tags
- 32-bit 1
- 7-Zip Wildcard Injection 1
- 7z 1
- accesschk 1
- AChat 1
- Active Directory 13
- Adobe ColdFusion 1
- AI Security 1
- Alternate Data Streams 1
- AlwaysInstallElevated 2
- Anonymous FTP 2
- Apache ActiveMQ 1
- Apache James 1
- Apache Tomcat 2
- API 1
- apport-cli 1
- apt-get 1
- Arbitrary File Read 4
- Arbitrary File Upload 1
- AS-REP Roasting 3
- ASPX Reverse Shell 1
- ASPX Web Shell 1
- Authenticated RCE 4
- Authentication Bypass 2
- Authorization Header 1
- AutoLogon Credentials 1
- awk 1
- Azure AD Connect 1
- Backdrop CMS 1
- Backup Operators 2
- Backup Script Race 1
- base64 3
- bash 2
- Bash History 1
- Bash Wildcard 1
- bcrypt 3
- bee 1
- Binary Rename 1
- Binary Restriction 1
- binwalk 2
- Blind SQL Injection 1
- BloodHound 5
- bloodhound-python 3
- Blowfish 1
- Boolean-Based SQL Injection 1
- Brute Force 1
- Buffer Overflow 2
- BulletsPassView 1
- Burp Repeater 1
- Burp Suite 24
- Business Logic 1
- CAP_SYS_ADMIN 1
- Capabilities 1
- capsh 1
- Certificate Abuse 1
- certify 1
- certipy-ad 1
- certutil 5
- cewl 1
- chisel 1
- chkrootkit 1
- CHM File 1
- Cisco Password Hashes 1
- Cisco Type 5 1
- Cisco Type 7 1
- Cleartext Credentials 2
- Client-Side Attack 1
- CloudMe 1
- Command Execution 2
- Command Injection 11
- Container Escape 2
- Content-Type Bypass 1
- CouchDB 1
- cPickle Deserialization 1
- CrackStation 1
- Credential Brute Force 1
- Credential Disclosure 3
- Credential Reuse 5
- CRLF Injection 1
- Cron 2
- Cron Job 3
- Cron Job Abuse 2
- Cronjob 1
- Cross-Site Request Forgery 1
- Cross-Site Scripting 2
- CSRF 1
- CSRF Bypass 1
- curl 15
- Custom Header Bypass 1
- Custom Payload 1
- CVE-2010-2075 1
- CVE-2015-6967 1
- CVE-2016-6914 1
- CVE-2017-12635 1
- CVE-2018-9276 1
- CVE-2019-18988 1
- CVE-2021-43798 1
- CVE-2022-24439 1
- CVE-2022-25765 1
- CVE-2022-37706 1
- CVE-2022-44268 1
- CVE-2022-4510 1
- CVE-2023-1326 1
- CVE-2023-2255 1
- CVE-2023-23752 1
- CVE-2023-24249 1
- CVE-2023-2640 1
- CVE-2023-27532 1
- CVE-2023-30253 1
- CVE-2023-30547 1
- CVE-2023-32629 1
- CVE-2023-32784 1
- CVE-2023-38646 1
- CVE-2023-40028 1
- CVE-2023-40931 1
- CVE-2023-41425 1
- CVE-2023-46604 1
- CVE-2023-49147 1
- CVE-2024-21413 1
- CVE-2024-23897 1
- CVE-2024-32019 1
- CVE-2025-24893 1
- CVE-2025-49113 1
- CVE-2026-33017 1
- CyberChef 1
- daloRADIUS 1
- Data Leakage 1
- DCSync 6
- Debug Interface 1
- debugfs 1
- deepce 1
- Default Credentials 5
- Diamorphine 1
- Directory Traversal 1
- dirsearch 23
- Disabled Functions Bypass 1
- disk group 1
- diskshadow 2
- DLL Hijacking 1
- DNS Exfiltration 1
