29 00:56:54 -08:00
n3rada	df39ded79a	update: jdwp repository and explaination	2023-12-28 18:48:26 +00:00
CPol	08536c564d	GITBOOK-4222: change request with no subject merged in GitBook	2023-12-27 23:58:16 +00:00
CPol	76315e4cc2	GITBOOK-4219: change request with no subject merged in GitBook	2023-12-26 20:51:20 +00:00
CPol	da42a67a80	GITBOOK-4216: change request with no subject merged in GitBook	2023-12-26 00:45:07 +00:00
Carlos Polop	8ed6ac013b	Merge pull request #768 from emizzz/master ... fix URL error in Joomla RCE	2023-12-25 01:33:12 +01:00
Carlos Polop	03fb0ebb99	Merge pull request #758 from manesec/master ... Update SNMP and Basic PowerShell for Pentesters	2023-12-24 19:53:33 +01:00
CPol	a6d32b1828	GITBOOK-4208: change request with no subject merged in GitBook	2023-12-24 18:15:27 +00:00
Carlos Polop	1699aa01ac	Merge pull request #757 from N7WEra/patch-1 ... Update JIRA page	2023-12-24 19:03:57 +01:00
emizzz	e1802676f6	fix URL error ... I think once the code is injected, the correct URL is: "/templates/protostar/error.php" and not: "/templates/protostar/error.php/error.php"	2023-12-22 14:19:47 +01:00
Carlos Polop	f97bf8980c	Merge pull request #752 from cyberMilosz/master ... Replace references to F-Secure LABS with WithSecure Labs	2023-12-19 22:44:29 +01:00
CPol	20b5224810	GITBOOK-4192: change request with no subject merged in GitBook	2023-12-16 13:28:14 +00:00
Mane	2c3f4bdd68	Update README.md ... Add `Microsoft Windows SNMP parameters`, which very useful. # Reference: https://www.websecgeeks.com/2017/04/hacking-snmp-service-part-2-post.html https://refabr1k.gitbook.io/oscp/info-gathering/snmp#juicy-mib-values	2023-12-12 01:40:07 -08:00
N7WEra	98c15ec776	Update the permisson list	2023-12-11 15:46:57 +00:00
N7WEra	5aa2e16fd9	Update jira.md ... changed the date	2023-12-11 14:38:01 +00:00
N7WEra	08a6342a99	Update page ... to reflect changes in the API	2023-12-11 14:25:00 +00:00
Miłosz Gaczkowski	2a30e960b5	Replace references to F-Secure LABS with WithSecure Labs ... F-Secure split into 2 companies in early 2022. For a while, all links to labs.f-secure.com redirected to labs.withsecure.com, but this is no longer the case - leaving some links on HackTricks broken. This commit replaces all outdated links with their current locations.	2023-12-04 13:43:41 -05:00
carlospolop	81005f76c9	hp	2023-12-04 16:57:41 +01:00
carlospolop	21ed9007c4	hackenproof	2023-12-04 16:45:05 +01:00
CPol	f6cedd55e4	GITBOOK-4174: change request with no subject merged in GitBook	2023-12-04 09:33:43 +00:00
Alexandre ZANNI	b7996be56b	pentesting-smb: change title	2023-11-27 18:01:07 +01:00
Alexandre ZANNI	50f37523f5	pentesting-smb: add From Windows / no third-party tools	2023-11-27 17:58:23 +01:00
Carlos Polop	da044c173c	Merge pull request #746 from manesec/master ... Update php-useful-functions-disable_functions-open_basedir-bypass	2023-11-27 07:57:04 +01:00
Mane	d1d885dcc6	Update README.md ... Make more readable and add a tools p0wny-shell to automatic check and bypass . ## Reference: https://github.com/flozz/p0wny-shell (source code in shell.php, In function `executeCommand` )	2023-11-21 12:02:42 -08:00
