Commit graph

670 commits

Author SHA1 Message Date
Carlos Polop
79b80044a8 a 2024-02-08 04:06:37 +01:00
Carlos Polop
43da32d5b8 a 2024-02-07 05:06:18 +01:00
Carlos Polop
06a639f4af a 2024-02-07 05:05:50 +01:00
Carlos Polop
5c23ce2893 a 2024-02-06 04:10:38 +01:00
Carlos Polop
77e7b548a3 a 2024-02-05 21:00:40 +01:00
Carlos Polop
797ab87ac5 a 2024-02-05 03:29:11 +01:00
Carlos Polop
a01ea62620 a 2024-02-05 03:28:59 +01:00
Carlos Polop
7cc077db55 a 2024-02-04 17:10:29 +01:00
Carlos Polop
c8d0bff233 t 2024-02-04 11:58:49 +01:00
Carlos Polop
213f0fc6f6 a 2024-02-03 17:02:14 +01:00
Carlos Polop
04ccc172f4 fix 2024-02-03 13:22:53 +01:00
Carlos Polop
78e3793a1e arte 2024-02-03 02:15:34 +01:00
gitlab.com/beune
e0fd0a99d7
Update README.md
Fix typo
2024-01-26 10:39:53 +01:00
Valtteri Lehtinen
6a0ea1a28e Add 4840-pentesting-opc-ua 2024-01-14 21:54:55 +02:00
Carlos Polop
cc62aeca66 arte 2024-01-12 08:54:15 +01:00
Carlos Polop
c61eef67c4 arte 2024-01-12 08:53:44 +01:00
Carlos Polop
37bb97ea8e pentest-tools 2024-01-11 14:23:18 +01:00
Carlos Polop
ad1f5a6cf5 dns 2024-01-11 14:18:30 +01:00
Carlos Polop
4e607e95d5
Merge pull request #779 from MegaManSec/patch-1
Update pentesting-ssh.md
2024-01-11 01:08:42 +01:00
Carlos Polop
b045c000b2 Merge branch 'master' of github.com:carlospolop/hacktricks 2024-01-10 11:21:56 +01:00
Carlos Polop
f0b5bcb9d2 arte 2024-01-10 11:21:44 +01:00
Joshua Rogers
8018901584
Update pentesting-ssh.md
Add SSH-Snake info.
2024-01-10 04:55:52 +01:00
CPol
bdb5a4b010
GITBOOK-4230: change request with no subject merged in GitBook 2024-01-10 00:59:55 +00:00
Carlos Polop
4d6eff6732 arte 2024-01-08 12:25:42 +01:00
Carlos Polop
d15c2e37d1 arte 2024-01-08 12:25:09 +01:00
Carlos Polop
977350907c arte 2024-01-05 23:37:11 +01:00
Carlos Polop
48d9033854 arte 2024-01-05 23:36:48 +01:00
Carlos Polop
8f1aed6958
Merge pull request #775 from NaxnN/patch-9
add missing space in 6379-pentesting-redis.md
2024-01-04 10:02:30 +01:00
Carlos Polop
5d26a0c40a arte 2024-01-03 11:43:38 +01:00
Carlos Polop
5da23fa278 arte 2024-01-03 11:42:55 +01:00
Carlos Polop
c2d34d11b4 arte 2024-01-02 19:28:27 +01:00
KeoOp
2da93f568b
update 6379-pentesting-redis.md 2024-01-01 17:46:15 +09:00
Carlos Polop
f61bdeceae arte 2023-12-31 02:24:39 +01:00
Carlos Polop
3bc68642e2
Merge pull request #771 from manesec/master
Update 6000-pentesting-x11.md
2023-12-29 17:46:19 +01:00
Mane
1562d6185c
Update 6000-pentesting-x11.md
Add example for `xxd` and `w`. 