- Docker 9
- Docker Escape 1
- docker-inspect 1
- Dolibarr 1
- Enlightenment 1
- enum4linux-ng 1
- Enumeration 1
- Environment Variables 2
- evil-winrm 13
- Excel Macros 1
- Exploit Development 1
- exploit-db 2
- Exposed Git Repository 1
- Express.js 2
- feroxbuster 2
- ffuf 14
- File Read 1
- File Upload 4
- File Upload Bypass 4
- File Write 1
- Finger 1
- Flask 3
- ForceChangePassword 1
- FreeBSD 2
- FTP 4
- Gandalf 1
- GCC 1
- GenericAll 2
- Ghost CMS 1
- Git 3
- Git Config 1
- git-dumper 5
- Git History 2
- Git History Secrets 1
- Gitea 2
- Gitea Access Token 1
- GitPython 1
- GLIBC 1
- go 1
- GodPotato 3
- Gogs 1
- GPO Abuse 1
- GPP 2
- gpp-decrypt 2
- Grafana 1
- GraphQL 1
- Groovy 1
- Group Permissions 1
- Group Policy Preferences 1
- GTFOBins 9
- GUI UAC 1
- Gunicorn 1
- Gym Management Software 1
- Hash Cracking 1
- hashcat 10
- HashiCorp Vault 1
- Header Injection 1
- HelpDeskZ 1
- hMailServer 2
- HttpOnly 1
- Hydra 16
- icacls 1
- IFCFG 1
- IIS 5
- ImageMagick 1
- impacket 5
- impacket-changepasswd 1
- impacket-GetNPUsers 3
- impacket-GetUserSPNs 1
- impacket-lookupsid 2
- impacket-mssqlclient 2
- impacket-psexec 2
- impacket-secretsdump 7
- impacket-smbserver 2
- impacket-ticketer 1
- Information Disclosure 1
- Insecure Deserialization 2
- Internal API 1
- Invoke-SeRestoreAbuse 1
- IRC Backdoor 1
- irssi 1
- Jailbreaking 1
- JAR 1
- JavaScript 1
- JAWS 1
- Jenkins 2
- Jenkins Credentials 1
- Jenkins RCE 1
- jenkins-cli 1
- Jetty 1
- john 21
- Joomla 1
- joomscan 1
- jq 3
- JSESSIONID 1
- JuicyPotatoNG 1
- JWT 4
- JWT Key Manipulation 1
- JWT None Algorithm 1
- KeePass 2
- Kerberoast 2
- kerbrute 4
- Kernel Exploit 4
- Kernel Exploits 3
- Kernel Module 1
- Kernel Password Unmask 1
- Kiosk Escape 1
- kpcli 2
- kubectl 1
- Kubelet API 1
- Kubernetes 1
- Kubernetes Service Account 1
- Lakera 1
- Langflow 1
- LAPS 1
- Laravel 1
- LaZagne 1
- LDAP 7
- ldapsearch 7
- less 1
- LFI 4
- LibreOffice 2
- LibreOffice Macro 1
- ligolo 8
- Ligolo-ng 1
- LimeSurvey 1
- linpeas 4
- LINQPad 1
- Linux 54
- LKM Rootkit 1
- LLM Security 1
- Local File Inclusion 5
- Local Port Forwarding 1
- Log Poisoning 1
- Login Bypass 1
- Logon Script 1
- LSASS Dump 1
- ltrace 1
- LXD Group 1
- Magento 1
- Magento SQLi 1
- magescan 1
- Magic Bytes 3
- Malicious MSI 1
- Malicious ODT 1
- Masked Password 1
- MCP Server 1
- MD5 Cracking 1
- MDB 1
- mdbtools 1
- Memory Dump 1
- Metabase 1
- Metasploit 2
- metasploit-exploit-suggester 1
- Meterpreter 2
- MIME Type 1
- mimikatz 2
- MinGW 1
- mmg-odt 1
- Module Upload 1
