| -rw-r--r-- | .github/workflows/sync-mirrors.yml | 47L |
| -rw-r--r-- | .gitignore | 23L |
| -rw-r--r-- | DESIGN.md | 108L |
| -rw-r--r-- | LICENSE | 36L |
| -rw-r--r-- | README.md | 120L |
| -rw-r--r-- | astro.config.mjs | 210L |
| -rw-r--r-- | content-manifest.json | 1291L |
| -rw-r--r-- | docs/design-pass-findings.md | 110L |
| -rw-r--r-- | docs/provenance-audit.md | 391L |
| -rw-r--r-- | internal-manifest.json | 17L |
| -rw-r--r-- | package-lock.json | 6503L |
| -rw-r--r-- | package.json | 29L |
| -rw-r--r-- | payloads-manifest.json | 72L |
| -rw-r--r-- | port-vault-decisions.tsv | 225L |
| -rw-r--r-- | public/.nojekyll | 0B |
| -rw-r--r-- | public/_headers | 37L |
| -rw-r--r-- | public/diagrams/attacking-common-applications/coldfusion.svg | 15L |
| -rw-r--r-- | public/diagrams/attacking-common-applications/drupal.svg | 1L |
| -rw-r--r-- | public/diagrams/attacking-common-applications/gitlab.svg | 78L |
| -rw-r--r-- | public/diagrams/attacking-common-applications/iis.png | 4866B |
| -rw-r--r-- | public/diagrams/attacking-common-applications/jenkins.svg | 300L |
| -rw-r--r-- | public/diagrams/attacking-common-applications/joomla.svg | 20L |
| -rw-r--r-- | public/diagrams/attacking-common-applications/osticket.png | 4940B |
| -rw-r--r-- | public/diagrams/attacking-common-applications/prtg.svg | 72L |
| -rw-r--r-- | public/diagrams/attacking-common-applications/shellshock.svg | 1L |
| -rw-r--r-- | public/diagrams/attacking-common-applications/splunk.svg | 15L |
| -rw-r--r-- | public/diagrams/attacking-common-applications/tomcat.svg | 1L |
| -rw-r--r-- | public/diagrams/attacking-common-applications/wordpress.svg | 68L |
| -rw-r--r-- | public/diagrams/ligolo-ng/01-three-players.mmd | 7L |
| -rw-r--r-- | public/diagrams/ligolo-ng/01-three-players.png | 68551B |
| -rw-r--r-- | public/diagrams/ligolo-ng/02-four-bricks.mmd | 11L |
| -rw-r--r-- | public/diagrams/ligolo-ng/02-four-bricks.png | 173059B |
| -rw-r--r-- | public/diagrams/ligolo-ng/03-which-workflow.mmd | 8L |
| -rw-r--r-- | public/diagrams/ligolo-ng/03-which-workflow.png | 143277B |
| -rw-r--r-- | public/diagrams/ligolo-ng/04-workflow-a.mmd | 13L |
| -rw-r--r-- | public/diagrams/ligolo-ng/04-workflow-a.png | 167688B |
| -rw-r--r-- | public/diagrams/ligolo-ng/05-double-pivot.mmd | 14L |
| -rw-r--r-- | public/diagrams/ligolo-ng/05-double-pivot.png | 128683B |
| -rw-r--r-- | public/diagrams/ligolo-ng/06-listener-direction.mmd | 7L |
| -rw-r--r-- | public/diagrams/ligolo-ng/06-listener-direction.png | 65086B |
| -rw-r--r-- | public/diagrams/ligolo-ng/07-reverse-shell.mmd | 7L |
| -rw-r--r-- | public/diagrams/ligolo-ng/07-reverse-shell.png | 53535B |
| -rw-r--r-- | public/diagrams/ligolo-ng/08-troubleshooting.mmd | 13L |
| -rw-r--r-- | public/diagrams/ligolo-ng/08-troubleshooting.png | 242468B |
| -rw-r--r-- | public/diagrams/ligolo-ng/ligolo-dawn-diagrams.zip | 972221B |
| -rw-r--r-- | public/downloads/enumeration/SHA256SUMS | 1L |
| -rwxr-xr-x | public/downloads/enumeration/dorkforge.py | 1945L |
| -rw-r--r-- | public/downloads/enumeration/dorkforge.py.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/Certify.exe | 178688B |
| -rw-r--r-- | public/downloads/pentest-workflow/Certify.exe.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/Go365_linux_amd64.tar.gz | 2042508B |
| -rw-r--r-- | public/downloads/pentest-workflow/Go365_linux_amd64.tar.gz.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/GodPotato-NET35.exe | 57344B |
| -rw-r--r-- | public/downloads/pentest-workflow/GodPotato-NET35.exe.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/GodPotato-NET4.exe | 57344B |
| -rw-r--r-- | public/downloads/pentest-workflow/GodPotato-NET4.exe.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/Inveigh.ps1 | 7332L |
| -rw-r--r-- | public/downloads/pentest-workflow/Inveigh.ps1.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/JuicyPotato.exe | 347648B |
| -rw-r--r-- | public/downloads/pentest-workflow/JuicyPotato.exe.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/LaZagne.exe | 10136093B |
| -rw-r--r-- | public/downloads/pentest-workflow/LaZagne.exe.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/MSOLSpray.ps1 | 207L |
| -rw-r--r-- | public/downloads/pentest-workflow/MSOLSpray.ps1.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/PetitPotam.py | 461L |
| -rw-r--r-- | public/downloads/pentest-workflow/PetitPotam.py.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/PowerUp.ps1 | 4989L |
| -rw-r--r-- | public/downloads/pentest-workflow/PowerUp.ps1.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/PowerView.ps1 | 20914L |
| -rw-r--r-- | public/downloads/pentest-workflow/PowerView.ps1.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/PrintSpoofer64.exe | 27136B |
| -rw-r--r-- | public/downloads/pentest-workflow/PrintSpoofer64.exe.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/PrivescCheck.ps1 | 47L |
| -rw-r--r-- | public/downloads/pentest-workflow/PrivescCheck.ps1.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/Rubeus.exe | 474112B |
| -rw-r--r-- | public/downloads/pentest-workflow/Rubeus.exe.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/SHA256SUMS | 51L |
| -rw-r--r-- | public/downloads/pentest-workflow/Seatbelt.exe | 525312B |
| -rw-r--r-- | public/downloads/pentest-workflow/Seatbelt.exe.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/SharpDPAPI.exe | 155136B |
| -rw-r--r-- | public/downloads/pentest-workflow/SharpDPAPI.exe.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/SharpHound.zip | 2521104B |
| -rw-r--r-- | public/downloads/pentest-workflow/SharpHound.zip.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/SharpUp.exe | 39936B |
| -rw-r--r-- | public/downloads/pentest-workflow/SharpUp.exe.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/SharpView.exe | 734208B |
| -rw-r--r-- | public/downloads/pentest-workflow/SharpView.exe.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/SharpWMI.exe | 54784B |
| -rw-r--r-- | public/downloads/pentest-workflow/SharpWMI.exe.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/Snaffler.exe | 494592B |
| -rw-r--r-- | public/downloads/pentest-workflow/Snaffler.exe.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/StandIn_v13_Net35_45.zip | 108529B |
| -rw-r--r-- | public/downloads/pentest-workflow/StandIn_v13_Net35_45.zip.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/SweetPotato.exe | 926208B |
| -rw-r--r-- | public/downloads/pentest-workflow/SweetPotato.exe.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/Whisker.exe | 41984B |
| -rw-r--r-- | public/downloads/pentest-workflow/Whisker.exe.sha256 | 1L |
| -rwxr-xr-x | public/downloads/pentest-workflow/chisel.exe | 10958336B |
| -rw-r--r-- | public/downloads/pentest-workflow/chisel.exe.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/chisel_linux_amd64 | 10571938B |
| -rw-r--r-- | public/downloads/pentest-workflow/chisel_linux_amd64.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/donut_v1.1.zip | 337169B |
| -rw-r--r-- | public/downloads/pentest-workflow/donut_v1.1.zip.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/fscan_windows_x64.exe | 8774144B |
| -rw-r--r-- | public/downloads/pentest-workflow/fscan_windows_x64.exe.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/gowitness_linux_amd64 | 48738488B |
| -rw-r--r-- | public/downloads/pentest-workflow/gowitness_linux_amd64.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/gowitness_windows_amd64.exe | 48384000B |
| -rw-r--r-- | public/downloads/pentest-workflow/gowitness_windows_amd64.exe.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/jaws-enum.ps1 | 280L |
| -rw-r--r-- | public/downloads/pentest-workflow/jaws-enum.ps1.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/kerbrute_linux_amd64 | 8286607B |
| -rw-r--r-- | public/downloads/pentest-workflow/kerbrute_linux_amd64.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/kerbrute_windows_amd64.exe | 7996928B |
| -rw-r--r-- | public/downloads/pentest-workflow/kerbrute_windows_amd64.exe.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/ligolo-ng_agent_linux_amd64.tar.gz | 3009964B |
| -rw-r--r-- | public/downloads/pentest-workflow/ligolo-ng_agent_linux_amd64.tar.gz.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/ligolo-ng_agent_windows_amd64.zip | 3069095B |
| -rw-r--r-- | public/downloads/pentest-workflow/ligolo-ng_agent_windows_amd64.zip.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/linpeas.sh | 12930L |
| -rw-r--r-- | public/downloads/pentest-workflow/linpeas.sh.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/linpeas_linux_amd64 | 4091464B |
| -rw-r--r-- | public/downloads/pentest-workflow/linpeas_linux_amd64.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/mimikatz_trunk.zip | 1206166B |
| -rw-r--r-- | public/downloads/pentest-workflow/mimikatz_trunk.zip.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/nc64.exe | 45272B |
| -rw-r--r-- | public/downloads/pentest-workflow/nc64.exe.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/nishang-master.zip | 2417792B |
| -rw-r--r-- | public/downloads/pentest-workflow/nishang-master.zip.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/nt-webshell-rosepine.aspx | 249L |
| -rw-r--r-- | public/downloads/pentest-workflow/nt-webshell-rosepine.aspx.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/pspy32 | 2940928B |
| -rw-r--r-- | public/downloads/pentest-workflow/pspy32.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/pspy64 | 3104768B |
| -rw-r--r-- | public/downloads/pentest-workflow/pspy64.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/rp-shell.asp | 231L |
| -rw-r--r-- | public/downloads/pentest-workflow/rp-shell.asp.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/rp-shell.jsp | 230L |
| -rw-r--r-- | public/downloads/pentest-workflow/rp-shell.jsp.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/rp-shell.php | 216L |
| -rw-r--r-- | public/downloads/pentest-workflow/rp-shell.php.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/targetedKerberoast.py | 654L |
| -rw-r--r-- | public/downloads/pentest-workflow/targetedKerberoast.py.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/winPEASany.exe | 11216896B |
| -rw-r--r-- | public/downloads/pentest-workflow/winPEASany.exe.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/winPEASx64.exe | 11216384B |
| -rw-r--r-- | public/downloads/pentest-workflow/winPEASx64.exe.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/ysoserial-all.jar | 59525376B |
| -rw-r--r-- | public/downloads/pentest-workflow/ysoserial-all.jar.sha256 | 1L |
| -rw-r--r-- | public/downloads/pentest-workflow/ysoserial.net_v1.36.zip | 5303737B |
| -rw-r--r-- | public/downloads/pentest-workflow/ysoserial.net_v1.36.zip.sha256 | 1L |
| -rw-r--r-- | public/favicon.svg | 11L |
| -rw-r--r-- | public/og.svg | 30L |
| -rw-r--r-- | public/pdfs/jj-field-guide.pdf | 266418B |
| -rw-r--r-- | scripts/build-candidates.py | 88L |
| -rw-r--r-- | scripts/csp-hashes.mjs | 58L |
| -rw-r--r-- | scripts/fetch-fonts.py | 63L |
| -rwxr-xr-x | scripts/fetch-ired.py | 256L |
| -rwxr-xr-x | scripts/fetch-osint-catalogues.py | 335L |
| -rw-r--r-- | scripts/import-ligolo-sheet.py | 94L |
| -rw-r--r-- | scripts/import-powerview-powerup-sheet.py | 72L |
| -rw-r--r-- | scripts/port-missing.py | 88L |
| -rw-r--r-- | scripts/port-vault.py | 395L |
| -rw-r--r-- | scripts/stamp-subcategory.py | 96L |
| -rw-r--r-- | scripts/sync-hacktricks.py | 381L |
| -rw-r--r-- | scripts/sync-internal.py | 322L |
| -rwxr-xr-x | scripts/sync-mirrors.sh | 157L |
| -rw-r--r-- | scripts/sync-payloads.py | 315L |
| -rw-r--r-- | scripts/sync-pentest-workflow.py | 381L |
| -rw-r--r-- | scripts/validate-content.py | 88L |
| -rw-r--r-- | src/components/Callout.astro | 26L |
| -rw-r--r-- | src/components/CategoryNav.astro | 53L |
| -rw-r--r-- | src/components/DomainPlate.astro | 32L |
| -rw-r--r-- | src/components/Footer.astro | 59L |
| -rw-r--r-- | src/components/FuzzField.astro | 11L |
| -rw-r--r-- | src/components/HackTricksCredit.astro | 34L |
| -rw-r--r-- | src/components/Header.astro | 108L |
| -rw-r--r-- | src/components/HeroLoop.astro | 432L |
| -rw-r--r-- | src/components/Icon.astro | 31L |
| -rw-r--r-- | src/components/Marquee.astro | 46L |
| -rw-r--r-- | src/components/Operator.astro | 71L |
| -rw-r--r-- | src/components/PayloadCredit.astro | 59L |
| -rw-r--r-- | src/components/RecordRow.astro | 48L |
| -rw-r--r-- | src/components/SearchModal.astro | 613L |
| -rw-r--r-- | src/components/SectionBanner.astro | 70L |
| -rw-r--r-- | src/components/SectionHeader.astro | 26L |
| -rw-r--r-- | src/components/SheetCredit.astro | 101L |
| -rw-r--r-- | src/components/SheetReferences.astro | 121L |
| -rw-r--r-- | src/components/SignalField.astro | 31L |