# Reference
https://0xdf.gitlab.io/2022/11/21/htb-squashed.html
2023-12-29 00:56:54 -08:00
n3rada
df39ded79a
update: jdwp repository and explaination 2023-12-28 18:48:26 +00:00
CPol
08536c564d
GITBOOK-4222: change request with no subject merged in GitBook 2023-12-27 23:58:16 +00:00
CPol
76315e4cc2
GITBOOK-4219: change request with no subject merged in GitBook 2023-12-26 20:51:20 +00:00
CPol
da42a67a80
GITBOOK-4216: change request with no subject merged in GitBook 2023-12-26 00:45:07 +00:00
Carlos Polop
8ed6ac013b
Merge pull request #768 from emizzz/master
fix URL error in Joomla RCE
2023-12-25 01:33:12 +01:00
Carlos Polop
03fb0ebb99
Merge pull request #758 from manesec/master
Update SNMP and Basic PowerShell for Pentesters
2023-12-24 19:53:33 +01:00
CPol
a6d32b1828
GITBOOK-4208: change request with no subject merged in GitBook 2023-12-24 18:15:27 +00:00
Carlos Polop
1699aa01ac
Merge pull request #757 from N7WEra/patch-1
Update JIRA page
2023-12-24 19:03:57 +01:00
emizzz
e1802676f6
fix URL error
I think once the code is injected, the correct URL is: 
"/templates/protostar/error.php"
and not:
"/templates/protostar/error.php/error.php"
2023-12-22 14:19:47 +01:00
Carlos Polop
f97bf8980c
Merge pull request #752 from cyberMilosz/master
Replace references to F-Secure LABS with WithSecure Labs
2023-12-19 22:44:29 +01:00
CPol
20b5224810
GITBOOK-4192: change request with no subject merged in GitBook 2023-12-16 13:28:14 +00:00
Mane
2c3f4bdd68
Update README.md
Add `Microsoft Windows SNMP parameters`, which very useful.

# Reference:

https://www.websecgeeks.com/2017/04/hacking-snmp-service-part-2-post.html

https://refabr1k.gitbook.io/oscp/info-gathering/snmp#juicy-mib-values
2023-12-12 01:40:07 -08:00
N7WEra
98c15ec776
Update the permisson list 2023-12-11 15:46:57 +00:00
N7WEra
5aa2e16fd9
Update jira.md
changed the date
2023-12-11 14:38:01 +00:00
N7WEra
08a6342a99
Update page
to reflect changes in the API
2023-12-11 14:25:00 +00:00
Miłosz Gaczkowski
2a30e960b5 Replace references to F-Secure LABS with WithSecure Labs
F-Secure split into 2 companies in early 2022. For a while, all links to labs.f-secure.com redirected to labs.withsecure.com, but this is no longer the case - leaving some links on HackTricks broken. This commit replaces all outdated links with their current locations.
2023-12-04 13:43:41 -05:00
carlospolop
81005f76c9 hp 2023-12-04 16:57:41 +01:00
carlospolop
21ed9007c4 hackenproof 2023-12-04 16:45:05 +01:00
CPol
f6cedd55e4
GITBOOK-4174: change request with no subject merged in GitBook 2023-12-04 09:33:43 +00:00
Alexandre ZANNI
b7996be56b
pentesting-smb: change title 2023-11-27 18:01:07 +01:00
Alexandre ZANNI
50f37523f5
pentesting-smb: add From Windows / no third-party tools 2023-11-27 17:58:23 +01:00
Carlos Polop
da044c173c
Merge pull request #746 from manesec/master
Update php-useful-functions-disable_functions-open_basedir-bypass
2023-11-27 07:57:04 +01:00
Mane
d1d885dcc6
Update README.md
Make more readable and add a tools p0wny-shell to automatic check and bypass .