- Monstra CMS 1
- Mosh 1
- Mount Abuse 1
- mRemoteNG 1
- mremoteng-decrypt 1
- msfvenom 16
- MSSQL 5
- MySQL 4
- Nagios XI 1
- nc 2
- ndsudo 1
- Nested Groups 1
- netcat 5
- netdata 1
- netexec 22
- Network Script RCE 1
- NFS 2
- nginx 1
- Nibbleblog 1
- nishang 3
- nmap 83
- Node Inspector 1
- Node.js 3
- proxy 1
- NoSQL Authentication Bypass 1
- NoSQL Injection 1
- NSClient++ 1
- nsenter 1
- NTDS 3
- ntdsutil 1
- NTLM Hash Capture 2
- NTLM Relay 1
- ntlm_theft 2
- NTLMv2 1
- NTLMv2 Hash Capture 1
- NVMS-1000 1
- objdump 1
- ODT 1
- onesixtyone 5
- OpenNetAdmin 1
- openssl 1
- Oplock 1
- OTP 1
- OTP Brute Force 1
- OverlayFS 1
- PAM Privilege Escalation 1
- Pandora FMS 1
- Parallel Requests 1
- Pass the Hash 4
- Password Attack 1
- Password Bruteforce 1
- Password Cracking 2
- Password Decryption 1
- Password Hash 1
- Password Hunting 2
- Password Must Change 1
- Password Protected ZIP 1
- Password Reset 1
- Password Reuse 6
- Password Spraying 6
- PATH Hijacking 5
- Path Traversal 2
- Pattern Matching 1
- PDF24 1
- pdfkit 1
- penelope 24
- PFX Certificate 1
- pfx2john 1
- phar Wrapper 1
- Phishing 2
- PHP 1
- PHP Backdoor 1
- PHP Code Injection 1
- PHP Plugin Upload 1
- PHP Session Injection 1
- PHP Web Shell 4
- PHP Webshell 7
- phpbash 1
- phpLiteAdmin 1
- phpMyAdmin 1
- pip 1
- POP3 1
- Port Knocking 1
- Post-Exploitation 1
- PostgreSQL 2
- Potato 1
- PowerShell 2
- PowerShell Credential Object 1
- PowerShell History 1
- PowerShell Reverse Shell 3
- PowerUp 4
- PowerView 3
- Printer Admin Panel 1
- PrintSpoofer 1
- Private Key 1
- Privilege Escalation 4
- Privilege Escalation API 1
- Privilege Escalation via Sudo 1
- Privileged Container 1
- Privileged Pod 1
- ProcDump 1
- Process Memory Dump 1
- Prompt Injection 1
- PRTG Network Monitor 1
- pspy 7
- pspy64 2
- psql 1
- PST 1
- Public Exploit 1
- PuTTY 1
- puttygen 1
- pyGPOAbuse 1
- pymysql 1
- pypykatz 1
- Python 4
- Python 2 1
- Python Eval 1
- Python eval() Injection 1
- Python2 1
- Python2 input() 1
- Race Condition 1
- Rate Limit Bypass 1
- rbash Bypass 1
- rcat 5
- rdesktop 1
- RDP 3
- readpst 1
- Registry Enumeration 1
- Relative Path 1
- Remmina 2
- Remote Code Execution 11
- Remote Command Execution 2
- Remote Desktop Plus 1
- Remote File Inclusion 2
- Request Tracker 1
- requestrepo 1
- Responder 8
- REST API 2
- Restricted Shell 1
- Reverse Shell 9
- revshells.com 1
- RFI 1
- RID Brute 2
- RID Brute Force 2
- rlwrap 1
- Roundcube Webmail 1
- rpcclient 2
- Rsync 1
- Rubeus 1
- Ruby 1
- Runas 2
- RunasCs 2
- Salted Hash 1
- Sandbox Escape 1