Bigyls	69a5c16e62	Remove "X-ProxyUser-Ip: 127.0.0.1" duplicate	2023-11-16 15:27:36 +01:00
CPol	f35e1aac93	GITBOOK-4152: change request with no subject merged in GitBook	2023-11-05 22:42:10 +00:00
Carlos Polop	35033a280b	Merge pull request #732 from jjfeldcher/jjfeldcher-wordpress-changes ... Update wordpress.md	2023-11-05 17:47:13 +01:00
Carlos Polop	1645075b1e	Merge pull request #730 from Sn1r/master ... Update 403-and-401-bypasses.md	2023-11-05 17:10:17 +01:00
Carlos Polop	101c754301	Merge pull request #726 from A1vinSmith/master ... Update tomcat.md	2023-11-05 16:42:26 +01:00
Carlos Polop	5a4ab88d61	Merge pull request #724 from chovanecadam/patch-2 ... fix: autocommand syntax	2023-11-05 16:07:22 +01:00
Carlos Polop	1aeb3dd0cf	Merge pull request #722 from entr0pie/master ... Added special characters command to FTP file dump	2023-11-05 15:59:30 +01:00
Carlos Polop	700b4c3885	Merge pull request #721 from cosad3s/master ... Add Network Service Pentesting page for IBM MQ (TCP/1414)	2023-11-05 15:59:05 +01:00
CPol	a3ad24c9ea	GITBOOK-4148: change request with no subject merged in GitBook	2023-11-03 11:03:53 +00:00
Alvin Smith	e0e04cfef5	Update pentesting-dns.md	2023-11-03 14:17:04 +13:00
Alvin Smith	64f1c9d8b0	Merge branch 'carlospolop:master' into master	2023-11-03 14:14:05 +13:00
CPol	233703a1b1	GITBOOK-4146: change request with no subject merged in GitBook	2023-11-02 16:52:21 +00:00
CPol	46d107852a	GITBOOK-4142: change request with no subject merged in GitBook	2023-10-27 16:04:24 +00:00
CPol	1015696215	GITBOOK-4141: change request with no subject merged in GitBook	2023-10-27 15:46:20 +00:00
CPol	0272b33ab5	GITBOOK-4140: change request with no subject merged in GitBook	2023-10-26 14:15:46 +00:00
jjfeldcher	fac24cd8b4	Update wordpress.md ... Added some new knowledge to the Wordpress tricks page.	2023-10-25 16:42:52 -07:00
Snir Aviv	e720a71d6a	Update 403-and-401-bypasses.md	2023-10-21 15:30:38 +03:00
Alvin Smith	55cd0adf16	Update tomcat.md ... Fixed the MSFVenom WAR Stageless reverse TCP payload command for Tomcat page.	2023-10-20 14:15:50 +13:00
CPol	943d735974	GITBOOK-4131: change request with no subject merged in GitBook	2023-10-16 18:10:45 +00:00
Adam Chovanec	ae610a5acd	fix: autocommand syntax	2023-10-16 19:42:43 +02:00
CPol	63857c0541	GITBOOK-4126: change request with no subject merged in GitBook	2023-10-15 16:45:54 +00:00
CPol	c383ffed62	GITBOOK-4125: change request with no subject merged in GitBook	2023-10-15 15:23:24 +00:00
CPol	6a5f71e401	GITBOOK-4121: change request with no subject merged in GitBook	2023-10-14 20:45:59 +00:00
tandera	c0a157ed69	Added special characters command to FTP file dump	2023-10-13 19:19:28 -03:00
Sébastien Copin	fe88ec40e7	Update 1414-pentesting-ibmmq.md (typos)	2023-10-12 13:52:24 +02:00
Sébastien Copin	30cbf6ebc7	Add Pentesting IBM MQ (1414)	2023-10-12 01:08:45 +02:00
Leandro	a3d33f13c3	Adding SQL Server Linked Servers Passwords Attack ... Adding a section to the pentesting-mssql-microsoft-sql-server playbook where SQL Server Linked Servers Passwords Attack is detailed with information and scripts to handle the needed configurations. Also a script for the extraction and decryption of the passwords is added. Furthermore, additional information is provided to better understand the attack.	2023-10-09 20:52:49 +01:00