## Reference: 

https://github.com/flozz/p0wny-shell   (source code in shell.php, In function `executeCommand` )
2023-11-21 12:02:42 -08:00
Bigyls
69a5c16e62
Remove "X-ProxyUser-Ip: 127.0.0.1" duplicate 2023-11-16 15:27:36 +01:00
CPol
f35e1aac93
GITBOOK-4152: change request with no subject merged in GitBook 2023-11-05 22:42:10 +00:00
Carlos Polop
35033a280b
Merge pull request #732 from jjfeldcher/jjfeldcher-wordpress-changes
Update wordpress.md
2023-11-05 17:47:13 +01:00
Carlos Polop
1645075b1e
Merge pull request #730 from Sn1r/master
Update 403-and-401-bypasses.md
2023-11-05 17:10:17 +01:00
Carlos Polop
101c754301
Merge pull request #726 from A1vinSmith/master
Update tomcat.md
2023-11-05 16:42:26 +01:00
Carlos Polop
5a4ab88d61
Merge pull request #724 from chovanecadam/patch-2
fix: autocommand syntax
2023-11-05 16:07:22 +01:00
Carlos Polop
1aeb3dd0cf
Merge pull request #722 from entr0pie/master
Added special characters command to FTP file dump
2023-11-05 15:59:30 +01:00
Carlos Polop
700b4c3885
Merge pull request #721 from cosad3s/master
Add Network Service Pentesting page for IBM MQ (TCP/1414)
2023-11-05 15:59:05 +01:00
CPol
a3ad24c9ea
GITBOOK-4148: change request with no subject merged in GitBook 2023-11-03 11:03:53 +00:00
Alvin Smith
e0e04cfef5
Update pentesting-dns.md 2023-11-03 14:17:04 +13:00
Alvin Smith
64f1c9d8b0
Merge branch 'carlospolop:master' into master 2023-11-03 14:14:05 +13:00
CPol
233703a1b1
GITBOOK-4146: change request with no subject merged in GitBook 2023-11-02 16:52:21 +00:00
CPol
46d107852a
GITBOOK-4142: change request with no subject merged in GitBook 2023-10-27 16:04:24 +00:00
CPol
1015696215
GITBOOK-4141: change request with no subject merged in GitBook 2023-10-27 15:46:20 +00:00
CPol
0272b33ab5
GITBOOK-4140: change request with no subject merged in GitBook 2023-10-26 14:15:46 +00:00
jjfeldcher
fac24cd8b4
Update wordpress.md
Added some new knowledge to the Wordpress tricks page.
2023-10-25 16:42:52 -07:00
Snir Aviv
e720a71d6a
Update 403-and-401-bypasses.md 2023-10-21 15:30:38 +03:00
Alvin Smith
55cd0adf16
Update tomcat.md
Fixed the MSFVenom WAR Stageless reverse TCP payload command for Tomcat page.
2023-10-20 14:15:50 +13:00
CPol
943d735974
GITBOOK-4131: change request with no subject merged in GitBook 2023-10-16 18:10:45 +00:00
Adam Chovanec
ae610a5acd
fix: autocommand syntax 2023-10-16 19:42:43 +02:00
CPol
63857c0541
GITBOOK-4126: change request with no subject merged in GitBook 2023-10-15 16:45:54 +00:00
CPol
c383ffed62
GITBOOK-4125: change request with no subject merged in GitBook 2023-10-15 15:23:24 +00:00
CPol
6a5f71e401
GITBOOK-4121: change request with no subject merged in GitBook 2023-10-14 20:45:59 +00:00
tandera
c0a157ed69
Added special characters command to FTP file dump 2023-10-13 19:19:28 -03:00
Sébastien Copin
fe88ec40e7
Update 1414-pentesting-ibmmq.md (typos) 2023-10-12 13:52:24 +02:00
Sébastien Copin
30cbf6ebc7 Add Pentesting IBM MQ (1414) 2023-10-12 01:08:45 +02:00
Leandro
a3d33f13c3
Adding SQL Server Linked Servers Passwords Attack
Adding a section to the pentesting-mssql-microsoft-sql-server playbook where SQL Server Linked Servers Passwords Attack is detailed with information and scripts to handle the needed configurations. Also a script for the extraction and decryption of the passwords is added.
Furthermore, additional information is provided to better understand the attack.
2023-10-09 20:52:49 +01:00
CPol
aafdb7f10e
GITBOOK-4111: change request with no subject merged in GitBook 2023-10-05 14:47:43 +00:00
CPol
7f25eb4d37
GITBOOK-4108: change request with no subject merged in GitBook 2023-10-04 15:51:37 +00:00
CPol
261348bb2c
GITBOOK-4100: change request with no subject merged in GitBook 2023-09-28 15:09:34 +00:00
CPol
afd72865a1
GITBOOK-4092: change request with no subject merged in GitBook 2023-09-24 09:51:34 +00:00
Peter Potrowl
22c8a0639e
Fix sentence in werkzeug.md
Sentence made no sense
2023-09-17 21:52:17 +02:00
Adam Chovanec
3d67f023f8
minor fix of automatic commands
The -u flag was used twice.
