- (A) Escalada de Privilegios
- Abusando de privilegios a nivel de Sudoers
- Abusando de privilegios SUID
- Abuso de binarios específicos
- Abuso de grupos de usuario especiales
- Abuso de permisos incorrectamente implementados
- Abuso de servicios internos del sistema
- Detección y explotación de Capabilities
- Docker Breakout
- Explotación de Tareas Cron
- Explotación del Kernel
- PATH Hijacking
- Python Library Hijacking
- Secuestro de la biblioteca de objetos compartidos enlazados dinámicamente
- (A) Introducción al Buffer Overflow
- (B) Creación de nuestro laboratorio de pruebas e instalación de Immunity Debuger
- (C) Fase inicial de Fuzzing y tomando el control del registro EIP
- (D) Asignación de espacio para el Shellcode
- (E) Generación de Bytearrays y detección de Badchars
- (F) Búsqueda de OpCodes para entrar al ESP y cargar nuestro Shellcode
- (G) Uso de NOPs, desplazamientos en pila e interpretación del Shellcode para lograr RCE
- (H) Modificación del Shellcode para controlar el comando que se desea ejecutar
- (I) Explotando un nuevo binario
- Abuso de APIs
- Abuso de subida de archivos
- Ataque de asignación masiva (Mass-Asignment Attack - Parameter Binding)
- Ataque de deserialización
- Ataque ShellShock
- Atq. de transf. de zona (AXFR – Full Zone Transfer)
- CORS
- CSRF (Cross Site Req Forgery)
- CSSI (CSS Injection)
- CSTI (Client-Side Template Injection)
- DES-Pickle (Python – Ataque de Deserialización Pickle)
- DES-Yaml (Python – Ataque de Deserialización Yaml)
- IDORs
- Inyecciones LaTeX
- Inyecciones LDAP
- Inyecciones NOSQL
- Inyecciones XPath
- Json Web Tokens (JWT)
- LFI (Local File Inclusion)
- Log Poisoning
- Open Redirect
- Padding Oracle Attack
- Prototype Pollution
- Race Condition
- RFI (Remote File Inclusion)
- Session Puzzling - Session Fixation - Session Variable Overloading
- SQL Truncation (Ataque de Truncado SQL)
- SQLI (SQL Injection)
- Squid Proxies
- SSRF (Server Side Req Forgery)
- SSTI (Server-Side Template Injection)
- Type Juggling Attack
- WebDAV (NO OWASP)
- XSS (Cross-site Scripting)
- XXE (XML Ext Entity Injection)
- Apocalyst (Medium)
- Casino Royale 1 (Intermedia)
- Delivery (Medium)
- Driver (Easy) WINDOWS
- Granny (Easy) WINDOWS
- IMF 1 (Intermedia)
- Infovore
- Knife (Super-Easy)
- Legacy (Easy) WINDOWS
- Love (Easy) WINDOWS
- NunChucks (Easy)
- Poison (Medium)
- Presidential (Fácil)
- Stratosphere (Medium)
- Symfonos 6.1 (Fácil - Intermedia)
- Tabby (Medium)
- Validation (Easy)
Tag Index
Found 177 total tags.
32bytes
1 item with this tag.
action-file
1 item with this tag.
apis
2 items with this tag.
AppArmor
1 item with this tag.
ASPX
1 item with this tag.
ataque
1 item with this tag.
automatizado
1 item with this tag.
badchars
1 item with this tag.
binarios
1 item with this tag.
bindshell
1 item with this tag.
blindsqli
1 item with this tag.
bruteforce
1 item with this tag.
burpsuite
1 item with this tag.
bytearrays
1 item with this tag.
cap_dac_read_search
1 item with this tag.
capabilities
2 items with this tag.
certutil
1 item with this tag.
cewl
1 item with this tag.
churrasco
1 item with this tag.
cmi
1 item with this tag.
cms
1 item with this tag.
conexiones
1 item with this tag.
contenedores
1 item with this tag.
cookies
1 item with this tag.
correoselectronicos
2 items with this tag.
cron
1 item with this tag.
csrf
1 item with this tag.
debuger
1 item with this tag.
docker
1 item with this tag.
docker-breakout
1 item with this tag.
dominios
2 items with this tag.
dorks
1 item with this tag.
drupal
1 item with this tag.
enumeración
2 items with this tag.
escalation
13 items with this tag. Showing first 10 tags.
