Category

• bwapp 86
• Web-vuln 22
• THM 7
• Tools 5
• Android 5
• system-vuln 3
• Other-Vuln 2
• HTB 2
• Other-Knowledge 1

bwapp

(bWAPP)CSRF (Transfer Amount) 2024.05.23 bwapp bee box bwapp CSRF OWASP TOP 10 OWASP

(bWAPP)CSRF (Change secret) 2024.05.23 bwapp bee box bwapp CSRF OWASP TOP 10 OWASP

(bWAPP)CSRF (Change Password) 2024.05.23 bwapp bee box bwapp CSRF OWASP TOP 10 OWASP

(bWAPP)XML External Entity Attacks (XXE) 2024.05.20 bwapp bee box bwapp LFI OWASP TOP 10 OWASP

(bWAPP)Server Side Request Forgery (SSRF) 2024.05.20 bwapp bee box bwapp OWASP TOP 10 OWASP ssrf

(bWAPP)SQLiteManager Local File Inclusion 2024.05.20 bwapp bee box bwapp LFI OWASP TOP 10 OWASP

(bWAPP)Restrict Folder Access 2024.05.20 bwapp bee box bwapp OWASP TOP 10 OWASP Restrict Folder Access

(bWAPP)Restrict Device Access 2024.05.20 bwapp bee box bwapp OWASP TOP 10 OWASP Restrict Device Access

(bWAPP)Remote & Local File Inclusion (RFI/LFI) 2024.05.20 bwapp bee box bwapp LFI OWASP TOP 10 OWASP

(bWAPP)Host Header Attack (Cache Poisoning) 2024.05.16 bwapp bee box bwapp Host Header Attack OWASP TOP 10 OWASP

(bWAPP)Directory Traversal - Files 2024.05.16 bwapp bee box bwapp Directory Traversal OWASP TOP 10 OWASP Path Traversal

(bWAPP)Directory Traversal - Directories 2024.05.16 bwapp bee box bwapp Directory Traversal OWASP TOP 10 OWASP Path Traversal

(bWAPP)Text Files (Accounts) 2024.05.13 bwapp bee box bwapp OWASP TOP 10 OWASP Text Files

(bWAPP)POODLE Vulnerability 2024.05.13 bwapp bee box bwapp mitm OWASP TOP 10 OWASP spoofing

(bWAPP)Host Header Attack (Reset Poisoning) 2024.05.13 bwapp bee box bwapp mitm OWASP TOP 10 OWASP spoofing

(bWAPP)Heartbleed Vulnerability 2024.05.13 bwapp bee box bwapp mitm OWASP TOP 10 OWASP spoofing

(bWAPP)HTML5 Web Storage (Secret) 2024.05.13 bwapp bee box bwapp HTML5 Web Storage OWASP TOP 10 OWASP XSS

(bWAPP)Clear Text HTTP (Credentials) 2024.05.13 bwapp bee box bwapp mitm OWASP TOP 10 OWASP spoofing

(bWAPP)Base64 Encoding (Secret) 2024.05.13 bwapp base64 bee box bwapp OWASP TOP 10 OWASP sensitive data exposure session

(bWAPP)Robots File 2024.05.12 bwapp bee box bwapp mitm OWASP TOP 10 OWASP

(bWAPP)Old, Backup & Unreferenced Files 2024.05.12 bwapp bee box bwapp mitm OWASP TOP 10 OWASP

(bWAPP)Man-in-the-Middle Attack (SMTP) 2024.05.12 bwapp bee box bwapp mitm OWASP TOP 10 OWASP

(bWAPP)Man-in-the-Middle Attack (HTTP) 2024.05.12 bwapp bee box bwapp mitm OWASP TOP 10 OWASP

(bWAPP)Local Privilege Escalation (sendpage) 2024.05.12 bwapp bee box bwapp Local Privilege Escalation OWASP TOP 10 OWASP

(bWAPP)Insecure WebDAV Configuration 2024.05.12 bwapp bee box bwapp OWASP TOP 10 OWASP WebDAV

(bWAPP)Insecure SNMP Configuration 2024.05.12 bwapp bee box bwapp OWASP TOP 10 OWASP SNMP

