365043 matches found
DefaultCreds-cheat-sheet
Default Credentials Cheat Sheet One place for all the default credentials to assist pentesters/blue Teamers during engagements, featuring default login/password details for various products sourced from multiple references. P.S : Most of the credentials were extracted from changeme,routersploit a...
CTFs
CTFs Writeups / Files for some of the Cyber CTFs that I've done I've also included a list of CTF resources as well as a comprehensive cheat sheet covering tons of common CTF challenges !NOTE There is now a web mirror of this repo at hackback.zip Table of Contents Resources YouTube Channels Practi...
CheatSheetSeries
Welcome to the OWASP Cheat Sheet Series Welcome to the official repository for the Open Worldwide Application Security Project® OWASP Cheat Sheet Series project. The project focuses on providing good security practices for builders in order to secure their applications. In order to read the cheat...
JustTryHarder
JustTryHarder JustTryHarder is a cheat sheet which will aid you through the PWK course & the OSCP Exam. Inspired by PayloadAllTheThings Feel free to submit a Pull Request & leave a star to share some love if this helped you. ð Hacktoberfest friendly! Yes, we are open to Pull Requests for...
thc-tips-tricks-hacks-cheat-sheet
THC æç±çæå·§ãçªéšäžé»å®¢ææ³ïŒéæ¥è¡šïŒ https://thc.org/tips è¿æ¯æä»¬æå欢çäžäºæå·§çåéãå ¶äžè®žå€æå·§å¹¶éæä»¬ååïŒæä»¬åªæ¯æ¶éæŽçã æä»¬æåæ ·å±ç€ºè¿äºæå·§ïŒäžè§£éå ¶åçãäœ éèŠäºè§£ Linux æèœçè§£å®ä»¬çå·¥äœæ¹åŒååå ã æå¥œæå·§ïŒå å ¥æä»¬ https://thc.org/ops 1. Bash 1. 讟眮 Hack Shell 2. éèäœ çåœä»€ 3. éèäœ çåœä»€è¡é项 4. éèçœç»è¿æ¥ 5. ä»¥çšæ·èº«ä»œéèè¿çš 6. 以 root 身仜éèè¿çš 7. éèèæ¬ 8. 对 cat éè 9. å¹¶è¡æ§è¡å¹¶åå«è®°åœæ¥å¿ 2. SSH 1. å ä¹äžå¯...
OSINT-Cheat-sheet
OSINT ì¹íž ìíž - OSINT ë구 ëª©ë¡ OSINT ë구, OSINT í, ë°ìŽí°ì , Maltego ë³í ë° êž°í 목ë¡ì í¬íší©ëë€. ì¬ì©í ì ìë ë¬Žë£ ë° ì ë£ ëêµ¬ê° ììŒë©° ìì ìë ì± ìì ì§ì§ ììµëë€ë³žìžì ìíì ê°ìíììì€. ì€ì§ ì§ì ëë êµì¡ 목ì ìŒë¡ë§ ì¬ì©íìžì. ìŒë¶ 늬ìì€ë¥Œ ë ìŽì ì¬ì©í ì ìê±°ë ì€ë¥ê° í¬íšëìŽ ìë€ë©Ž ì¬ê³Œë늜ëë€. ìì ìê° ìŽë¬í 늬ìì€ì ìí륌 ì êž°ì ìŒë¡ íìžíì§ ìêž° ë묞ì ëë€. ìë¡ìŽ ì ë³Žê° ììŒë©Ž ìì ìê° íŽë¹ 칎í ê³ ëŠ¬ì íšê» ìŽ ì ì¥ìì ì¶ê°í ê²ì ëë€. êž°ì 곌 ìží 늬ì ...