| -rw-r--r-- | src/content.config.ts | 118L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/containers-namespaces/container-security/assessment-and-hardening.md | 169L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/containers-namespaces/container-security/authorization-plugins.md | 152L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/containers-namespaces/container-security/distroless.md | 263L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/containers-namespaces/container-security/image-security-and-secrets.md | 154L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/containers-namespaces/container-security/overview.md | 101L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/containers-namespaces/container-security/privileged-containers.md | 304L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/containers-namespaces/container-security/protections/apparmor.md | 274L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/containers-namespaces/container-security/protections/capabilities.md | 207L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/containers-namespaces/container-security/protections/cgroups.md | 290L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/containers-namespaces/container-security/protections/masked-paths.md | 115L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/containers-namespaces/container-security/protections/namespaces/cgroup-namespace.md | 151L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/containers-namespaces/container-security/protections/namespaces/ipc-namespace.md | 118L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/containers-namespaces/container-security/protections/namespaces/mount-namespace.md | 145L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/containers-namespaces/container-security/protections/namespaces/network-namespace.md | 189L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/containers-namespaces/container-security/protections/namespaces/overview.md | 129L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/containers-namespaces/container-security/protections/namespaces/pid-namespace.md | 172L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/containers-namespaces/container-security/protections/namespaces/time-namespace.md | 181L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/containers-namespaces/container-security/protections/namespaces/user-namespace.md | 151L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/containers-namespaces/container-security/protections/namespaces/uts-namespace.md | 96L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/containers-namespaces/container-security/protections/no-new-privileges.md | 164L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/containers-namespaces/container-security/protections/overview.md | 60L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/containers-namespaces/container-security/protections/read-only-paths.md | 181L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/containers-namespaces/container-security/protections/seccomp.md | 238L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/containers-namespaces/container-security/protections/selinux.md | 168L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/containers-namespaces/container-security/runtime-api-and-daemon-exposure.md | 237L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/containers-namespaces/container-security/runtimes-and-engines.md | 122L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/containers-namespaces/container-security/sensitive-host-mounts.md | 374L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/containers-namespaces/containerd-ctr-privilege-escalation.md | 65L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/containers-namespaces/runc-privilege-escalation.md | 56L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/interesting-files-permissions/ld-so-conf-example.md | 320L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/interesting-files-permissions/linux-capabilities.md | 1668L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/interesting-files-permissions/nfs-no-root-squash-misconfiguration-pe.md | 154L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/interesting-files-permissions/selinux.md | 280L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/interesting-files-permissions/suid-shared-library-and-linker-abuse.md | 196L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/interesting-files-permissions/wildcards-spare-tricks.md | 313L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/interesting-files-permissions/write-to-root.md | 431L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/linux-basics/bypass-linux-restrictions/bypass-fs-protections-read-only-no-exec-distroless/ddexec.md | 103L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/linux-basics/bypass-linux-restrictions/bypass-fs-protections-read-only-no-exec-distroless/overview.md | 137L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/linux-basics/bypass-linux-restrictions/overview.md | 390L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/linux-basics/linux-environment-variables.md | 356L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/linux-basics/linux-privilege-escalation/overview.md | 2328L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/linux-basics/useful-linux-commands.md | 377L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/main-system-information/escaping-from-limited-bash.md | 380L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/main-system-information/filesystem-inodes-and-recovery.md | 240L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/main-system-information/kernel-lpe-cves/copy-fail-af-alg-splice-page-cache-overwrite-cve-2026-31431.md | 136L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/main-system-information/kernel-lpe-cves/linux-ptrace-exit-race-pidfd-getfd-fd-theft.md | 102L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/main-system-information/kernel-lpe-cves/posix-cpu-timers-toctou-cve-2025-38352.md | 357L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/main-system-information/kernel-lpe-cves/vmware-tools-service-discovery-untrusted-search-path-cve-2025-41244.md | 161L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/main-system-information/kernel-modules-and-modprobe.md | 241L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/main-system-information/linux-privilege-escalation-checklist.md | 172L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/main-system-information/sudo-command-abuse.md | 116L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/network-information/cisco-vmanage.md | 293L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/network-information/local-network-and-socket-triage.md | 272L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/network-information/socket-command-injection.md | 97L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/post-exploitation/linux-post-exploitation/overview.md | 251L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/post-exploitation/linux-post-exploitation/trojanized-system-daemons-and-reverse-proxies.md | 82L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/processes-crontab-systemd-dbus/d-bus-enumeration-and-command-injection-privilege-escalation.md | 609L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/processes-crontab-systemd-dbus/payloads-to-execute.md | 177L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/software-information/android-rooting-frameworks-manager-auth-bypass-syscall-hook.md | 202L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/software-information/electron-cef-chromium-debugger-abuse.md | 237L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/software-information/freeipa-pentesting.md | 314L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/software-information/logstash.md | 203L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/software-information/pam-pluggable-authentication-modules.md | 232L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/software-information/splunk-lpe-and-persistence.md | 195L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/user-information/euid-ruid-suid.md | 227L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/user-information/interesting-groups-linux-pe/lxd-privilege-escalation.md | 113L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/user-information/interesting-groups-linux-pe/overview.md | 316L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/user-information/linux-active-directory.md | 240L |
| -rw-r--r-- | src/content/hacktricks/linux-hardening/user-information/ssh-forward-agent-exploitation.md | 55L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/abusing-android-media-pipelines-image-parsers.md | 158L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/accessibility-services-abuse.md | 358L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/adb-commands.md | 368L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/android-anti-instrumentation-and-ssl-pinning-bypass.md | 589L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/android-application-level-virtualization.md | 55L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/android-applications-basics.md | 789L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/android-enterprise-work-profile-bypass.md | 88L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/android-hce-nfc-emv-relay-attacks.md | 212L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/android-physical-attacks.md | 150L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/android-task-hijacking.md | 152L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/android-vpn-bypass.md | 68L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/apk-decompilers.md | 124L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/avd-android-virtual-device.md | 303L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/baseband-and-soc-isolation-exploitation.md | 96L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/bypass-biometric-authentication-android.md | 137L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/content-protocol.md | 172L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/drozer-tutorial/exploiting-content-providers.md | 429L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/drozer-tutorial/overview.md | 301L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/exploiting-a-debuggeable-applciation.md | 138L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/firmware-level-zygote-backdoor-libandroid-runtime.md | 133L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/flutter.md | 248L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/frida-tutorial/frida-tutorial-1.md | 186L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/frida-tutorial/frida-tutorial-2.md | 313L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/frida-tutorial/objection-tutorial.md | 358L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/frida-tutorial/overview.md | 534L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/frida-tutorial/owaspuncrackable-1.md | 182L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/google-ctf-2018-shall-we-play-a-game.md | 83L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/in-memory-jni-shellcode-execution.md | 141L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/inputmethodservice-ime-abuse.md | 99L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/insecure-in-app-update-rce.md | 316L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/install-burp-certificate.md | 233L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/intent-injection.md | 516L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/make-apk-accept-ca-certificate.md | 71L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/manual-deobfuscation.md | 258L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/overview.md | 999L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/play-integrity-attestation-bypass.md | 149L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/react-native-application.md | 302L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/reversing-native-libraries.md | 336L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/shizuku-privileged-api.md | 282L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/smali-changes.md | 352L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/spoofing-your-location-in-play-store.md | 91L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/tapjacking.md | 155L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-app-pentesting/webview-attacks.md | 585L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/android-checklist.md | 97L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/cordova-apps.md | 151L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/ios-pentesting-checklist.md | 128L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/ios-pentesting/air-keyboard-remote-input-injection.md | 244L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/ios-pentesting/basic-ios-testing-operations.md | 294L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/ios-pentesting/burp-configuration-for-ios.md | 230L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/ios-pentesting/extracting-entitlements-from-compiled-application.md | 67L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/ios-pentesting/frida-configuration-in-ios.md | 1662L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/ios-pentesting/ios-app-extensions.md | 63L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/ios-pentesting/ios-basics.md | 225L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/ios-pentesting/ios-custom-uri-handlers-deeplinks-custom-schemes.md | 252L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/ios-pentesting/ios-hooking-with-objection.md | 275L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/ios-pentesting/ios-pentesting-without-jailbreak.md | 317L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/ios-pentesting/ios-protocol-handlers.md | 176L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/ios-pentesting/ios-serialisation-and-encoding.md | 89L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/ios-pentesting/ios-testing-environment.md | 194L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/ios-pentesting/ios-uiactivity-sharing.md | 68L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/ios-pentesting/ios-uipasteboard.md | 122L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/ios-pentesting/ios-universal-links.md | 189L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/ios-pentesting/ios-webviews.md | 461L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/ios-pentesting/itunesstored-bookassetd-sandbox-escape.md | 190L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/ios-pentesting/overview.md | 1212L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/ios-pentesting/zero-click-messaging-image-parser-chains.md | 164L |