(bWAPP)Insecure FTP Configuration 2024.05.12 bwapp bee box bwapp FTP OWASP TOP 10 OWASP

(bWAPP)Denial-of-Service (XML Bomb) 2024.05.09 bwapp bee box bwapp DoS OWASP TOP 10 OWASP session xss

(bWAPP)Denial-of-Service (Slow HTTP DoS) 2024.05.09 bwapp bee box bwapp DoS OWASP TOP 10 OWASP session xss

(bWAPP)Denial-of-Service (SSL-Exhaustion) 2024.05.09 bwapp bee box bwapp DoS OWASP TOP 10 OWASP session xss

(bWAPP)Denial-of-Service (Large Chunk Size) 2024.05.08 bwapp bee box bwapp DoS OWASP TOP 10 OWASP session xss

(bWAPP)Cross-Site Tracing (XST) 2024.05.07 bwapp bee box bwapp cross-site tracing OWASP TOP 10 OWASP session xss xst

(bWAPP)Cross-Origin Resource Sharing (AJAX) 2024.05.06 bwapp bee box bwapp cors OWASP TOP 10 OWASP samba session sop

(bWAPP)Arbitrary File Access (Samba) 2024.05.05 bwapp bee box bwapp IDOR Misconfiguration OWASP TOP 10 OWASP samba session

(bWAPP)Insecure DOR - Insecure DOR (Reset Secret) 2024.05.01 bwapp Access Contorol bee box bwapp IDOR Insecure DOR OWASP TOP 10 OWASP session

(bWAPP)Insecure DOR - Insecure DOR (Order Tickets) 2024.04.12 bwapp Access Contorol bee box bwapp IDOR Insecure DOR OWASP TOP 10 OWASP session

(bWAPP)Insecure DOR - Insecure DOR (Change Secret) 2024.04.12 bwapp Access Contorol bee box bwapp IDOR Insecure DOR OWASP TOP 10 OWASP session

(bWAPP)phpMyAdmin BBCode Tag XSS 2024.04.06 bwapp bee box bwapp CVE-2010-4480 dom xss OWASP TOP 10 OWASP reflected xss reflected stored xss stored xss

(bWAPP)Stored (User-Agent) 2024.04.06 bwapp bee box bwapp dom xss OWASP TOP 10 OWASP reflected xss reflected stored xss stored xss

(bWAPP)Stored (Cookies) 2024.04.06 bwapp bee box bwapp dom xss OWASP TOP 10 OWASP reflected xss reflected stored xss stored xss

(bWAPP)Stored (Change secret) 2024.04.06 bwapp bee box bwapp dom xss OWASP TOP 10 OWASP reflected xss reflected stored xss stored xss

(bWAPP)Stored (Blog) 2024.04.06 bwapp bee box bwapp dom xss OWASP TOP 10 OWASP reflected xss reflected stored xss stored xss

(bWAPP)SQLiteManager XSS 2024.04.06 bwapp bee box bwapp CVE-2012-5105 dom xss OWASP TOP 10 OWASP reflected xss reflected stored xss stored xss

(bWAPP)Reflected (User-Agent) 2024.04.06 bwapp bee box bwapp dom xss OWASP TOP 10 OWASP reflected xss reflected stored xss stored xss

(bWAPP)Reflected (Referer) 2024.04.06 bwapp bee box bwapp dom xss OWASP TOP 10 OWASP reflected xss reflected stored xss stored xss

(bWAPP)Reflected (PHP_SELF) 2024.04.06 bwapp bee box bwapp dom xss OWASP TOP 10 OWASP reflected xss reflected stored xss stored xss

(bWAPP)XSS - Reflected (Login Form) 2024.04.06 bwapp bee box bwapp dom xss OWASP TOP 10 OWASP reflected xss reflected stored xss stored xss

(bWAPP)XSS - Reflected (HREF) 2024.04.04 bwapp bee box bwapp dom xss OWASP TOP 10 OWASP reflected xss reflected stored xss stored xss

(bWAPP)XSS - Reflected (Eval) 2024.04.03 bwapp bee box bwapp dom xss OWASP TOP 10 OWASP reflected xss reflected stored xss stored xss

