OSCP Notes and Custom Dashboard

OSCP Field Notebook Tags: ligolo hashcat Port-indexed pentest methodology notebook: decision trees, copy-paste command patterns, and lessons from authorized practice boxes HTB / PG / personal labs. Merged from the older finalnotes-vault into this single tree. A workflow you can run under time...

mtk-su-reverse-cve-2020-0069

mtk-su solo algunas de mis notas Tabla de cadenas obtén la tabla de cadenas descomprimida usando binwalk -Xe stringtabledump vuelca desde la dirección en el idb 0x1F098 tamaño comprimido: 1260 si quieres el idb, abre un issue con tu correo y te lo enviaré. es un buen punto de partida si quieres...

CVE-2021-24807

CVE-2021-24807 Support Board 3.3.4 XSS Almacenado Autenticado Existe una vulnerabilidad de Cross Site Scripting XSS Almacenado Autenticado en Support Board Versión 3.3.4 a través del parámetro Notes. El impacto de las vulnerabilidades de cross-site scripting puede variar de una aplicación web a...

CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1.0-CSRF-to-CORS

CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1.0-CSRF-to-CORS Autor del Exploit: emirhanerdogu Página principal del proveedor https://www.sourcecodester.com/php/16928/sticky-notes-app-using-php-source-code.html Enlace del software...

CVE-2023-28121

CVE-2023-28121 Notas de investigación y material auxiliar para estudiar CVE-2023-28121 en un laboratorio controlado de WordPress/WooCommerce Payments. Aviso de seguridad Utilice este material únicamente en sistemas de su propiedad o para los que tenga autorización explícita para realizar pruebas...

CVE-2026-97868

A security vulnerability has been detected in sheshbabu zen up to 1.5.0. Affected by this issue is the function dangerouslySetInnerHTML of the file features/notes/NotesEditor.jsx of the component Note Editor. The manipulation leads to cross site scripting. The attack may be initiated remotely. Th...

fuzz.txt

fuzz.txt There's Nothing so Permanent as Temporary Any ideas?...

Blue-Team-Notes

Blue Team Notes A collection of one-liners, small scripts, and some useful tips for blue team work. I've included screenshots where possible so you know what you're getting. Contact me If you see a mistake, or have an easier way to run a command then you're welcome to hit me up on Twitter or comm...

zerologon-cve-2020-1472-notes

This repository does not have a README...

TJ-OPT

TJ-OPT Release Date September 9th 2024 Introduction As a pentester, there are many great resources, cheat sheets, and guidelines that contain a large amount of valuable information. However, it can be frustrating and time-consuming to find these notes or resources that are scattered all over the...

G2.5_Openssl_V_1_0_1g

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

CVE-2026-77293

The collaborative travel planner TREK is vulnerable to an Insecure Direct Object Reference (IDOR) or Broken Access Control issue in versions prior to 3.3.0 . The DELETE /api/trips/:tripId/collab/notes/:noteId/files/:fileId endpoint fails to properly verify if the target note-file belongs to the a...

CVE-2026-77293 TREK: Cross-user note-file deletion (IDOR / Broken Access Control)

TREK is a collaborative travel planner. Prior to 3.3.0, the DELETE /api/trips/:tripId/collab/notes/:noteId/files/:fileId endpoint authorizes an authenticated user against the attacker-controlled tripId but deleteNoteFile in server/src/services/collabService.ts resolves the target only by note and...

CVE-2026-77293 TREK: Cross-user note-file deletion (IDOR / Broken Access Control)

TREK is a collaborative travel planner. Prior to 3.3.0, the DELETE /api/trips/:tripId/collab/notes/:noteId/files/:fileId endpoint authorizes an authenticated user against the attacker-controlled tripId but deleteNoteFile in server/src/services/collabService.ts resolves the target only by note and...

bug-free-memory

nate158 https://t.me/Nate158digimon gcloud compute addresses create google-managed-services-VPCNETWORKNAME --global --purpose=VPCPEERING --addresses=192.168.0.0 --prefix-length=16 --network=projects/PROJECTID/global/networks/VPCNETWORKNAME nate15872.wordpress.com...

suds

OVERVIEW The "Suds" web services client is a lightweight soap-based client for python the is licensed under LGPL. For details, visit: Project site: https://fedorahosted.org/suds/ Documentation: https://fedorahosted.org/suds/wiki/Documentation Epydocs: http://jortel.fedorapeople.org/suds/doc/...

CVE-2019-19781

CVE-2019-19781 DFIR notes CVE-2019-19781 scanner CVE-2019-19781 Honeypot Reach me on Twitter @x1sec...

reconvault

ReconVault 🔍 El organizador de notas de reconocimiento que los cazadores de bugs realmente pidieron. ReconVault es una aplicación de escritorio de estética terminal con tema oscuro para Linux, construida para investigadores de seguridad, cazadores de bugs y jugadores de CTF. Deja atrás los archiv...

EUVD-2026-84949

A vulnerability has been found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Affected by this vulnerability is an unknown functionality of the file login.php. Such manipulation of the argument user/pass leads to sql injection. The attack may be performed...

EUVD-2026-84978

A vulnerability was found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Affected by this issue is some unknown functionality of the file /dashboard/userprofile.php?section=admin1. Performing a manipulation of the argument image results in unrestricted...