- SaveCred 1
- Scheduled Tasks 1
- Searchor 1
- searchsploit 2
- Seatbelt 1
- SeBackupPrivilege 5
- Second-Order SQL Injection 1
- sed 1
- SeImpersonatePrivilege 4
- SeRestorePrivilege 5
- Server Operators 1
- Server-Side Request Forgery 2
- Server-Side Template Injection 1
- Service Abuse 3
- Service Misconfiguration 1
- Session Hijacking 2
- SetOpLock 1
- SGID 1
- Shadow Backup 1
- Shared Volume 1
- SharpChrome 1
- sharphound 4
- Shell Stabilisation 1
- Shellcode 1
- Shoplift 1
- showmount 1
- SigmaPotato 1
- Signal Abuse 1
- Silver Ticket 1
- SMB 15
- SMB Relay 1
- smbclient 11
- smbget 1
- smbmap 5
- SMTP 5
- smtp-user-enum 1
- SNMP 5
- SNMP Brute Force 1
- snmpbulkwalk 1
- snmpwalk 4
- socat 1
- Solaris 1
- Source Code Disclosure 1
- Spring Boot 1
- Spring Boot Actuator 1
- SQL CE 1
- SQL Injection 7
- SQLite 3
- sqlite3 2
- sqlmap 4
- ssh 12
- SSH Authorized Keys 1
- SSH Key 1
- SSH Key Abuse 1
- SSH Port Forwarding 1
- ssh2john 1
- SSRF 2
- SSTI 1
- Static Binary 1
- Steganography 2
- steghide 1
- Stored Credentials 2
- Stored XSS 1
- strings 1
- Subdomain Fuzzing 1
- Subversion 1
- sudo 6
- Sudo Abuse 15
- sudo pip 1
- Sudo Privilege Escalation 1
- Sudo Tar Abuse 1
- SUID 6
- SUID Abuse 5
- SUID Bash 2
- swaks 3
- Symlink Abuse 2
- systemctl 1
- SYSVOL 1
- tcpdump 2
- TeamViewer 1
- Telnet 2
- Template RCE 1
- Time-Based Blind SQL Injection 1
- TLS Certificate Enumeration 1
- TOCTOU 1
- Torrent Hoster 1
- UAC Bypass 3
- UACME 1
- Ubiquiti UniFi Video 1
- Umbraco CMS 1
- Unauthenticated File Upload 1
- Unauthenticated RCE 1
- Union-Based SQL Injection 2
- Unix Socket 1
- unix2dos 2
- Unquoted Service Path 1
- UnrealIRCd 1
- unshadow 1
- unzip 1
- User Enumeration 2
- User-Agent RCE 1
- Username Generation 1
- username-anarchy 2
- Vault SSH OTP 1
- VBS 1
- Veeam Backup 1
- VHost 3
- VHost Fuzzing 3
- vi Escape 1
- Visual Studio 1
- vm2 1
- VNC 1
- Wappalyzer 1
- WAR Reverse Shell 2
- Watson 1
- Weak Passwords 1
- Web 3
- Web Application 4
- Web Enumeration 1
- Web Fuzzing 3
- Web Root Permissions 1
- web.config 1
- WebDAV 1
- websocat 1
- wesng 1
- wget 2
- Windows 35
- Windows Defender Evasion 1
- Windows Subsystem for Linux 1
- winPEAS 2
- WinRM 3
- WinRM Certificate Authentication 1
- WonderCMS 1
- Word Macro 1
- WordPress 1
- World-Writable Script Hijack 1
- wpscan 1
- Writable Share 1
- WriteDacl 2
- WriteOwner 1
- WSL 1
- wwwolf-php-webshell 1
- X-Forwarded-For 1
- xfreerdp3 1
- xp_cmdshell 2
- xp_dirtree 1
- XSS 1
- XWiki 1
- xxd 5
- YAML Deserialization 1
- Zip Slip 1
- ZIP Upload 1
- zip2john 2