2023-09-11 13:41:59 +02:00
Carlos Polop
85f15789e5
Merge pull request #703 from ScribblerCoder/docker-nginx-proxy
add dockerized version of nginx proxy with ajp
2023-09-11 02:00:52 +02:00
Carlos Polop
51bcb61305
Merge pull request #701 from afaq1337/patch-2
Update code-review-tools.md
2023-09-11 00:53:37 +02:00
Carlos Polop
8a91ee0d81
Merge pull request #700 from afaq1337/patch-1
Update code-review-tools.md
2023-09-11 00:27:19 +02:00
Carlos Polop
00a4a530df
Merge pull request #691 from viktoriia-lsg/master
Angular methodology
2023-09-11 00:07:37 +02:00
CPol
9a823c5316
GITBOOK-4073: change request with no subject merged in GitBook 2023-09-07 06:07:56 +00:00
ScribblerCoder
640dac454d
add dockerized version of nginx proxy with ajp 2023-09-07 03:35:02 +03:00
Afaq
3a92d887a8
Update code-review-tools.md
Added a tool for pnpm package manager.
2023-09-06 18:09:21 +05:00
Afaq
d0d6f13464
Update code-review-tools.md
Added a tool for RUST.
2023-09-06 18:05:05 +05:00
CPol
23c4c394e0
GITBOOK-4072: change request with no subject merged in GitBook 2023-09-05 17:43:46 +00:00
CPol
cdac602134
GITBOOK-4070: change request with no subject merged in GitBook 2023-09-05 14:44:49 +00:00
CPol
129d9d0d73
GITBOOK-4069: change request with no subject merged in GitBook 2023-09-05 14:37:12 +00:00
carlospolop
93b6df668e trickest 2023-09-05 00:10:11 +02:00
CPol
5d5ee35764
GITBOOK-4067: change request with no subject merged in GitBook 2023-09-04 16:23:40 +00:00
CPol
8cd2f11ec3
GITBOOK-4065: change request with no subject merged in GitBook 2023-09-04 14:02:39 +00:00
carlospolop
987e1109d8 trickest 2023-09-03 17:41:02 +02:00
CPol
90e5cbe540
GITBOOK-4064: change request with no subject merged in GitBook 2023-09-03 13:08:13 +00:00
carlospolop
d308298b26 intruder 2023-09-03 01:51:32 +02:00
carlospolop
2463753c56 intruder 2023-09-03 01:48:41 +02:00
CPol
0de31f2383
GITBOOK-4061: change request with no subject merged in GitBook 2023-08-31 15:11:42 +00:00
CPol
749e1c091d
GITBOOK-4059: change request with no subject merged in GitBook 2023-08-30 09:07:26 +00:00
Carlos Polop
fae6f50ce8
Merge pull request #696 from DeveloperOl/master
Update pentesting-postgresql.md
2023-08-29 20:47:50 +02:00
Carlos Polop
f2d54cb3c6
Merge pull request #690 from jblommaert/master-1
Fix: Typo
2023-08-29 20:18:44 +02:00
Oliver Boehlk
95f20afc82
Update pentesting-postgresql.md
unify Select in caps lock
2023-08-28 09:37:49 +02:00
Oliver Boehlk
2cff636067
Update pentesting-postgresql.md
Add current_catalog as Postgres enumeration command
2023-08-28 09:34:29 +02:00
Carlos Polop
db529bc0a3
Merge pull request #686 from Syncriix/master
SMB Local User Enummeration
2023-08-27 22:04:29 +02:00
CPol
3d9ea66965
GITBOOK-4051: change request with no subject merged in GitBook 2023-08-25 07:48:03 +00:00
CPol
7b95b4b0e9
GITBOOK-4044: change request with no subject merged in GitBook 2023-08-22 09:57:13 +00:00
CPol
554b95eac8
GITBOOK-4035: change request with no subject merged in GitBook 2023-08-16 04:32:29 +00:00
CPol