EternalBlue
1 item with this tag.
evil-winrm
1 item with this tag.
file
1 item with this tag.
fileupload
2 items with this tag.
firewall
1 item with this tag.
forwardshell
1 item with this tag.
ftp
1 item with this tag.
fuzzing
2 items with this tag.
gestoresdecontenidos
2 items with this tag.
go
1 item with this tag.
gobuster
2 items with this tag.
gtfobins
1 item with this tag.
guessing
1 item with this tag.
hackerone
1 item with this tag.
hacktricks
1 item with this tag.
hash-NTLMv2
1 item with this tag.
hashcat
1 item with this tag.
headerabuse
1 item with this tag.
HTTP-METHOD
1 item with this tag.
IIS
1 item with this tag.
immunity
1 item with this tag.
instalación
1 item with this tag.
internet
1 item with this tag.
inyeccion
1 item with this tag.
ipv4
1 item with this tag.
ipv6
1 item with this tag.
john
3 items with this tag.
joomla
1 item with this tag.
juicypotato
1 item with this tag.
jwt
1 item with this tag.
laboratorios
2 items with this tag.
LFI
1 item with this tag.
logpoisoning
2 items with this tag.
lxd
1 item with this tag.
mac
1 item with this tag.
magento
1 item with this tag.
memory
1 item with this tag.
MOVE
1 item with this tag.
msiexec
1 item with this tag.
mysql
2 items with this tag.
mysqlshow
1 item with this tag.
ncat
1 item with this tag.
netcat
1 item with this tag.
netexec
2 items with this tag.
network
2 items with this tag.
nmap
1 item with this tag.
nmap-scripts
1 item with this tag.
nonstaged
1 item with this tag.
NOSQL
1 item with this tag.
offset
1 item with this tag.
OpCodes
1 item with this tag.
osi
1 item with this tag.
paddingoracleattack
1 item with this tag.
PATH
1 item with this tag.
payloads
2 items with this tag.
pensamiento-lateral
1 item with this tag.
permisos
2 items with this tag.
php
1 item with this tag.
pickle
1 item with this tag.
pivoting
1 item with this tag.
powershell
1 item with this tag.
privilege
12 items with this tag. Showing first 10 tags.
protocolos
2 items with this tag.
proxy
1 item with this tag.
puertos
2 items with this tag.
PUT
1 item with this tag.
pythonlibraryhijacking
1 item with this tag.
race-condition
2 items with this tag.
rce
1 item with this tag.
request
1 item with this tag.
ret2reg
1 item with this tag.
reverseshell
2 items with this tag.
SCF-FILE
1 item with this tag.
script
1 item with this tag.
SELinux
1 item with this tag.
serial
1 item with this tag.
servicios
1 item with this tag.
servidores
2 items with this tag.
sesion
1 item with this tag.
shell
1 item with this tag.
sistema
1 item with this tag.
sistemaoperativo
1 item with this tag.
smbserver
3 items with this tag.
smtp
1 item with this tag.
so
1 item with this tag.
sql
1 item with this tag.
sqli
3 items with this tag.
sqlinjection
1 item with this tag.
ssh
3 items with this tag.
ssh-tunneling
1 item with this tag.
ssrf
1 item with this tag.
SSRF
1 item with this tag.
SSTI
1 item with this tag.
staged
1 item with this tag.
steghide
1 item with this tag.
subdominios
1 item with this tag.
subida-archivos
2 items with this tag.
subnetting
2 items with this tag.
sudo
2 items with this tag.
sudoers
2 items with this tag.
suid
1 item with this tag.
SUID
1 item with this tag.
tcp
1 item with this tag.
template-abuse-for-RCE
1 item with this tag.
tightvnc
1 item with this tag.
timesqli
1 item with this tag.
tunneling
1 item with this tag.
typejuggling
1 item with this tag.
udp
1 item with this tag.
userpivoting
1 item with this tag.
virtualhosting
2 items with this tag.
vncviewer
1 item with this tag.
web
28 items with this tag. Showing first 10 tags.
webdav
1 item with this tag.
webshell
1 item with this tag.
wfuzz
1 item with this tag.
windows
1 item with this tag.
winpeas
2 items with this tag.
WinRM
1 item with this tag.
wordpress
1 item with this tag.
wpscan
1 item with this tag.
x86
1 item with this tag.
xxe
1 item with this tag.
zip2john
1 item with this tag.