Skip to content
OSCP Notes by An4kein
Overview
Initializing search
GitHub
Home
Enumeration
Exploitation
Post Exploitation
OSCP Tips
About
OSCP Notes by An4kein
GitHub
Home
Enumeration
Enumeration
Files
SSL/TLS
Ports
Web Attacks
Web Attacks
General Info
Quick Tricks
Open Redirects
Broken Links
Parameter Pollution
Bruteforcing
Pastejacking
Clickjacking
Prototype Pollution
Command Injection
Cookie Padding
CORS
Crawl & Fuzz
CRLF Injection
CSP (Content Security Policy)
CSRF (Cross-Site Request Forgery)
Deserialization Attacks
DNS Rebinding
Email Attacks
Header Injections
IDOR (Insecure Direct Object References)
LFI & RFI (Local & Remote File Inclusion)
Online Hashes Cracked
Open Redirect
Request Smuggling
Session Fixation
SQL Injection (SQLi)
SSRF (Server-Side Request Forgery)
SSTI (Server-Side Template Injection)
Tabnabbing
Upload Bypasses
Virtual Hosts Enumeration
Web Cache Deception
Web Cache Poisoning
Web Shells
Web Sockets
XSS (Cross-Site Scripting)
XXE (XML External Entity)
Web Services
Web Services
2FA
Adobe AEM
APIs
Drupal
ELK
Firebase
Firebird
Flash SWF
Flask
GitHub
GitLab
GraphQL
GWT
IIS
JBoss Java Deserialization
Jenkins
Jira
Joomla
JavaScript
JWT
Magento
MFA
Nginx
NoSQL & MongoDB
OAuth
OIDC OpenID Connect
OneLogin SAML
Others
OWA
PHP
Python
RoR (Ruby on Rails)
SAP
SharePoint
Symfony & Twig
Tomcat
VHosts
WAFs
WebDAV
WordPress
Exploitation
Exploitation
Payloads
Reverse Shells
File Transfer
Code Execution
Code Execution
Linux Snippets
Windows Snippets
Web Snippets
Post Exploitation
Post Exploitation
Linux
Pivoting
Windows
Windows
AD
AD
Kerberos Attacks
AD General
PS Tips & Tricks
OSCP Tips
OSCP Tips
Enumeration
Brute Force
Credentials
Exploitation
Payloads
Reverse Shells
Post Exploitation
Privilege Escalation
Lateral Movement
Persistence
Tunneling & Pivoting
Reporting & Notes
About
Web Attacks
Explore the left submenu to review common web attacks.
