Web

Ad-Hoc Web Servers to Catch HTTP Client Data

Using an Ad-Hoc Nginx Server to Catch-Web Requests

Set up Custom Logging sudo apt install -y libnginx-mod-http-lua Install Nginx LUA libraries su...

Using an Ad-Hoc Python Web Server to Catch HTTP Client Requests

nano serv.py import http.server bind_address='0.0.0.0' port=80 class CustomRequestHandl...

Brute Force & Fuzzing

FFUF

Brute Force Logins Brute Force with a Request File Start Burp Make a randomized login to the...

Gobuster

Virtual Host Enumeration You can find a more detailed analysis on the functionality of virtual h...

Burp Suite

Burp Chromium Browser Always Upgrades to TLS

Problem In the browser, you enter http://domain.tld or http://10.10.10.10 for example. If you're...

Constrain Burp Memory Usage

JVM Options Search for the application and right click "Edit Application" (KDE Plasma pictured...

Cross Site Scripting (XSS)

Data Exfiltration

Stored / Hosted XSS If the target page has a loose content security policy / cross-origin policy...

Cookie Theft

Stored / Hosted XSS If there is a vulnerability where you can store or submit HTML and have it r...

curl

curl / cURL / Client for URLs: https://curl.se/

Manual Testing with cURL

Multipart Forms This form expects the following fields: cat_name : text age : number birthdate...

Dumping Open Git Repos

git-dumper

Python environments are externally managed by apt on Kali Linux, so use pipx or a virtual environ...

Mining Data from Git Repos

Interesting Files The regex patterns found on this page are just some examples you could use to ...

JSON

jq

Selecting JSON Properties Property Name Contains Dashes { "first-name": "john", "last-nam...

Next.js

Finding Build Manifests

Assuming you have some means of reading server-side files, these are some examples of places you ...

SQL Injection

Install Ghauri on Kali Linux

Installation Python environment is managed by apt on Kali Linux, use pipx or a virtual environme...

Web Protocols

Multipart Forms and Boundary Parameters

Multipart/Form-Data Example Example Web Form Consider the following web form... File Uploa...

WordPress

Manual Enumeration with Nmap

Find WordPress NSE Scripts find /usr/share/nmap/scripts -name '*wordpress*' Enumerate WordPre...