4c29b49ee0
GITBOOK-4034: change request with no subject merged in GitBook 2023-08-15 18:05:01 +00:00
CPol
d724c6604b
GITBOOK-4032: change request with no subject merged in GitBook 2023-08-15 16:09:09 +00:00
Sebastian
712e41590b
Merge branch 'carlospolop:master' into master 2023-08-15 10:12:22 +02:00
Sebastian
aaf5917e25
Added Automation 2023-08-15 10:09:34 +02:00
CPol
fd47bcfc8d
GITBOOK-4031: change request with no subject merged in GitBook 2023-08-15 01:35:49 +00:00
viktoriia-lsg
94b66dff7a
Update angular.md 2023-08-14 15:50:33 +03:00
viktoriia-lsg
7393f7a7ef
Angular methodology is edited 2023-08-14 15:49:18 +03:00
Julien Blommaert
49bb2cc70c
Fix: Typo
Fix typo in the Pentesting VoIP Readme
2023-08-14 14:01:55 +02:00
viktoriia-lsg
a8b75fece8
Angular methodology is added 2023-08-14 14:58:56 +03:00
Sebastian
bd550716ae
SMB Local User Enummeration 2023-08-08 11:05:26 +02:00
CPol
d66ecb4cdd
GITBOOK-4021: change request with no subject merged in GitBook 2023-07-31 15:59:11 +00:00
CPol
84d05a4c74
GITBOOK-4018: change request with no subject merged in GitBook 2023-07-30 21:28:42 +00:00
CPol
184e54867b
GITBOOK-4012: change request with no subject merged in GitBook 2023-07-19 11:35:52 +00:00
Carlos Polop
2cc2d9b182
Merge pull request #671 from austinleblanc/patch-1
Update 3128-pentesting-squid.md
2023-07-19 13:16:59 +02:00
Carlos Polop
4f4d314fca
Merge pull request #665 from sidhawkss/patch-1
Change: machine_id explanation
2023-07-17 17:25:20 +02:00
CPol
1ea7eeae91
GITBOOK-4011: change request with no subject merged in GitBook 2023-07-17 13:05:52 +00:00
carlospolop
d84af2b1f5 hp 2023-07-14 17:03:41 +02:00
carlospolop
6277fe6f8b hackenproof 2023-07-14 16:20:34 +02:00
CPol
cbc84fb677
GITBOOK-4009: change request with no subject merged in GitBook 2023-07-14 11:41:41 +00:00
CPol
f11b4d1856
GITBOOK-4008: change request with no subject merged in GitBook 2023-07-13 09:57:55 +00:00
austinleblanc
d948dd6bc1
Update 3128-pentesting-squid.md
Typo fix
2023-07-10 14:14:36 -04:00
Carlos Polop
74c65ab7b2
Merge pull request #660 from NaxnN/patch-6
Update werkzeug.md
2023-07-10 12:38:14 +02:00
SidHawks
a18bebaf7e
Change: machine_id explanation 2023-07-02 00:04:36 -03:00
Fabio Zuber
c57346ff77
docs(IIS): correct typo in basic auth bypass 2023-06-27 16:25:54 +02:00
Carlos Polop
41263c3fd8
Merge pull request #654 from shiomiyan/patch-3
Fix typo in GraphQL document
2023-06-24 18:44:47 +02:00
KeoOp
dc3bd534ee
Update werkzeug.md 2023-06-19 10:18:43 +08:00
CPol
96d3c84e90
GITBOOK-3985: change request with no subject merged in GitBook 2023-06-14 14:40:53 +00:00
CPol
9a68c91e4e
GITBOOK-3984: change request with no subject merged in GitBook 2023-06-14 10:51:55 +00:00
CPol
fa3b6dffc2
GITBOOK-3983: change request with no subject merged in GitBook 2023-06-14 00:31:26 +00:00
CPol
0164fe76c8
GITBOOK-3982: change request with no subject merged in GitBook 2023-06-13 16:23:33 +00:00
CPol
5850e04a1f
GITBOOK-3981: change request with no subject merged in GitBook 2023-06-13 10:26:10 +00:00