Privilege-Escalation
â¬ïž ãã³ãã¹ã¿ãŒåãç¹æš©ææ Œ CTFãã¬ã€ã€ãŒããããã¬ãŒã·ã§ã³ãã¹ã¿ãŒããµã€ããŒã»ãã¥ãªãã£åŠç¿è ãã䟵害ãããã·ã¹ãã äžã§æ»æè ãã©ã®ããã«æš©éãææ Œãããããçè§£ããããã«èšèšããããå®è·µçãªç¹æš©ææ ŒããŒãã·ãŒãå Œãªãã¡ã¬ã³ã¹ã¬ã€ã ð ç§ãã¡ãšã€ãªãã ðµ Telegram â ãã£ã³ãã«ãžåå â« Twitter/X â ãã©ããŒãã ð£ Discord â ãµãŒããŒãžåå ðŒ LinkedIn â HackingArticlesããã©ã㌠ð ãã¬ãŒãã³ã°ããã°ã©ã ð ãµã€ããŒã»ãã¥ãªãã£ãã¬ãŒãã³ã°ããã°ã©ã ã«åå ...
url-cheatsheet-data
Datos de la hoja de referencia de evasión de validación de URL Estos son los datos que alimentan la hoja de referencia de evasión de validación de URL de PortSwigger. Hemos publicado estos datos en Github para que la comunidad pueda contribuir vectores mediante pull requests. Contribución Para...
Cybersec
공격ì ì¬ìŽë²ë³Žì ì¹íž ìíž ë ëíì, íí ì€í°, CTF íë ìŽìŽë¥Œ ìíŽ ì€ê³ë ê³ ëë¡ ëì ìž ëšìŒ íìŒ HTML ì¹íž ìížì ëë€. ëìŒí 늬ë²ì€ ì ž íìŽë¡ë륌 ì ë ¥íê³ ë¡ì»¬ IPì í¬ížë¥Œ ê³ìíŽì ë°êŸžë ë° ì§ì¹ì šëì? ìŽ ë구ë ì ê³ íì€ ëª ë ¹ìŽì ëì ë° ê³µê²©ì ë³ì륌 ìëìŒë¡ 죌ì íì¬ ìì ì€ "ì€í íŒë¡"ì ìžì§ ë¶í륌 ìì ì€ëë€. 죌ì êž°ë¥ ë¯žì 컚ížë¡€ ìë 죌ì : í멎 ìëšì 공격ì IP , ëì IP , í¬íž 륌 ì ë ¥íìžì. ì¹íž ìížì 몚ë ëª ë ¹ìŽê° ìŠì ì ë°ìŽížë©ëë€. ë ìŽì ìë ížì§ì ììµëë€. OS ìž...
Pentest-Cheat-Sheet
ãã³ãã¹ã ããŒãã·ãŒã äžã®äžã«ã¯å€ãã®ããŒãã·ãŒããããããããã¯ç§ã®ãã®ã ãçŸåšé²è¡åœ¢ã®ãã®ã§ãé »ç¹ã« ãæã æŽæ°ãããã©ããã©ããã®ãããªãã®ã ãOSCP ã®å匷äžã«äœãå§ããããä»ã§ã¯ã¬ããããŒããŒãšããŠå¿ èŠãªãããå®è·µçãªå 容ãžãšé²åããŠãããæ°ãã远å äºé ã¯è©Šéšã§ã¯ãããã圹ã«ç«ããªãã ããããçŠæ¢ãããŠããããŒã«ããå«ãŸãããããããªãã åµå¯ éåžžã«äžå®å š... Linux ããŒã«ã« find / -name flag.txt ã¯ãã¡ã€ã«åã§ãã¡ã€ã«ãæ¢ãã grep -R "flag40" / -s -n...
