lorien / pentesting

Pentestings Manuals

Pentesting Manuals

SQL Inbjection

• payload: https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/SQL%20Injection/Intruder/SQL-Injection

Command Inbjection

• manual: https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Command%20Injection
• payload: https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Command%20Injection/Intruder/command-execution-unix.txt

Privilege Escalation

• https://gtfobins.github.io/

Reverse Shells

• https://www.revshells.com/

Regular Expressions

• https://checkmarx.com/wp-content/uploads/2015/03/ReDoS-Attacks.pdf

XXE

• manual: https://portswigger.net/web-security/xxe
• manual: https://book.hacktricks.xyz/pentesting-web/xxe-xee-xml-external-entity
• manual: https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/XML_Security_Cheat_Sheet.md
• manual: https://media.blackhat.com/eu-13/briefings/Osipov/bh-eu-13-XML-data-osipov-slides.pdf

Cloud

• https://hackingthe.cloud/

Obfuscating Payload

• https://portswigger.net/web-security/essential-skills/obfuscating-attacks-using-encodings

Compilation

• https://github.com/swisskyrepo/PayloadsAllTheThings
• https://book.hacktricks.xyz/
• https://github.com/OWASP/CheatSheetSeries/tree/master/cheatsheets