(bWAPP)XSS - Reflected (Custom Header) 2024.04.03 bwapp bee box bwapp dom xss OWASP TOP 10 OWASP reflected xss reflected stored xss stored xss

(bWAPP)XSS - Reflected (Back Button) 2024.04.02 bwapp bee box bwapp dom xss OWASP TOP 10 OWASP reflected xss reflected stored xss stored xss

(bWAPP)XSS - Reflected (JSON) 2024.03.27 bwapp bee box bwapp dom xss OWASP TOP 10 OWASP reflected xss reflected stored xss stored xss

(bWAPP)XSS - Reflected (AJAX/JSON) 2024.03.27 bwapp bee box bwapp dom xss OWASP TOP 10 OWASP reflected xss reflected stored xss stored xss

(bWAPP)XSS - Reflected (AJAX/XML) 2024.03.25 bwapp bee box bwapp dom xss OWASP TOP 10 OWASP reflected xss reflected stored xss stored xss

(bWAPP)XSS - Reflected (POST) 2024.03.25 bwapp bee box bwapp dom xss OWASP TOP 10 OWASP reflected xss reflected stored xss stored xss

(bWAPP)XSS - Reflected (GET) 2024.03.25 bwapp bee box bwapp dom xss OWASP TOP 10 OWASP reflected xss reflected stored xss stored xss

(bWAPP)Broken Auth. - CAPTCHA Bypassing 2024.03.25 bwapp auth bee box broken auth bwapp OWASP TOP 10 OWASP session mgmt session

(bWAPP)Broken Auth. - Weak Passwords 2024.03.25 bwapp auth bee box broken auth bwapp OWASP TOP 10 OWASP session mgmt session

(bWAPP)Session Mgmt. - Strong Sessions 2024.03.25 bwapp auth bee box broken auth bwapp OWASP TOP 10 OWASP session mgmt session

(bWAPP)Session Mgmt. - Session ID in URL 2024.03.25 bwapp auth bee box broken auth bwapp OWASP TOP 10 OWASP session mgmt session

(bWAPP)Broken Auth. - Password Attacks 2024.03.25 bwapp auth bee box broken auth bwapp OWASP TOP 10 OWASP session mgmt session

(bWAPP)Broken Auth. - Logout Management 2024.03.25 bwapp auth bee box broken auth bwapp OWASP TOP 10 OWASP session mgmt session

(bWAPP)Session Mgmt. - Cookies (Secure) 2024.03.25 bwapp auth bee box broken auth bwapp OWASP TOP 10 OWASP session mgmt session

(bWAPP)Session Mgmt. - Cookies (HTTPOnly) 2024.03.25 bwapp auth bee box broken auth bwapp OWASP TOP 10 OWASP session mgmt session

(bWAPP)Broken Auth. - Insecure Login Forms 2024.03.25 bwapp auth bee box broken auth bwapp OWASP TOP 10 OWASP session mgmt session

(bWAPP)Session Mgmt. - Administrative Portals 2024.03.25 bwapp auth bee box broken auth bwapp OWASP TOP 10 OWASP session mgmt session

(bWAPP)XML/XPath Injection (Search) 2024.03.24 bwapp bee box bwapp GET injection OWASP TOP 10 OWASP sql xml injection xpath injection

(bWAPP)XML/XPath Injection (Login Form) 2024.03.24 bwapp bee box bwapp GET injection OWASP TOP 10 OWASP sql xml injection xpath injection

(bWAPP)SQL Injection - Blind - Time-Based (SQLMap) 2024.03.24 bwapp bee box bwapp GET injection OWASP TOP 10 OWASP sql injection sql

(bWAPP)SQL Injection - Stored (XML) 2024.03.24 bwapp bee box bwapp GET injection OWASP TOP 10 OWASP sql injection sql

(bWAPP)SQL Injection - Stored (User-Agent) 2024.03.24 bwapp bee box bwapp GET injection OWASP TOP 10 OWASP sql injection sql

(bWAPP)SQL Injection - Stored (SQLite) 2024.03.24 bwapp bee box bwapp GET injection OWASP TOP 10 OWASP sql injection sql