| -rw-r--r-- | src/content/hacktricks/mobile-pentesting/xamarin-apps.md | 232L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/10000-network-data-management-protocol-ndmp.md | 43L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/1026-pentesting-rusersd.md | 87L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/1080-pentesting-socks.md | 106L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/1099-pentesting-java-rmi.md | 329L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/11211-memcache/memcache-commands.md | 144L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/11211-memcache/overview.md | 211L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/113-pentesting-ident.md | 110L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/12346-udp-pentesting-cisco-sd-wan-control-plane.md | 101L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/135-pentesting-msrpc.md | 277L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/137-138-139-pentesting-netbios.md | 98L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/1414-pentesting-ibmmq.md | 631L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/1521-1522-1529-pentesting-oracle-listener.md | 74L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/15672-pentesting-rabbitmq-management.md | 86L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/1723-pentesting-pptp.md | 188L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/1883-pentesting-mqtt-mosquitto.md | 344L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/2375-pentesting-docker.md | 387L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/24007-24008-24009-49152-pentesting-glusterfs.md | 157L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/27017-27018-mongodb.md | 195L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/3128-pentesting-squid.md | 153L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/32100-udp-pentesting-pppp-cs2-p2p-cameras.md | 179L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/3260-pentesting-iscsi.md | 212L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/3299-pentesting-saprouter.md | 153L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/3632-pentesting-distcc.md | 94L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/3690-pentesting-subversion-svn-server.md | 104L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/3702-udp-pentesting-ws-discovery.md | 154L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/4222-pentesting-nats.md | 115L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/43-pentesting-whois.md | 172L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/4369-pentesting-erlang-port-mapper-daemon-epmd.md | 116L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/44134-pentesting-tiller-helm.md | 89L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/44818-ethernetip.md | 111L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/47808-udp-bacnet.md | 73L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/4786-cisco-smart-install.md | 55L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/4840-pentesting-opc-ua.md | 161L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/49-pentesting-tacacs.md | 102L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/5000-pentesting-docker-registry.md | 320L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/50030-50060-50070-50075-50090-pentesting-hadoop.md | 100L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/512-pentesting-rexec.md | 175L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/515-pentesting-line-printer-daemon-lpd.md | 61L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/5353-udp-multicast-dns-mdns.md | 182L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/5439-pentesting-redshift.md | 94L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/554-8554-pentesting-rtsp.md | 111L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/5555-android-debug-bridge.md | 163L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/5601-pentesting-kibana.md | 51L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/5671-5672-pentesting-amqp.md | 261L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/584-pentesting-afp.md | 169L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/5984-pentesting-couchdb.md | 273L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/5985-5986-pentesting-omi.md | 56L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/5985-5986-pentesting-winrm.md | 381L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/6000-pentesting-x11.md | 241L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/623-udp-ipmi.md | 148L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/6379-pentesting-redis.md | 495L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/69-udp-tftp.md | 111L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/7-tcp-udp-pentesting-echo.md | 46L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/700-pentesting-epp.md | 367L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/8009-pentesting-apache-jserv-protocol-ajp.md | 176L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/8086-pentesting-influxdb.md | 235L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/8089-splunkd.md | 137L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/8333-18333-38333-18444-pentesting-bitcoin.md | 69L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/873-pentesting-rsync.md | 112L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/9000-pentesting-fastcgi.md | 111L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/9001-pentesting-hsqldb.md | 97L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/9100-pjl.md | 113L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/9200-pentesting-elasticsearch.md | 263L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/cassandra.md | 87L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/ipsec-ike-vpn-pentesting.md | 393L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/nfs-service-pentesting.md | 213L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-264-check-point-firewall-1.md | 222L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-631-internet-printing-protocol-ipp.md | 149L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-compaq-hp-insight-manager.md | 39L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-dns.md | 409L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-finger.md | 184L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-ftp/ftp-bounce-attack.md | 120L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-ftp/ftp-bounce-download-2oftp-file.md | 109L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-ftp/overview.md | 364L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-imap.md | 216L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-irc.md | 102L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-iso-8583-payment-sockets.md | 159L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-jdwp-java-debug-wire-protocol.md | 72L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-kerberos-88/harvesting-tickets-from-linux.md | 121L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-kerberos-88/harvesting-tickets-from-windows.md | 108L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-kerberos-88/overview.md | 131L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-ldap.md | 510L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-modbus.md | 196L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-mssql-microsoft-sql-server/overview.md | 970L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-mssql-microsoft-sql-server/types-of-mssql-users.md | 126L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-mysql.md | 807L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-ntp.md | 251L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-pop.md | 146L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-postgresql.md | 1068L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-rdp.md | 215L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-remote-gdbserver.md | 197L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-rlogin.md | 54L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-rpcbind.md | 190L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-rsh.md | 36L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-sap.md | 415L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-smb/ksmbd-attack-surface-and-fuzzing-syzkaller.md | 332L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-smb/overview.md | 785L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-smb/rpcclient-enumeration.md | 174L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-smtp/overview.md | 782L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-smtp/smtp-commands.md | 48L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-smtp/smtp-smuggling.md | 147L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-snmp/cisco-snmp.md | 153L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-snmp/overview.md | 291L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-snmp/snmp-rce.md | 150L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-ssh.md | 453L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-telnet.md | 197L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-veeam-backup-and-replication.md | 130L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-vnc.md | 72L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-voip/basic-voip-protocols/overview.md | 114L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-voip/basic-voip-protocols/sip-session-initiation-protocol.md | 364L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-voip/overview.md | 708L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/403-and-401-bypasses.md | 133L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/aem-adobe-experience-cloud.md | 145L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/angular.md | 625L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/apache.md | 496L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/artifactory-hacking-guide.md | 131L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/bolt-cms.md | 74L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/buckets/firebase-database.md | 24L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/buckets/overview.md | 19L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/cgi.md | 240L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/code-review-tools.md | 585L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/custom-protocols.md | 122L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/django.md | 174L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/dotnet-soap-wsdl-client-exploitation.md | 116L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/dotnetnuke-dnn.md | 151L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/drupal/drupal-rce.md | 300L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/drupal/overview.md | 118L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/electron-desktop-apps/electron-contextisolation-rce-via-electron-internal-code.md | 77L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/electron-desktop-apps/electron-contextisolation-rce-via-ipc.md | 123L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/electron-desktop-apps/electron-contextisolation-rce-via-preload-code.md | 103L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/electron-desktop-apps/overview.md | 736L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/flask.md | 114L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/fortinet-fortiweb.md | 200L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/geonetwork.md | 108L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/git.md | 153L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/golang.md | 34L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/grafana.md | 140L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/graphql.md | 825L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/h2-java-sql-database.md | 86L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/iis-internet-information-services.md | 710L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/imagemagick-security.md | 151L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/ispconfig.md | 146L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/jboss.md | 37L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/jira.md | 181L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/joomla.md | 139L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/jsp.md | 32L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/laravel.md | 341L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/meshcentral.md | 123L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/microsoft-sharepoint.md | 265L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/moodle.md | 238L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/nextjs.md | 1485L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/nginx.md | 590L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/nodejs-express.md | 197L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/overview.md | 448L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/perl-tricks.md | 80L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/php-tricks-esp/overview.md | 559L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/php-tricks-esp/php-rce-abusing-object-creation-new-usd-get-a-usd-get-b.md | 202L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/php-tricks-esp/php-ssrf.md | 83L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable-functions-open-basedir-bypass/disable-functions-bypass-dl-function.md | 142L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable-functions-open-basedir-bypass/disable-functions-bypass-imagick-less-than-3-3-0-php-greater-than-5-4-exploit.md | 130L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable-functions-open-basedir-bypass/disable-functions-bypass-mod-cgi.md | 59L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable-functions-open-basedir-bypass/disable-functions-bypass-php-4-greater-than-4-2-0-php-5-pcntl-exec.md | 48L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable-functions-open-basedir-bypass/disable-functions-bypass-php-5-2-3-win32std-ext-protections-bypass.md | 134L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable-functions-open-basedir-bypass/disable-functions-bypass-php-5-2-4-and-5-2-5-php-curl.md | 