bugbounty-cheatsheet
ãã°ããŠã³ã㣠ããŒãã·ãŒã ð ãªãã¡ã¬ã³ã¹| ð èåŒ±æ§ ---|--- ãã°ããŠã³ãã£ãã©ãããã©ãŒã | XSS æžç±| SQLi å°çšããŒã«| SSRF åµå¯| CRLFã€ã³ãžã§ã¯ã·ã§ã³ ç·Žç¿çšãã©ãããã©ãŒã | CSVã€ã³ãžã§ã¯ã·ã§ã³ ãã°ããŠã³ãã£ã®ãã³ã| LFI | XXE | RCE | ãªãŒãã³ãªãã€ã¬ã¯ã | æå· | ãã³ãã¬ãŒãã€ã³ãžã§ã¯ã·ã§ã³ | ã³ã³ãã³ãã€ã³ãžã§ã¯ã·ã§ã³ è²¢ç®ã«ã€ã㊠ç§ãã¡ã¯äžè¬ããã®è²¢ç®ãæè¿ããŸãã ã€ã·ã¥ãŒãã©ãã«ãŒã®äœ¿ãæ¹ ð¡ ã€ã·ã¥ãŒãã©ãã«ãŒã¯ããã°å ±åãšæ©èœãªã¯ãšã¹ãã®ããã®æšå¥šãã£ãã«ã§ãã ã€ã·ã¥ãŒãšã©ãã« ð·...
Nmap-Cheat-Sheet
Nmap ããŒãã·ãŒã Nmap ã¿ãŒã²ããéžæ root@kitploit: Scan a single IP nmap 192.168.1.1 Scan a host nmap www.testhostname.com Scan a range of IPs nmap 192.168.1.1-20 Scan a subnet nmap 192.168.1.0/24 Scan targets from a text file nmap -iL list-of-ips.txt Nmap ããŒãéžæ root@kitploit: Scan a single Port nmap -p 22...
BurpSuite-For-Pentester
ð·ïž ãã³ãã¹ã¿ãŒåãBurpSuite ãã°ããŠã³ãã£ãã³ã¿ãŒããããã¬ãŒã·ã§ã³ãã¹ã¿ãŒåãã«ãBurp Suiteã䜿çšããŠWebã¢ããªã±ãŒã·ã§ã³ã®è匱æ§ãäœæ·±å»åºŠïŒP4ïŒããé倧ïŒP1ïŒãŸã§å¹ççã«çºèŠããããã®å®è·µçãªBurp SuiteããŒãã·ãŒãå ŒåŠç¿ã¬ã€ãã§ãã ãã®ãªããžããªã¯ãWebã¢ããªã±ãŒã·ã§ã³ã®ã»ãã¥ãªãã£ãã¹ãã«é¢ããäœç³»åããããªãã¡ã¬ã³ã¹ãæäŸããã»ãã¥ãªãã£ç ç©¶è ãBurp Suiteã®åŒ·åãªæ©èœã䜿çšããŠããã©ãã£ãã¯ã®ååããªã¯ãšã¹ãã®åæããã©ã¡ãŒã¿ã®ãã¡ãžã³ã°ããããŠçŸä»£ã®Webã¢ããªã±ãŒã·ã§ã³ã®è匱æ§ãç¹å®ããæ¹æ³ãçè§£ããã®ã«åœ¹ç«ã¡ãŸãã ð...
Metasploit-Simulation-lab
ð¡ïž Metasploit Simulation Lab â Ethical Hacking Training !alt...
XSS-cheat-sheet-txt-dictionary-by-PortSwigger
XSS cheat sheet dictionary by PortSwigger PortSwigger diction...
AWS VDP: Password Reuse Vulnerability on AWS Sign-in Page via Password Reset Flow leads to Security Policy Violation
Asset URL: ââââââ Summary: The AWS sign-in page allows users to reuse old passwords when resetting their password, which violates security best practices outlined in OWASP Authentication Cheat Sheet and NIST 800-63B Digital Identity Guidelines. This misconfiguration could potentially weaken accou...
xss-vectors-cheat-sheet
xss...
jingfan-ps.com Cross Site Scripting vulnerability OBB-4047583
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
northcentralhpba.org Cross Site Scripting vulnerability OBB-4043636
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
simbada.trenggalekkab.go.id Cross Site Scripting vulnerability OBB-4043541
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...