CPol	aafdb7f10e	GITBOOK-4111: change request with no subject merged in GitBook	2023-10-05 14:47:43 +00:00
CPol	7f25eb4d37	GITBOOK-4108: change request with no subject merged in GitBook	2023-10-04 15:51:37 +00:00
CPol	261348bb2c	GITBOOK-4100: change request with no subject merged in GitBook	2023-09-28 15:09:34 +00:00
CPol	afd72865a1	GITBOOK-4092: change request with no subject merged in GitBook	2023-09-24 09:51:34 +00:00
Peter Potrowl	22c8a0639e	Fix sentence in werkzeug.md ... Sentence made no sense	2023-09-17 21:52:17 +02:00
Adam Chovanec	3d67f023f8	minor fix of automatic commands ... The -u flag was used twice.	2023-09-11 13:41:59 +02:00
Carlos Polop	85f15789e5	Merge pull request #703 from ScribblerCoder/docker-nginx-proxy ... add dockerized version of nginx proxy with ajp	2023-09-11 02:00:52 +02:00
Carlos Polop	51bcb61305	Merge pull request #701 from afaq1337/patch-2 ... Update code-review-tools.md	2023-09-11 00:53:37 +02:00
Carlos Polop	8a91ee0d81	Merge pull request #700 from afaq1337/patch-1 ... Update code-review-tools.md	2023-09-11 00:27:19 +02:00
Carlos Polop	00a4a530df	Merge pull request #691 from viktoriia-lsg/master ... Angular methodology	2023-09-11 00:07:37 +02:00
CPol	9a823c5316	GITBOOK-4073: change request with no subject merged in GitBook	2023-09-07 06:07:56 +00:00
ScribblerCoder	640dac454d	add dockerized version of nginx proxy with ajp	2023-09-07 03:35:02 +03:00
Afaq	3a92d887a8	Update code-review-tools.md ... Added a tool for pnpm package manager.	2023-09-06 18:09:21 +05:00
Afaq	d0d6f13464	Update code-review-tools.md ... Added a tool for RUST.	2023-09-06 18:05:05 +05:00
CPol	23c4c394e0	GITBOOK-4072: change request with no subject merged in GitBook	2023-09-05 17:43:46 +00:00
CPol	cdac602134	GITBOOK-4070: change request with no subject merged in GitBook	2023-09-05 14:44:49 +00:00
CPol	129d9d0d73	GITBOOK-4069: change request with no subject merged in GitBook	2023-09-05 14:37:12 +00:00
carlospolop	93b6df668e	trickest	2023-09-05 00:10:11 +02:00
CPol	5d5ee35764	GITBOOK-4067: change request with no subject merged in GitBook	2023-09-04 16:23:40 +00:00
CPol	8cd2f11ec3	GITBOOK-4065: change request with no subject merged in GitBook	2023-09-04 14:02:39 +00:00
carlospolop	987e1109d8	trickest	2023-09-03 17:41:02 +02:00
CPol	90e5cbe540	GITBOOK-4064: change request with no subject merged in GitBook	2023-09-03 13:08:13 +00:00
carlospolop	d308298b26	intruder	2023-09-03 01:51:32 +02:00
carlospolop	2463753c56	intruder	2023-09-03 01:48:41 +02:00
CPol	0de31f2383	GITBOOK-4061: change request with no subject merged in GitBook	2023-08-31 15:11:42 +00:00
CPol	749e1c091d	GITBOOK-4059: change request with no subject merged in GitBook	2023-08-30 09:07:26 +00:00
Carlos Polop	fae6f50ce8	Merge pull request #696 from DeveloperOl/master ... Update pentesting-postgresql.md	2023-08-29 20:47:50 +02:00
Carlos Polop	f2d54cb3c6	Merge pull request #690 from jblommaert/master-1 ... Fix: Typo	2023-08-29 20:18:44 +02:00
Oliver Boehlk	95f20afc82	Update pentesting-postgresql.md ... unify Select in caps lock	2023-08-28 09:37:49 +02:00