88L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable-functions-open-basedir-bypass/disable-functions-bypass-php-5-2-fopen-exploit.md | 24L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable-functions-open-basedir-bypass/disable-functions-bypass-php-7-0-7-4-nix-only.md | 242L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable-functions-open-basedir-bypass/disable-functions-bypass-php-fpm-fastcgi.md | 473L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable-functions-open-basedir-bypass/disable-functions-bypass-php-less-than-5-2-9-on-windows.md | 102L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable-functions-open-basedir-bypass/disable-functions-bypass-php-perl-extension-safe-mode-bypass-exploit.md | 154L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable-functions-open-basedir-bypass/disable-functions-bypass-php-safe-mode-bypass-via-proc-open-and-custom-environment-exploit.md | 53L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable-functions-open-basedir-bypass/disable-functions-bypass-via-mem.md | 170L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable-functions-open-basedir-bypass/disable-functions-php-5-2-4-ioncube-extension-exploit.md | 51L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable-functions-open-basedir-bypass/disable-functions-php-5-x-shellshock-exploit.md | 48L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable-functions-open-basedir-bypass/overview.md | 831L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/prestashop.md | 48L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/proxmox-ve.md | 100L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/put-method-webdav.md | 215L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/python.md | 35L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/rocket-chat.md | 51L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/roundcube.md | 125L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/ruby-tricks.md | 361L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/servicenow.md | 134L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/sitecore/overview.md | 227L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/special-http-headers.md | 359L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/spring-actuators.md | 152L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/symphony.md | 174L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/telerik-ui-aspnet-ajax-unsafe-reflection-webresource-axd.md | 262L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/tomcat/overview.md | 278L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/traefik.md | 82L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/uncovering-cloudflare.md | 201L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/vmware-esx-vcenter.md | 107L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/vuejs.md | 198L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/web-api-pentesting.md | 171L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/werkzeug.md | 180L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/wordpress.md | 1061L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/wsgi.md | 216L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/zabbix.md | 180L |
| -rw-r--r-- | src/content/hacktricks/network-services-pentesting/pentesting-web/zoneminder-motioneye-motion.md | 202L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/2fa-bypass.md | 141L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/abusing-hop-by-hop-headers.md | 55L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/account-takeover.md | 261L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/browser-extension-pentesting-methodology/browext-clickjacking.md | 226L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/browser-extension-pentesting-methodology/browext-permissions-and-host-permissions.md | 248L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/browser-extension-pentesting-methodology/browext-xss-example.md | 133L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/browser-extension-pentesting-methodology/forced-extension-load-preferences-mac-forgery-windows.md | 232L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/browser-extension-pentesting-methodology/overview.md | 871L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/bypass-payment-process.md | 73L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/cache-deception/cache-poisoning-to-dos.md | 190L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/cache-deception/cache-poisoning-via-url-discrepancies.md | 64L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/cache-deception/overview.md | 540L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/captcha-bypass.md | 51L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/clickjacking.md | 341L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/client-side-path-traversal.md | 120L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/client-side-template-injection-csti.md | 161L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/command-injection.md | 294L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/content-security-policy-csp-bypass/csp-bypass-self-unsafe-inline-with-iframes.md | 81L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/content-security-policy-csp-bypass/overview.md | 936L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/cors-bypass.md | 515L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/crlf-0d-0a.md | 307L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/csrf-cross-site-request-forgery.md | 918L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/dangling-markup-html-scriptless-injection/overview.md | 273L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/dangling-markup-html-scriptless-injection/ss-leaks.md | 19L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/dapps-decentralizedapplications.md | 151L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/dependency-confusion.md | 429L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/deserialization/basic-java-deserialization-objectinputstream-readobject.md | 185L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/deserialization/basic-net-deserialization-objectdataprovider-gadgets-expandedwrapper-and-json-net.md | 366L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/deserialization/exploiting-viewstate-knowing-the-secret.md | 165L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/deserialization/exploiting-viewstate-parameter.md | 310L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/deserialization/java-dns-deserialization-and-gadgetprobe.md | 245L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/deserialization/java-jsf-viewstate-faces-deserialization.md | 22L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/deserialization/java-signedobject-gated-deserialization.md | 160L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/deserialization/java-transformers-to-rutime-exec-payload.md | 241L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/deserialization/jndi-java-naming-and-directory-interface-and-log4shell.md | 473L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/deserialization/livewire-hydration-synthesizer-abuse.md | 202L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/deserialization/nodejs-proto-prototype-pollution/client-side-prototype-pollution.md | 193L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/deserialization/nodejs-proto-prototype-pollution/express-prototype-pollution-gadgets.md | 136L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/deserialization/nodejs-proto-prototype-pollution/overview.md | 409L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/deserialization/nodejs-proto-prototype-pollution/prototype-pollution-to-rce.md | 805L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/deserialization/overview.md | 1292L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/deserialization/php-deserialization-autoload-classes.md | 162L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/deserialization/python-yaml-deserialization.md | 219L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/deserialization/ruby-class-pollution.md | 488L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/deserialization/ruby-json-pollution.md | 30L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/domain-subdomain-takeover.md | 156L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/email-injections.md | 216L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/file-inclusion/lfi2rce-via-compress-zlib-php-stream-prefer-studio-path-disclosure.md | 96L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/file-inclusion/lfi2rce-via-eternal-waiting.md | 118L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/file-inclusion/lfi2rce-via-nginx-temp-files.md | 97L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/file-inclusion/lfi2rce-via-php-filters.md | 289L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/file-inclusion/lfi2rce-via-phpinfo.md | 237L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/file-inclusion/lfi2rce-via-segmentation-fault.md | 68L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/file-inclusion/lfi2rce-via-temp-file-uploads.md | 49L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/file-inclusion/overview.md | 846L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/file-inclusion/phar-deserialization.md | 83L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/file-inclusion/via-php-session-upload-progress.md | 54L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/file-upload/overview.md | 715L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/file-upload/pdf-upload-xxe-and-cors-bypass.md | 19L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/formula-csv-doc-latex-ghostscript-injection.md | 210L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/grpc-web-pentest.md | 259L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/h2c-smuggling.md | 102L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/hacking-jwt-json-web-tokens.md | 437L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/hacking-with-cookies/cookie-bomb.md | 24L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/hacking-with-cookies/cookie-jar-overflow.md | 66L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/hacking-with-cookies/cookie-tossing.md | 81L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/hacking-with-cookies/overview.md | 499L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/http-connection-contamination.md | 42L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/http-connection-request-smuggling.md | 151L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/http-request-smuggling/browser-http-request-smuggling.md | 29L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/http-request-smuggling/overview.md | 1139L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/http-request-smuggling/request-smuggling-in-http-2-downgrades.md | 171L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/http-response-smuggling-desync.md | 197L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/idor.md | 226L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/iframe-traps.md | 121L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/json-xml-yaml-hacking.md | 238L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/ldap-injection.md | 224L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/login-bypass/overview.md | 132L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/login-bypass/sql-login-bypass.md | 830L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/mass-assignment-cwe-915.md | 268L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/nosql-injection.md | 360L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/oauth-to-account-takeover.md | 490L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/open-redirect.md | 337L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/orm-injection.md | 503L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/parameter-pollution.md | 266L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/phone-number-injections.md | 30L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/pocs-and-polygloths-cheatsheet/overview.md | 259L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/pocs-and-polygloths-cheatsheet/web-vulns-list.md | 212L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/postmessage-vulnerabilities/blocking-main-page-to-steal-postmessage.md | 127L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/postmessage-vulnerabilities/bypassing-sop-with-iframes-1.md | 90L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/postmessage-vulnerabilities/bypassing-sop-with-iframes-2.md | 141L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/postmessage-vulnerabilities/overview.md | 375L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/postmessage-vulnerabilities/steal-postmessage-modifying-iframe-location.md | 54L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/proxy-waf-protections-bypass.md | 375L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/race-condition.md | 532L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/rate-limit-bypass.md | 176L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/registration-vulnerabilities.md | 359L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/regular-expression-denial-of-service-redos.md | 142L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/reset-password.md | 401L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/reverse-tab-nabbing.md | 94L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/rsql-injection.md | 629L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/saml-attacks/overview.md | 564L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/saml-attacks/saml-basics.md | 181L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/server-side-inclusion-edge-side-inclusion-injection.md | 255L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/soap-jax-ws-threadlocal-auth-bypass.md | 92L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/sql-injection/cypher-injection-neo4j.md | 22L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/sql-injection/ms-access-sql-injection.md | 252L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/sql-injection/mssql-injection.md | 331L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/sql-injection/mysql-injection/mysql-ssrf.md | 67L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/sql-injection/mysql-injection/overview.md | 286L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/sql-injection/oracle-injection.md | 263L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/sql-injection/overview.md | 753L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/sql-injection/postgresql-injection/big-binary-files-upload-postgresql.md | 193L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/sql-injection/postgresql-injection/dblink-lo-import-data-exfiltration.md | 21L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/sql-injection/postgresql-injection/network-privesc-port-scanner-and-ntlm-chanllenge-response-disclosure.md | 130L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/sql-injection/postgresql-injection/overview.md | 103L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/sql-injection/postgresql-injection/pl-pgsql-password-bruteforce.md | 135L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/sql-injection/postgresql-injection/rce-with-postgresql-extensions.md | 364L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/sql-injection/postgresql-injection/rce-with-postgresql-languages.md | 303L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/sql-injection/sqlmap.md | 242L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/sql-injection/sqlmap/overview.md | 266L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/sql-injection/sqlmap/second-order-injection-sqlmap.md | 177L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf.md | 1072L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/ssrf-server-side-request-forgery/overview.md | 543L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/ssrf-server-side-request-forgery/ssrf-vulnerable-platforms.md | 222L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/ssrf-server-side-request-forgery/url-format-bypass.md | 312L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/ssti-server-side-template-injection/el-expression-language.md | 262L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/ssti-server-side-template-injection/jinja2-ssti.md | 395L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/ssti-server-side-template-injection/overview.md | 1192L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/timing-attacks.md | 104L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/unicode-injection/overview.md | 196L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/unicode-injection/unicode-normalization.md | 191L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/uuid-insecurities.md | 76L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/web-tool-wfuzz.md | 273L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/web-vulnerabilities-methodology.md | 310L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/websocket-attacks.md | 499L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xpath-injection.md | 301L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xs-search/connection-pool-by-destination-example.md | 147L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xs-search/connection-pool-example.md | 557L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xs-search/cookie-bomb-onerror-xs-leak.md | 201L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xs-search/css-injection/css-injection-code.md | 255L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xs-search/css-injection/less-code-injection.md | 75L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xs-search/css-injection/overview.md | 922L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xs-search/event-loop-blocking-lazy-images.md | 212L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xs-search/javascript-execution-xs-leak.md | 252L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xs-search/overview.md | 1041L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xs-search/performance-now-example.md | 112L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xs-search/performance-now-force-heavy-task.md | 189L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xs-search/url-max-length-client-side.md | 124L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xslt-server-side-injection-extensible-stylesheet-language-transformations.md | 557L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xss-cross-site-scripting/abusing-service-workers.md | 126L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xss-cross-site-scripting/chrome-cache-to-xss.md | 85L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xss-cross-site-scripting/debugging-client-side-js.md | 42L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xss-cross-site-scripting/dom-clobbering.md | 314L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xss-cross-site-scripting/dom-invader.md | 146L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xss-cross-site-scripting/dom-xss.md | 402L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xss-cross-site-scripting/iframes-in-xss-and-csp.md | 316L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xss-cross-site-scripting/integer-overflow.md | 251L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xss-cross-site-scripting/js-hoisting.md | 198L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xss-cross-site-scripting/other-js-tricks.md | 546L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xss-cross-site-scripting/overview.md | 2040L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xss-cross-site-scripting/pdf-injection.md | 202L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xss-cross-site-scripting/server-side-xss-dynamic-pdf.md | 215L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xss-cross-site-scripting/shadow-dom.md | 133L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xss-cross-site-scripting/sniff-leak.md | 26L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xss-cross-site-scripting/some-same-origin-method-execution.md | 54L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xss-cross-site-scripting/steal-info-js.md | 228L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xss-cross-site-scripting/wasm-linear-memory-template-overwrite-xss.md | 145L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xss-cross-site-scripting/xss-in-markdown.md | 218L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xssi-cross-site-script-inclusion.md | 114L |
| -rw-r--r-- | src/content/hacktricks/pentesting-web/xxe-xee-xml-external-entity.md | 925L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/abusing-ad-mssql.md | 336L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/acl-persistence-abuse/badsuccessor.md | 116L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/acl-persistence-abuse/overview.md | 462L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/acl-persistence-abuse/shadow-credentials.md | 75L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/ad-certificates.md | 204L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/ad-certificates/account-persistence.md | 222L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/ad-certificates/certificate-theft.md | 130L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/ad-certificates/domain-escalation.md | 1156L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/ad-certificates/domain-persistence.md | 160L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/ad-certificates/overview.md | 155L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/ad-dns-records.md | 132L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/ad-dynamic-objects-anti-forensics.md | 91L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/ad-information-in-printers.md | 126L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/adws-enumeration.md | 242L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/asreproast.md | 127L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/badsuccessor-dmsa-migration-abuse.md | 117L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/bloodhound.md | 187L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/constrained-delegation.md | 200L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/custom-ssp.md | 64L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/dcshadow.md | 117L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/dcsync.md | 146L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/diamond-ticket.md | 115L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/dsrm-credentials.md | 55L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/external-forest-domain-one-way-outbound.md | 152L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/external-forest-domain-oneway-inbound.md | 167L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/golden-dmsa-gmsa.md | 135L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/golden-ticket.md | 113L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/kerberoast.md | 307L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/kerberos-authentication.md | 92L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/kerberos-double-hop-problem.md | 142L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/lansweeper-security.md | 181L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/laps.md | 323L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/ldap-signing-and-channel-binding.md | 72L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/over-pass-the-hash-pass-the-key.md | 115L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/overview.md | 1016L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/pass-the-ticket.md | 67L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/password-spraying.md | 340L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/printers-spooler-service-abuse.md | 278L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/printnightmare.md | 162L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/privileged-groups-and-token-privileges.md | 393L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/rdp-sessions-abuse.md | 173L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/resource-based-constrained-delegation.md | 400L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/sccm-management-point-relay-sql-policy-secrets.md | 178L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/security-descriptors.md | 66L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/sid-history-injection.md | 166L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/silver-ticket.md | 226L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/skeleton-key.md | 67L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/timeroasting.md | 69L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/active-directory-methodology/unconstrained-delegation.md | 219L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/authentication-credentials-uac-and-efs.md | 294L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/authentication-credentials-uac-and-efs/overview.md | 322L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/authentication-credentials-uac-and-efs/uac-user-account-control.md | 409L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/av-bypass.md | 1433L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/basic-cmd-for-pentesters.md | 525L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/basic-powershell-for-pentesters/overview.md | 484L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/basic-powershell-for-pentesters/powerview.md | 347L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/checklist-windows-privilege-escalation.md | 133L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/cobalt-strike.md | 442L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/lateral-movement/atexec.md | 85L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/lateral-movement/dcomexec.md | 258L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/lateral-movement/overview.md | 33L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/lateral-movement/psexec-and-winexec.md | 172L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/lateral-movement/rdpexec.md | 25L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/lateral-movement/scmexec.md | 34L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/lateral-movement/winrm.md | 253L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/lateral-movement/wmiexec.md | 159L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/mythic.md | 346L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/ntlm/overview.md | 361L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/ntlm/places-to-steal-ntlm-creds.md | 236L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/protocol-handler-shell-execute-abuse.md | 57L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/stealing-credentials/credentials-mimikatz.md | 253L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/stealing-credentials/credentials-protections.md | 226L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/stealing-credentials/overview.md | 519L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/stealing-credentials/wts-impersonator.md | 65L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/abusing-auto-updaters-and-ipc.md | 386L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/access-tokens.md | 148L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/acls-dacls-sacls-aces.md | 159L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/appenddata-addsubdirectory-permission-over-service-registry.md | 127L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/arbitrary-kernel-rw-token-theft.md | 133L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/com-hijacking.md | 194L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/create-msi-with-wix.md | 