(bWAPP)SQL Injection (SQLite) 2024.03.24 bwapp bee box bwapp GET injection OWASP TOP 10 OWASP sql injection sql

(bWAPP)SQL Injection POST/Search 2024.03.24 bwapp bee box bwapp GET injection OWASP TOP 10 OWASP sql injection sql

(bWAPP)SQL Injection POST/Search 2024.03.24 bwapp bee box bwapp GET injection OWASP TOP 10 OWASP sql injection sql

(bWAPP)SQL Injection (Login Form/User) 2024.03.24 bwapp bee box bwapp GET injection OWASP TOP 10 OWASP sql injection sql

(bWAPP)SQL Injection (Login Form/Hero) 2024.03.24 bwapp bee box bwapp GET injection OWASP TOP 10 OWASP sql injection sql

(bWAPP)SQL Injection - Blind (SQLite) (SQLMap) 2024.03.24 bwapp bee box bwapp GET injection OWASP TOP 10 OWASP sql injection sql

(bWAPP)SQL Injection (AJAX/JSON/jQuery) 2024.03.24 bwapp bee box bwapp GET injection OWASP TOP 10 OWASP sql injection sql

(bWAPP)SQL Injection - Stored (Blog) 2024.03.24 bwapp bee box bwapp GET injection OWASP TOP 10 OWASP sql injection sql

(bWAPP)SQL Injection - Blind - Boolean-Based (Python Code) 2024.03.24 bwapp bee box bwapp GET injection OWASP TOP 10 OWASP sql injection sql

(bWAPP)Drupal SQL Injection (Drupageddon) 2024.03.24 bwapp bee box bwapp GET injection OWASP TOP 10 OWASP sql injection sql

(bWAPP)SQL Injection GET/Select 2024.03.23 bwapp bee box bwapp GET injection OWASP TOP 10 OWASP sql injection sql

(bWAPP)PHP Code Injection 2024.03.22 bwapp bee box bwapp injection OWASP TOP 10 OWASP php code injection php injection php

(bWAPP)SQL Injection GET/Search 2024.03.21 bwapp bee box bwapp GET injection OWASP TOP 10 OWASP sql injection sql

(bWAPP)Command Injection 2024.03.21 bwapp bee box bwapp command injection os injection OWASP TOP 10 OWASP

Back to top ↑

Web-vuln

언어별 취약 시스템 명령어 2024.08.30 Web-vuln cmd system web Vulnability

PHP strcmp() Vulnability 2024.08.30 Web-vuln function php strcmp web Vulnability

PHP Type Juggling Magic Hash 2024.08.30 Web-vuln Magic Hash php Type Juggling web Vulnability

PHP Functuion (mysql_real_escape_string OR Magic Quotes) Bypass 2024.08.30 Web-vuln function magic quotes php web Vulnability

Content Security Policy(CSP) Bypass 2024.08.30 Web-vuln Content Security Policy csp web Vulnability xss

Deserialize_Vulnability for Python_Pickle 2024.08.29 Web-vuln Deserialize Vulnability Deserialize Pickle python

401&403(Access Control) Bypass 2024.08.22 Web-vuln 403 bypass access control Forbidden

ZIP Slip Vulnerability 2024.08.22 Web-vuln web vulnerability web ZIP Slip Vulnerability ZIP Slip zip

Encoding Obfuscation 2024.05.31 Web-vuln Encoding Obfuscation Encoding web vulnerability web

Servcer Side Requests Forgery (SSRF) 2024.05.24 Web-vuln injection Servcer Side Requests Forgery SSRF web vulnerability web

SMTP Injection(Email injection) 2024.05.24 Web-vuln Email injection injection SMTP Injection web vulnerability web

File Inclusion (LFI/RFI) 2024.05.24 Web-vuln File Inclusion injection LFI RFI web vulnerability web

prototype pollution 2024.05.20 Web-vuln injection prototype pollution prototype web vulnerability web

Server Side Template Injection (SSTI) 2024.05.17 Web-vuln injection Server Side Template Injection SSTI web vulnerability web