85L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/dll-hijacking/advanced-html-staged-dll-sideloading.md | 138L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/dll-hijacking/overview.md | 771L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/dll-hijacking/windows-cpython-build-landmark-sys-path-hijacking.md | 110L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/dll-hijacking/writable-sys-path-dll-hijacking-privesc.md | 125L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/dpapi-extracting-passwords.md | 509L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/from-high-integrity-to-system-with-name-pipes.md | 165L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/integrity-levels.md | 118L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/juicypotato.md | 169L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/kernel-race-condition-object-manager-slowdown.md | 231L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/leaked-handle-exploitation.md | 700L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/local-ntlm-reflection-via-smb-arbitrary-port.md | 115L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/msi-wrapper.md | 38L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/named-pipe-client-impersonation.md | 193L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/notepad-plus-plus-plugin-autoload-persistence.md | 115L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/overview.md | 2150L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/privilege-escalation-abusing-tokens.md | 233L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/privilege-escalation-with-autorun-binaries.md | 381L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/roguepotato-and-printspoofer.md | 255L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/secure-desktop-accessibility-registry-propagation-regpwn.md | 89L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/sedebug-seimpersonate-copy-token.md | 293L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/seimpersonate-from-high-to-system.md | 265L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/semanagevolume-perform-volume-maintenance-tasks.md | 100L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/service-triggers.md | 180L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/telephony-tapsrv-arbitrary-dword-write-to-rce.md | 58L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/uiaccess-admin-protection-bypass.md | 75L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/windows-c-payloads.md | 343L |
| -rw-r--r-- | src/content/hacktricks/windows-hardening/windows-local-privilege-escalation/windows-registry-hive-exploitation.md | 135L |
| -rw-r--r-- | src/content/internal/active-directory/ad-adcs-certificate-services.md | 251L |
| -rw-r--r-- | src/content/internal/active-directory/ad-adcs-esc.md | 27L |
| -rw-r--r-- | src/content/internal/active-directory/ad-adcs-esc01.md | 63L |
| -rw-r--r-- | src/content/internal/active-directory/ad-adcs-esc02.md | 31L |
| -rw-r--r-- | src/content/internal/active-directory/ad-adcs-esc03.md | 30L |
| -rw-r--r-- | src/content/internal/active-directory/ad-adcs-esc04.md | 51L |
| -rw-r--r-- | src/content/internal/active-directory/ad-adcs-esc05.md | 53L |
| -rw-r--r-- | src/content/internal/active-directory/ad-adcs-esc06.md | 37L |
| -rw-r--r-- | src/content/internal/active-directory/ad-adcs-esc07.md | 86L |
| -rw-r--r-- | src/content/internal/active-directory/ad-adcs-esc08.md | 144L |
| -rw-r--r-- | src/content/internal/active-directory/ad-adcs-esc09.md | 62L |
| -rw-r--r-- | src/content/internal/active-directory/ad-adcs-esc10.md | 64L |
| -rw-r--r-- | src/content/internal/active-directory/ad-adcs-esc11.md | 63L |
| -rw-r--r-- | src/content/internal/active-directory/ad-adcs-esc12.md | 71L |
| -rw-r--r-- | src/content/internal/active-directory/ad-adcs-esc13.md | 86L |
| -rw-r--r-- | src/content/internal/active-directory/ad-adcs-esc14.md | 74L |
| -rw-r--r-- | src/content/internal/active-directory/ad-adcs-esc15.md | 63L |
| -rw-r--r-- | src/content/internal/active-directory/ad-adcs-golden-certificate.md | 104L |
| -rw-r--r-- | src/content/internal/active-directory/ad-adds-acl-ace.md | 378L |
| -rw-r--r-- | src/content/internal/active-directory/ad-adds-enumerate.md | 436L |
| -rw-r--r-- | src/content/internal/active-directory/ad-adds-group-policy-objects.md | 173L |
| -rw-r--r-- | src/content/internal/active-directory/ad-adds-groups.md | 185L |
| -rw-r--r-- | src/content/internal/active-directory/ad-adds-linux.md | 241L |
| -rw-r--r-- | src/content/internal/active-directory/ad-adds-machineaccountquota.md | 56L |
| -rw-r--r-- | src/content/internal/active-directory/ad-adds-ntds-dumping.md | 204L |
| -rw-r--r-- | src/content/internal/active-directory/ad-adds-recycle-bin.md | 92L |
| -rw-r--r-- | src/content/internal/active-directory/ad-adds-rodc.md | 78L |
| -rw-r--r-- | src/content/internal/active-directory/ad-adfs-federation-services.md | 143L |
| -rw-r--r-- | src/content/internal/active-directory/ad-integrated-dns.md | 90L |
| -rw-r--r-- | src/content/internal/active-directory/ad-roasting-asrep.md | 144L |
| -rw-r--r-- | src/content/internal/active-directory/ad-roasting-kerberoasting.md | 114L |
| -rw-r--r-- | src/content/internal/active-directory/ad-roasting-timeroasting.md | 26L |
| -rw-r--r-- | src/content/internal/active-directory/ad-tricks.md | 48L |
| -rw-r--r-- | src/content/internal/active-directory/cve/ms14-068.md | 93L |
| -rw-r--r-- | src/content/internal/active-directory/cve/nopac.md | 174L |
| -rw-r--r-- | src/content/internal/active-directory/cve/printnightmare.md | 122L |
| -rw-r--r-- | src/content/internal/active-directory/cve/privexchange.md | 69L |
| -rw-r--r-- | src/content/internal/active-directory/cve/resetnightmare.md | 65L |
| -rw-r--r-- | src/content/internal/active-directory/cve/zerologon.md | 121L |
| -rw-r--r-- | src/content/internal/active-directory/deployment-mdt.md | 51L |
| -rw-r--r-- | src/content/internal/active-directory/deployment-sccm.md | 393L |
| -rw-r--r-- | src/content/internal/active-directory/deployment-scom.md | 72L |
| -rw-r--r-- | src/content/internal/active-directory/deployment-wsus.md | 24L |
| -rw-r--r-- | src/content/internal/active-directory/hash-capture.md | 176L |
| -rw-r--r-- | src/content/internal/active-directory/hash-over-pass-the-hash.md | 36L |
| -rw-r--r-- | src/content/internal/active-directory/hash-pass-the-hash.md | 59L |
| -rw-r--r-- | src/content/internal/active-directory/hash-pass-the-key.md | 68L |
| -rw-r--r-- | src/content/internal/active-directory/index.md | 88L |
| -rw-r--r-- | src/content/internal/active-directory/internal-dcom.md | 128L |
| -rw-r--r-- | src/content/internal/active-directory/internal-pxe-boot-image.md | 64L |
| -rw-r--r-- | src/content/internal/active-directory/internal-relay-coerce.md | 161L |
| -rw-r--r-- | src/content/internal/active-directory/internal-relay-kerberos.md | 124L |
| -rw-r--r-- | src/content/internal/active-directory/internal-relay-ntlm.md | 462L |
| -rw-r--r-- | src/content/internal/active-directory/internal-shares.md | 190L |
| -rw-r--r-- | src/content/internal/active-directory/kerberos-bronze-bit.md | 79L |
| -rw-r--r-- | src/content/internal/active-directory/kerberos-delegation-constrained.md | 88L |
| -rw-r--r-- | src/content/internal/active-directory/kerberos-delegation-rbcd.md | 110L |
| -rw-r--r-- | src/content/internal/active-directory/kerberos-delegation-unconstrained.md | 141L |
| -rw-r--r-- | src/content/internal/active-directory/kerberos-s4u.md | 49L |
| -rw-r--r-- | src/content/internal/active-directory/kerberos-tickets.md | 205L |
| -rw-r--r-- | src/content/internal/active-directory/pwd-comments.md | 47L |
| -rw-r--r-- | src/content/internal/active-directory/pwd-dsrm-credentials.md | 28L |
| -rw-r--r-- | src/content/internal/active-directory/pwd-group-policy-preferences.md | 68L |
| -rw-r--r-- | src/content/internal/active-directory/pwd-precreated-computer.md | 49L |
| -rw-r--r-- | src/content/internal/active-directory/pwd-read-dmsa.md | 121L |
| -rw-r--r-- | src/content/internal/active-directory/pwd-read-gmsa.md | 103L |
| -rw-r--r-- | src/content/internal/active-directory/pwd-read-laps.md | 110L |
| -rw-r--r-- | src/content/internal/active-directory/pwd-shadow-credentials.md | 128L |
| -rw-r--r-- | src/content/internal/active-directory/pwd-spraying.md | 103L |
| -rw-r--r-- | src/content/internal/active-directory/trust-pam.md | 67L |
| -rw-r--r-- | src/content/internal/active-directory/trust-relationship.md | 61L |
| -rw-r--r-- | src/content/internal/active-directory/trust-sid-hijacking.md | 41L |
| -rw-r--r-- | src/content/internal/active-directory/trust-ticket.md | 66L |
| -rw-r--r-- | src/content/internal/cheatsheets/as-400.md | 667L |
| -rw-r--r-- | src/content/internal/cheatsheets/escape-breakout.md | 189L |
| -rw-r--r-- | src/content/internal/cheatsheets/hash-cracking.md | 172L |
| -rw-r--r-- | src/content/internal/cheatsheets/index.md | 26L |
| -rw-r--r-- | src/content/internal/cheatsheets/liferay.md | 163L |
| -rw-r--r-- | src/content/internal/cheatsheets/mimikatz-cheatsheet.md | 331L |
| -rw-r--r-- | src/content/internal/cheatsheets/miscellaneous-tricks.md | 54L |
| -rw-r--r-- | src/content/internal/cheatsheets/network-discovery.md | 382L |
| -rw-r--r-- | src/content/internal/cheatsheets/powershell-cheatsheet.md | 374L |
| -rw-r--r-- | src/content/internal/cheatsheets/shell-bind-cheatsheet.md | 111L |
| -rw-r--r-- | src/content/internal/cheatsheets/shell-reverse-cheatsheet.md | 679L |
| -rw-r--r-- | src/content/internal/cloud/aws/aws-access-token.md | 112L |
| -rw-r--r-- | src/content/internal/cloud/aws/aws-cli.md | 80L |
| -rw-r--r-- | src/content/internal/cloud/aws/aws-cognito.md | 95L |
| -rw-r--r-- | src/content/internal/cloud/aws/aws-dynamodb.md | 44L |
| -rw-r--r-- | src/content/internal/cloud/aws/aws-ec2.md | 135L |
| -rw-r--r-- | src/content/internal/cloud/aws/aws-enumeration.md | 137L |
| -rw-r--r-- | src/content/internal/cloud/aws/aws-iam.md | 172L |
| -rw-r--r-- | src/content/internal/cloud/aws/aws-ioc-detection.md | 47L |
| -rw-r--r-- | src/content/internal/cloud/aws/aws-lambda.md | 62L |
| -rw-r--r-- | src/content/internal/cloud/aws/aws-metadata.md | 123L |
| -rw-r--r-- | src/content/internal/cloud/aws/aws-s3-bucket.md | 171L |
| -rw-r--r-- | src/content/internal/cloud/aws/aws-ssm.md | 38L |
| -rw-r--r-- | src/content/internal/cloud/aws/aws-training.md | 18L |
| -rw-r--r-- | src/content/internal/cloud/azure/aka-ms.md | 112L |
| -rw-r--r-- | src/content/internal/cloud/azure/azure-access-and-token.md | 437L |
| -rw-r--r-- | src/content/internal/cloud/azure/azure-ad-conditional-access-policy.md | 103L |
| -rw-r--r-- | src/content/internal/cloud/azure/azure-ad-connect.md | 138L |
| -rw-r--r-- | src/content/internal/cloud/azure/azure-devices-users-sp.md | 266L |
| -rw-r--r-- | src/content/internal/cloud/azure/azure-enumeration.md | 267L |
| -rw-r--r-- | src/content/internal/cloud/azure/azure-persistence.md | 80L |
| -rw-r--r-- | src/content/internal/cloud/azure/azure-phishing.md | 163L |
| -rw-r--r-- | src/content/internal/cloud/azure/azure-requirements.md | 47L |
| -rw-r--r-- | src/content/internal/cloud/azure/azure-services-application-endpoint.md | 30L |
| -rw-r--r-- | src/content/internal/cloud/azure/azure-services-application-proxy.md | 27L |
| -rw-r--r-- | src/content/internal/cloud/azure/azure-services-container-registry.md | 64L |
| -rw-r--r-- | src/content/internal/cloud/azure/azure-services-deployment-template.md | 32L |
| -rw-r--r-- | src/content/internal/cloud/azure/azure-services-devops.md | 175L |
| -rw-r--r-- | src/content/internal/cloud/azure/azure-services-keyvault.md | 52L |
| -rw-r--r-- | src/content/internal/cloud/azure/azure-services-microsoft-intune.md | 89L |
| -rw-r--r-- | src/content/internal/cloud/azure/azure-services-office-365.md | 42L |
| -rw-r--r-- | src/content/internal/cloud/azure/azure-services-runbook.md | 96L |
| -rw-r--r-- | src/content/internal/cloud/azure/azure-services-storage-blob.md | 87L |
| -rw-r--r-- | src/content/internal/cloud/azure/azure-services-virtual-machine.md | 62L |
| -rw-r--r-- | src/content/internal/cloud/azure/azure-services-web-apps.md | 60L |
| -rw-r--r-- | src/content/internal/cloud/azure/azure-services-web-domains.md | 167L |
| -rw-r--r-- | src/content/internal/cloud/ibm/ibm-cloud-databases.md | 140L |
| -rw-r--r-- | src/content/internal/cloud/ibm/ibm-cloud-object-storage.md | 129L |
| -rw-r--r-- | src/content/internal/cloud/index.md | 53L |
| -rw-r--r-- | src/content/internal/command-control/cobalt-strike-beacons.md | 122L |
| -rw-r--r-- | src/content/internal/command-control/cobalt-strike-kits.md | 108L |
| -rw-r--r-- | src/content/internal/command-control/cobalt-strike.md | 316L |
| -rw-r--r-- | src/content/internal/command-control/index.md | 21L |
| -rw-r--r-- | src/content/internal/command-control/metasploit.md | 243L |
| -rw-r--r-- | src/content/internal/command-control/mythic.md | 84L |
| -rw-r--r-- | src/content/internal/containers/docker.md | 281L |
| -rw-r--r-- | src/content/internal/containers/index.md | 18L |
| -rw-r--r-- | src/content/internal/containers/kubernetes.md | 401L |
| -rw-r--r-- | src/content/internal/databases/index.md | 21L |
| -rw-r--r-- | src/content/internal/databases/mssql-audit-checks.md | 76L |
| -rw-r--r-- | src/content/internal/databases/mssql-command-execution.md | 324L |
| -rw-r--r-- | src/content/internal/databases/mssql-credentials.md | 111L |
| -rw-r--r-- | src/content/internal/databases/mssql-enumeration.md | 176L |
| -rw-r--r-- | src/content/internal/databases/mssql-linked-database.md | 117L |
| -rw-r--r-- | src/content/internal/devops/cicd-azure-devops.md | 44L |
| -rw-r--r-- | src/content/internal/devops/cicd-buildkite.md | 22L |
| -rw-r--r-- | src/content/internal/devops/cicd-circle-ci.md | 25L |
| -rw-r--r-- | src/content/internal/devops/cicd-drone-ci.md | 24L |
| -rw-r--r-- | src/content/internal/devops/cicd-github-actions.md | 189L |
| -rw-r--r-- | src/content/internal/devops/cicd-gitlab-ci.md | 132L |
| -rw-r--r-- | src/content/internal/devops/index.md | 45L |
| -rw-r--r-- | src/content/internal/devops/package-managers.md | 204L |
| -rw-r--r-- | src/content/internal/devops/secrets-enumeration.md | 57L |
| -rw-r--r-- | src/content/internal/disclaimer.md | 21L |
| -rw-r--r-- | src/content/internal/methodology/android-applications.md | 683L |
| -rw-r--r-- | src/content/internal/methodology/bug-hunting-methodology.md | 318L |
| -rw-r--r-- | src/content/internal/methodology/index.md | 20L |
| -rw-r--r-- | src/content/internal/methodology/source-code-analysis.md | 170L |
| -rw-r--r-- | src/content/internal/methodology/vulnerability-reports.md | 123L |
| -rw-r--r-- | src/content/internal/redteam/access/clickfix.md | 43L |
| -rw-r--r-- | src/content/internal/redteam/access/html-smuggling.md | 54L |
| -rw-r--r-- | src/content/internal/redteam/access/initial-access.md | 206L |
| -rw-r--r-- | src/content/internal/redteam/access/office-attacks.md | 801L |
| -rw-r--r-- | src/content/internal/redteam/access/phishing.md | 95L |
| -rw-r--r-- | src/content/internal/redteam/access/web-attack-surface.md | 166L |
| -rw-r--r-- | src/content/internal/redteam/access/windows-download-execute.md | 131L |
| -rw-r--r-- | src/content/internal/redteam/access/windows-using-credentials.md | 508L |
| -rw-r--r-- | src/content/internal/redteam/escalation/linux-privilege-escalation.md | 878L |
| -rw-r--r-- | src/content/internal/redteam/escalation/windows-privilege-escalation.md | 1586L |
| -rw-r--r-- | src/content/internal/redteam/evasion/edr-bypass.md | 93L |
| -rw-r--r-- | src/content/internal/redteam/evasion/elastic-edr.md | 109L |
| -rw-r--r-- | src/content/internal/redteam/evasion/linux-evasion.md | 147L |
| -rw-r--r-- | src/content/internal/redteam/evasion/opsec-fails.md | 74L |
| -rw-r--r-- | src/content/internal/redteam/evasion/proxy-bypass.md | 115L |
| -rw-r--r-- | src/content/internal/redteam/evasion/windows-amsi-bypass.md | 791L |
| -rw-r--r-- | src/content/internal/redteam/evasion/windows-defenses.md | 612L |
| -rw-r--r-- | src/content/internal/redteam/evasion/windows-dpapi.md | 107L |
| -rw-r--r-- | src/content/internal/redteam/index.md | 39L |
| -rw-r--r-- | src/content/internal/redteam/persistence/linux-persistence.md | 350L |
| -rw-r--r-- | src/content/internal/redteam/persistence/rdp-persistence.md | 106L |
| -rw-r--r-- | src/content/internal/redteam/persistence/windows-persistence.md | 721L |
| -rw-r--r-- | src/content/internal/redteam/pivoting/network-pivoting-techniques.md | 203L |
| -rw-r--r-- | src/content/internal/redteam/pivoting/network-pivoting-tools.md | 155L |
| -rw-r--r-- | src/content/payloads/account-takeover/index.md | 197L |
| -rw-r--r-- | src/content/payloads/account-takeover/mfa-bypass.md | 109L |
| -rw-r--r-- | src/content/payloads/api-key-leaks/iis-machine-keys.md | 217L |
| -rw-r--r-- | src/content/payloads/api-key-leaks/index.md | 118L |
| -rw-r--r-- | src/content/payloads/brute-force-rate-limit/index.md | 157L |
| -rw-r--r-- | src/content/payloads/business-logic-errors/index.md | 105L |
| -rw-r--r-- | src/content/payloads/clickjacking/index.md | 266L |
| -rw-r--r-- | src/content/payloads/client-side-path-traversal/index.md | 82L |
| -rw-r--r-- | src/content/payloads/command-injection/index.md | 486L |
| -rw-r--r-- | src/content/payloads/cors-misconfiguration/index.md | 284L |
| -rw-r--r-- | src/content/payloads/crlf-injection/index.md | 162L |
| -rw-r--r-- | src/content/payloads/cross-site-request-forgery/index.md | 172L |
| -rw-r--r-- | src/content/payloads/css-injection/index.md | 209L |
| -rw-r--r-- | src/content/payloads/csv-injection/index.md | 102L |
| -rw-r--r-- | src/content/payloads/cve-exploits/index.md | 95L |
| -rw-r--r-- | src/content/payloads/cve-exploits/log4shell.md | 117L |
| -rw-r--r-- | src/content/payloads/denial-of-service/index.md | 111L |
| -rw-r--r-- | src/content/payloads/dependency-confusion/index.md | 49L |
| -rw-r--r-- | src/content/payloads/directory-traversal/index.md | 365L |
| -rw-r--r-- | src/content/payloads/dns-rebinding/index.md | 106L |
| -rw-r--r-- | src/content/payloads/dom-clobbering/index.md | 155L |
| -rw-r--r-- | src/content/payloads/encoding-transformations/index.md | 121L |
| -rw-r--r-- | src/content/payloads/external-variable-modification/index.md | 108L |
| -rw-r--r-- | src/content/payloads/file-inclusion/index.md | 155L |
| -rw-r--r-- | src/content/payloads/file-inclusion/lfi-to-rce.md | 313L |
| -rw-r--r-- | src/content/payloads/file-inclusion/wrappers.md | 285L |
| -rw-r--r-- | src/content/payloads/google-web-toolkit/index.md | 74L |
| -rw-r--r-- | src/content/payloads/graphql-injection/index.md | 505L |
| -rw-r--r-- | src/content/payloads/headless-browser/index.md | 202L |
| -rw-r--r-- | src/content/payloads/hidden-parameters/index.md | 60L |
| -rw-r--r-- | src/content/payloads/http-parameter-pollution/index.md | 110L |
| -rw-r--r-- | src/content/payloads/insecure-deserialization/dotnet.md | 195L |
| -rw-r--r-- | src/content/payloads/insecure-deserialization/index.md | 70L |
| -rw-r--r-- | src/content/payloads/insecure-deserialization/java.md | 325L |
| -rw-r--r-- | src/content/payloads/insecure-deserialization/node.md | 65L |
| -rw-r--r-- | src/content/payloads/insecure-deserialization/php.md | 271L |
| -rw-r--r-- | src/content/payloads/insecure-deserialization/python.md | 146L |
| -rw-r--r-- | src/content/payloads/insecure-deserialization/ruby.md | 106L |
| -rw-r--r-- | src/content/payloads/insecure-direct-object-references/index.md | 139L |
| -rw-r--r-- | src/content/payloads/insecure-management-interface/index.md | 52L |
| -rw-r--r-- | src/content/payloads/insecure-randomness/index.md | 219L |
| -rw-r--r-- | src/content/payloads/insecure-source-code-management/bazaar.md | 62L |
| -rw-r--r-- | src/content/payloads/insecure-source-code-management/git.md | 259L |
| -rw-r--r-- | src/content/payloads/insecure-source-code-management/index.md | 59L |
| -rw-r--r-- | src/content/payloads/insecure-source-code-management/mercurial.md | 33L |
| -rw-r--r-- | src/content/payloads/insecure-source-code-management/subversion.md | 49L |
| -rw-r--r-- | src/content/payloads/java-rmi/index.md | 155L |
| -rw-r--r-- | src/content/payloads/json-web-token/index.md | 551L |
| -rw-r--r-- | src/content/payloads/latex-injection/index.md | 147L |
| -rw-r--r-- | src/content/payloads/ldap-injection/index.md | 184L |
| -rw-r--r-- | src/content/payloads/mass-assignment/index.md | 49L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/active-directory-attack.md | 61L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/bind-shell-cheatsheet.md | 23L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/cloud-aws-pentest.md | 27L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/cloud-azure-pentest.md | 22L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/cobalt-strike-cheatsheet.md | 42L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/container-docker-pentest.md | 24L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/container-kubernetes-pentest.md | 19L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/escape-breakout.md | 26L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/hash-cracking.md | 25L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/html-smuggling.md | 16L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/index.md | 49L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/initial-access.md | 21L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/linux-evasion.md | 18L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/linux-persistence.md | 28L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/linux-privilege-escalation.md | 60L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/metasploit-cheatsheet.md | 33L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/methodology-and-enumeration.md | 27L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/mssql-server-cheatsheet.md | 71L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/network-discovery.md | 24L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/network-pivoting-techniques.md | 39L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/office-attacks.md | 47L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/powershell-cheatsheet.md | 27L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/reverse-shell-cheatsheet.md | 53L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/source-code-management.md | 23L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/vulnerability-reports.md | 19L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/web-attack-surface.md | 22L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/windows-amsi-bypass.md | 31L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/windows-defenses.md | 29L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/windows-download-and-execute.md | 27L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/windows-dpapi.md | 19L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/windows-mimikatz.md | 30L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/windows-persistence.md | 50L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/windows-privilege-escalation.md | 78L |
| -rw-r--r-- | src/content/payloads/methodology-and-resources/windows-using-credentials.md | 38L |
| -rw-r--r-- | src/content/payloads/nosql-injection/index.md | 257L |
| -rw-r--r-- | src/content/payloads/oauth-misconfiguration/index.md | 91L |
| -rw-r--r-- | src/content/payloads/open-redirect/index.md | 195L |
| -rw-r--r-- | src/content/payloads/orm-leak/index.md | 245L |
| -rw-r--r-- | src/content/payloads/prompt-injection/index.md | 224L |
| -rw-r--r-- | src/content/payloads/prototype-pollution/index.md | 201L |
| -rw-r--r-- | src/content/payloads/race-condition/index.md | 175L |
| -rw-r--r-- | src/content/payloads/regular-expression/index.md | 113L |
| -rw-r--r-- | src/content/payloads/request-smuggling/index.md | 191L |
| -rw-r--r-- | src/content/payloads/reverse-proxy-misconfigurations/index.md | 175L |
| -rw-r--r-- | src/content/payloads/saml-injection/index.md | 210L |
| -rw-r--r-- | src/content/payloads/server-side-include-injection/index.md | 85L |
| -rw-r--r-- | src/content/payloads/server-side-request-forgery/index.md | 489L |
| -rw-r--r-- | src/content/payloads/server-side-request-forgery/ssrf-advanced-exploitation.md | 178L |
| -rw-r--r-- | src/content/payloads/server-side-request-forgery/ssrf-cloud-instances.md | 342L |
| -rw-r--r-- | src/content/payloads/server-side-template-injection/asp.md | 44L |
| -rw-r--r-- | src/content/payloads/server-side-template-injection/elixir.md | 76L |
| -rw-r--r-- | src/content/payloads/server-side-template-injection/index.md | 238L |
| -rw-r--r-- | src/content/payloads/server-side-template-injection/java.md | 535L |
| -rw-r--r-- | src/content/payloads/server-side-template-injection/javascript.md | 182L |
| -rw-r--r-- | src/content/payloads/server-side-template-injection/php.md | 356L |
| -rw-r--r-- | src/content/payloads/server-side-template-injection/python.md | 476L |
| -rw-r--r-- | src/content/payloads/server-side-template-injection/ruby.md | 101L |
| -rw-r--r-- | src/content/payloads/sql-injection/bigquery-injection.md | 74L |
| -rw-r--r-- | src/content/payloads/sql-injection/cassandra-injection.md | 67L |
| -rw-r--r-- | src/content/payloads/sql-injection/db2-injection.md | 151L |
| -rw-r--r-- | src/content/payloads/sql-injection/index.md | 606L |
| -rw-r--r-- | src/content/payloads/sql-injection/mssql-injection.md | 453L |
| -rw-r--r-- | src/content/payloads/sql-injection/mysql-injection.md | 785L |
| -rw-r--r-- | src/content/payloads/sql-injection/oraclesql-injection.md | 246L |
| -rw-r--r-- | src/content/payloads/sql-injection/postgresql-injection.md | 302L |
| -rw-r--r-- | src/content/payloads/sql-injection/sqlite-injection.md | 165L |
| -rw-r--r-- | src/content/payloads/sql-injection/sqlmap.md | 359L |
| -rw-r--r-- | src/content/payloads/tabnabbing/index.md | 51L |
| -rw-r--r-- | src/content/payloads/type-juggling/index.md | 170L |
| -rw-r--r-- | src/content/payloads/upload-insecure-files/configuration-apache-htaccess/readme.md | 88L |
| -rw-r--r-- | src/content/payloads/upload-insecure-files/index.md | 423L |
| -rw-r--r-- | src/content/payloads/virtual-hosts/index.md | 103L |
| -rw-r--r-- | src/content/payloads/web-cache-deception/index.md | 161L |
| -rw-r--r-- | src/content/payloads/web-sockets/index.md | 181L |
| -rw-r--r-- | src/content/payloads/xpath-injection/index.md | 89L |
| -rw-r--r-- | src/content/payloads/xs-leak/index.md | 139L |
| -rw-r--r-- | src/content/payloads/xslt-injection/index.md | 262L |
| -rw-r--r-- | src/content/payloads/xss-injection/1-xss-filter-bypass.md | 588L |
| -rw-r--r-- | src/content/payloads/xss-injection/2-xss-polyglot.md | 96L |
| -rw-r--r-- | src/content/payloads/xss-injection/3-xss-common-waf-bypass.md | 130L |
| -rw-r--r-- | src/content/payloads/xss-injection/4-csp-bypass.md | 189L |
| -rw-r--r-- | src/content/payloads/xss-injection/5-xss-in-angular.md | 351L |
| -rw-r--r-- | src/content/payloads/xss-injection/index.md | 619L |
| -rw-r--r-- | src/content/payloads/xxe-injection/index.md | 698L |
| -rw-r--r-- | src/content/payloads/zip-slip/index.md | 58L |
| -rw-r--r-- | src/content/sheets/active-directory/active-directory-attacks.md | 1188L |
| -rw-r--r-- | src/content/sheets/active-directory/active-directory-cheat-sheet.md | 1387L |
| -rw-r--r-- | src/content/sheets/active-directory/ad-enumeration-native.md | 420L |
| -rw-r--r-- | src/content/sheets/active-directory/ad-pentest-tools.md | 810L |
| -rw-r--r-- | src/content/sheets/active-directory/ad-recycle-bin-enumeration.md | 290L |