Command Injection (OS Injection) 2024.05.17 Web-vuln Command Injection injection OS Injection web vulnerability web

Path Traversal 2024.05.13 Web-vuln injection Path Traversal web vulnerability web

Cross-site Tracing (XST) 2024.05.08 Web-vuln Cross-site Tracing web vulnerability web XSS XST

Insecure direct object references (IDOR) 2024.05.02 Web-vuln IDOR Insecure direct object references log web vulnerability web

Log Injection 2024.03.25 Web-vuln injection Log Injection log web vulnerability web

Authorization Header Bypass 2024.03.25 Web-vuln Authorization Header Bypass Authorization Header bypass web vulnerability web

Log Poisoning 2024.03.17 Web-vuln LFI log injection log poisoning RCE

Open redirect (redirect for PHP header() vulnerability) 2024.03.15 Web-vuln function open redirect php redirect

Back to top ↑

THM

HA Joker CTF 2024.08.07 THM HA Joker CTF Pentesting Pentest THM TryHackMe

Dreaming - WriteUP 2024.07.11 THM Dreaming Pentesting Pentest THM TryHackMe

UltraTech - WriteUP 2024.04.09 THM Pentesting Pentest THM TryHackMe

Boiler CTF - WriteUP 2024.04.05 THM Pentesting Pentest THM TryHackMe

Dogcat - WriteUP 2024.04.03 THM access.log apache container LFI log poisoning Pentesting Pentest php THM TryHackMe

Anonymous - WriteUP 2024.03.28 THM cron ftp Pentesting Pentest Privilege elevation smb THM TryHackMe write up

Archangel - WriteUP 2024.03.01 THM cron LFI log injection log poisoning path Pentesting Pentest RCE THM TryHackMe

Back to top ↑

Tools

pspy64 2024.07.11 Tools attacks ffuf password pentest tool pentest shadow tools tool

ffuf 2024.07.10 Tools attacks ffuf password pentest tool pentest shadow tools tool

unshadow 2024.03.23 Tools attacks password pentest tool pentest shadow tools tool unshadow

keepass2john 2024.03.23 Tools attacks keepass2john password pentest tool pentest tools tool wordlist

Cewl 2024.03.23 Tools attacks password pentest tool pentest tools tool wordlist

Back to top ↑

Android

Root Detection and Bypass 2024.06.02 Android android application app drozer insecurebankv2 mobile Root Detection and Bypass

Vulnerable Activity Components 2024.06.01 Android android application app drozer insecurebankv2 mobile Vulnerable Activity Components

Local Encryption issues 2024.05.20 Android android application app drozer insecurebankv2 Local Encryption issues mobile

Weak Authorization mechanism 2024.05.13 Android android application app drozer insecurebankv2 mobile Weak Authorization mechanism

Flawed Broadcast Receivers 2024.05.09 Android android application app drozer Flawed Broadcast Receivers insecurebankv2 mobile

Back to top ↑

system-vuln

바인드 쉘[Bind Shell], 리버스 쉘[Reverse Shell] 2024.08.30 system-vuln Bind Shell pwnable Reverse Shell shell systemhacking

Frame Pointer Overflow [FPO], SFP Overflow, SFPO 2024.08.30 system-vuln FPO Frame Pointer Overflow SFP Overflow SFPO systemhacking

Return-Oriented-Programming - ROP [x86-32bit] 2024.06.14 system-vuln pwnable pwn Return Oriented Programming rop systemhacking

Back to top ↑

Other-Vuln

Privilege Escalation Using LXD_LXC Group Assignment 2024.06.14 Other-Vuln lxc LXD_LXC Group Assignment lxd Privilege Escalation

Ruby-regular-expression(newline)[\n] 2024.06.14 Other-Vuln \n newline regular expression Ruby

Back to top ↑

HTB

PermX - WriteUP 2024.08.09 HTB PermX

Editorial - WriteUP 2024.07.03 HTB gitpython git HackTheBox HTB Pentesting Pentest RCE SSRF

Back to top ↑

Other-Knowledge

vi편집기에서 자동 줄 맞춤 2024.08.30 Other-Knowledge vim vi

Back to top ↑