| -rw-r--r-- | src/content/sheets/active-directory/adcs-attack-methodology.md | 243L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-1-password-spraying.md | 404L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-10-credential-hunting-in-shares-gpp-passwords.md | 612L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-11-golden-ticket-attack.md | 419L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-12-silver-ticket-attack.md | 440L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-13-diamond-ticket-attack.md | 182L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-14-sapphire-ticket-attack.md | 155L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-15-unconstrained-delegation-abuse.md | 198L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-16-constrained-delegation-abuse-s4u2proxy.md | 194L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-17-resource-based-constrained-delegation-rbcd.md | 216L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-18-bronze-bit-attack-cve-2020-17049.md | 145L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-19-genericall-abuse.md | 336L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-2-kerberoasting.md | 436L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-20-genericwrite-abuse.md | 169L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-21-writedacl-abuse.md | 161L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-22-writeowner-abuse.md | 121L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-23-forcechangepassword-abuse.md | 237L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-24-allextendedrights-dcsync-ace-abuse.md | 104L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-25-shadow-credentials-attack-msds-keycredentiallink.md | 174L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-26-adminsdholder-persistence-via-acl.md | 191L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-27-esc1-san-specification-in-template.md | 329L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-28-esc2-any-purpose-eku-no-eku.md | 111L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-29-esc3-certificate-request-agent.md | 88L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-3-as-rep-roasting.md | 416L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-30-esc4-template-write-permissions.md | 121L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-31-esc6-editf-attributesubjectaltname2-flag.md | 94L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-32-esc7-vulnerable-ca-officer-permissions.md | 121L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-33-esc8-ntlm-relay-to-adcs-http-endpoint.md | 136L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-34-esc11-ntlm-relay-to-adcs-rpc.md | 81L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-35-golden-certificate-attack.md | 136L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-36-certifried-cve-2022-26923.md | 103L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-37-dcsync-attack.md | 729L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-38-dcshadow-attack.md | 413L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-39-ntds-dit-extraction-and-dumping.md | 453L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-4-pass-the-hash-pth.md | 464L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-40-zerologon-cve-2020-1472.md | 376L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-41-petitpotam-cve-2021-36942.md | 401L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-42-printerbug-spoolsample.md | 385L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-43-printnightmare-cve-2021-34527.md | 386L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-44-nopac-sam-the-admin-cve-2021-42278-42287.md | 419L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-45-token-impersonation-seimpersonateprivilege.md | 329L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-46-dnsadmins-dll-injection.md | 83L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-47-machineaccountquota-maq-abuse.md | 82L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-48-gpp-password-decryption.md | 79L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-49-abusing-backup-operators-group.md | 93L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-5-pass-the-ticket-ptt.md | 468L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-50-abusing-account-operators-group.md | 77L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-51-abusing-server-operators-group.md | 72L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-52-abusing-print-operators-group.md | 70L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-53-exchange-windows-permissions-writedacl-to-dcsync.md | 84L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-54-psexec-remote-execution-via-smb.md | 321L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-55-winrm-evil-winrm-lateral-movement.md | 66L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-56-rdp-lateral-movement-and-hijacking.md | 77L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-57-dcom-lateral-movement.md | 66L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-58-wmi-lateral-movement.md | 65L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-59-scm-service-manager-lateral-movement.md | 66L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-6-overpass-the-hash-pass-the-key.md | 452L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-60-token-stealing-and-impersonation.md | 91L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-61-skeleton-key-attack.md | 89L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-62-dsrm-backdoor-abuse.md | 83L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-63-sid-history-injection.md | 79L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-64-golden-ticket-persistence.md | 78L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-65-acl-backdooring-persistence-via-dcsync-ace.md | 82L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-66-malicious-gpo-creation.md | 83L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-67-adcs-certificate-based-persistence.md | 83L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-68-cross-domain-trust-abuse-sid-history.md | 91L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-69-forest-trust-abuse-cross-forest-ticket-forging.md | 88L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-7-ntlm-relay-attacks.md | 527L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-70-adcs-cross-domain-enrollment.md | 71L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-71-pam-trust-abuse-bastion-forest.md | 80L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-72-laps-password-extraction.md | 85L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-73-gmsa-password-extraction.md | 85L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-74-azure-ad-connect-credential-extraction.md | 80L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-75-sccm-mecm-exploitation.md | 83L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-76-mssql-server-and-linked-server-abuse.md | 110L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-77-dfscoerce-ms-dfsnm-coercion.md | 72L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-78-ad-recycle-bin-object-abuse.md | 100L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-8-llmnr-nbt-ns-mdns-poisoning.md | 515L |
| -rw-r--r-- | src/content/sheets/active-directory/attack-9-mitm6-ipv6-dns-spoofing-dhcpv6-takeover.md | 518L |
| -rw-r--r-- | src/content/sheets/active-directory/autobloody.md | 345L |
| -rw-r--r-- | src/content/sheets/active-directory/bloodhound-ce-python.md | 248L |
| -rw-r--r-- | src/content/sheets/active-directory/bloodhound-python.md | 805L |
| -rw-r--r-- | src/content/sheets/active-directory/bloodhound.md | 632L |
| -rw-r--r-- | src/content/sheets/active-directory/bloodyad.md | 914L |
| -rw-r--r-- | src/content/sheets/active-directory/certificate-persistence-certifried-cve-2022-26923.md | 416L |
| -rw-r--r-- | src/content/sheets/active-directory/certipy-ad.md | 706L |
| -rw-r--r-- | src/content/sheets/active-directory/certipy.md | 576L |
| -rw-r--r-- | src/content/sheets/active-directory/dpersist2-rogue-ca-certificate-ntauth-injection.md | 125L |
| -rw-r--r-- | src/content/sheets/active-directory/dpersist3-malicious-misconfiguration-acl-backdoor.md | 103L |
| -rw-r--r-- | src/content/sheets/active-directory/esc1-san-specification-in-template.md | 309L |
| -rw-r--r-- | src/content/sheets/active-directory/esc10-weak-certificate-mapping.md | 223L |
| -rw-r--r-- | src/content/sheets/active-directory/esc11-ntlm-relay-to-adcs-rpc-icpr.md | 376L |
| -rw-r--r-- | src/content/sheets/active-directory/esc12-shell-access-to-ca-with-yubihsm.md | 197L |
| -rw-r--r-- | src/content/sheets/active-directory/esc13-issuance-policy-oid-group-link.md | 232L |
| -rw-r--r-- | src/content/sheets/active-directory/esc14-weak-explicit-certificate-mapping.md | 255L |
| -rw-r--r-- | src/content/sheets/active-directory/esc15-ekuwu-cve-2024-49019.md | 283L |
| -rw-r--r-- | src/content/sheets/active-directory/esc16-security-extension-disabled-on-ca-globally.md | 464L |
| -rw-r--r-- | src/content/sheets/active-directory/esc17-adcs-certificate-spoofing-to-attack-https-enabled-wsus-clients.md | 276L |
| -rw-r--r-- | src/content/sheets/active-directory/esc2-any-purpose-eku-no-eku-the-swiss-certificate.md | 288L |
| -rw-r--r-- | src/content/sheets/active-directory/esc3-misconfigured-enrollment-agent-templates.md | 334L |
| -rw-r--r-- | src/content/sheets/active-directory/esc4-vulnerable-certificate-template-access-control.md | 343L |
| -rw-r--r-- | src/content/sheets/active-directory/esc5-vulnerable-pki-object-access-control.md | 228L |
| -rw-r--r-- | src/content/sheets/active-directory/esc6-editf-attributesubjectaltname2-flag.md | 334L |
| -rw-r--r-- | src/content/sheets/active-directory/esc7-vulnerable-ca-access-control-manageca-managecertificates.md | 446L |
| -rw-r--r-- | src/content/sheets/active-directory/esc8-ntlm-relay-to-adcs-http-web-enrollment.md | 374L |
| -rw-r--r-- | src/content/sheets/active-directory/esc9-no-security-extension-template-level.md | 496L |
| -rw-r--r-- | src/content/sheets/active-directory/faketime.md | 230L |
| -rw-r--r-- | src/content/sheets/active-directory/golden-certificate-attack-dpersist1.md | 326L |
| -rw-r--r-- | src/content/sheets/active-directory/impacket.md | 563L |
| -rw-r--r-- | src/content/sheets/active-directory/kerberoasting-local-on-host.md | 323L |
| -rw-r--r-- | src/content/sheets/active-directory/kerberoasting.md | 311L |
| -rw-r--r-- | src/content/sheets/active-directory/kerbrute.md | 284L |
| -rw-r--r-- | src/content/sheets/active-directory/ldap-enumeration.md | 393L |
| -rw-r--r-- | src/content/sheets/active-directory/ldap-search.md | 405L |
| -rw-r--r-- | src/content/sheets/active-directory/ldapdomaindump.md | 574L |
| -rw-r--r-- | src/content/sheets/active-directory/mimikatz.md | 137L |
| -rw-r--r-- | src/content/sheets/active-directory/netexec.md | 719L |
| -rw-r--r-- | src/content/sheets/active-directory/persist1-active-user-credential-theft-via-certificates.md | 93L |
| -rw-r--r-- | src/content/sheets/active-directory/persist2-machine-account-persistence-via-certificates.md | 90L |
| -rw-r--r-- | src/content/sheets/active-directory/persist3-account-persistence-via-certificate-renewal.md | 103L |
| -rw-r--r-- | src/content/sheets/active-directory/powerview-powerup.md | 1749L |
| -rw-r--r-- | src/content/sheets/active-directory/rubeus.md | 659L |
| -rw-r--r-- | src/content/sheets/active-directory/run-as-another-user-from-evil-winrm.md | 221L |
| -rw-r--r-- | src/content/sheets/active-directory/rusthound-ce.md | 328L |
| -rw-r--r-- | src/content/sheets/active-directory/shadow-credentials-msds-keycredentiallink-abuse.md | 186L |
| -rw-r--r-- | src/content/sheets/active-directory/sharphound.md | 681L |
| -rw-r--r-- | src/content/sheets/active-directory/theft1-exporting-certificates-and-keys.md | 125L |
| -rw-r--r-- | src/content/sheets/active-directory/theft2-user-certificate-theft-via-dpapi.md | 112L |
| -rw-r--r-- | src/content/sheets/active-directory/theft3-machine-certificate-theft-via-dpapi.md | 101L |
| -rw-r--r-- | src/content/sheets/active-directory/theft4-finding-certificate-files.md | 112L |
| -rw-r--r-- | src/content/sheets/active-directory/theft5-ntlm-theft-via-pkinit-unpac-the-hash.md | 126L |
| -rw-r--r-- | src/content/sheets/cryptography/gpg.md | 2399L |
| -rw-r--r-- | src/content/sheets/cryptography/hashing.md | 696L |
| -rw-r--r-- | src/content/sheets/cryptography/openssl.md | 349L |
| -rw-r--r-- | src/content/sheets/dfir/dfir-gui-tools.md | 200L |
| -rw-r--r-- | src/content/sheets/dfir/disk-imaging.md | 336L |
| -rw-r--r-- | src/content/sheets/dfir/etw-telemetry.md | 258L |
| -rw-r--r-- | src/content/sheets/dfir/ez-tools-kape.md | 404L |
| -rw-r--r-- | src/content/sheets/dfir/forensics.md | 1856L |
| -rw-r--r-- | src/content/sheets/dfir/frida-api-tracing.md | 242L |
| -rw-r--r-- | src/content/sheets/dfir/handle-enumeration.md | 234L |
| -rw-r--r-- | src/content/sheets/dfir/injected-thread-hunting.md | 216L |
| -rw-r--r-- | src/content/sheets/dfir/kernel-debugging-lab.md | 270L |
| -rw-r--r-- | src/content/sheets/dfir/kernel-notification-callbacks.md | 241L |
| -rw-r--r-- | src/content/sheets/dfir/linux-forensics.md | 365L |
| -rw-r--r-- | src/content/sheets/dfir/peb-walking.md | 274L |
| -rw-r--r-- | src/content/sheets/dfir/recmd.md | 751L |
| -rw-r--r-- | src/content/sheets/dfir/ssdt-and-idt.md | 294L |
| -rw-r--r-- | src/content/sheets/dfir/strings-file-triage.md | 365L |
| -rw-r--r-- | src/content/sheets/dfir/tshark.md | 446L |
| -rw-r--r-- | src/content/sheets/dfir/volatility.md | 608L |
| -rw-r--r-- | src/content/sheets/dfir/x64-stack-frames.md | 240L |
| -rw-r--r-- | src/content/sheets/enumeration/2-4-cheatsheet-gitleaks.md | 444L |
| -rw-r--r-- | src/content/sheets/enumeration/2-5-cheatsheet-trufflehog.md | 591L |
| -rw-r--r-- | src/content/sheets/enumeration/amass.md | 354L |
| -rw-r--r-- | src/content/sheets/enumeration/anonymous-null-testing.md | 1014L |
| -rw-r--r-- | src/content/sheets/enumeration/awesome-nmap-grep.md | 290L |
| -rw-r--r-- | src/content/sheets/enumeration/cheatsheet-infrastructure-enumeration-tools-1.md | 608L |
| -rw-r--r-- | src/content/sheets/enumeration/common-ports-and-services.md | 446L |
| -rw-r--r-- | src/content/sheets/enumeration/credential-hunting.md | 801L |
| -rw-r--r-- | src/content/sheets/enumeration/feroxbuster.md | 359L |
| -rw-r--r-- | src/content/sheets/enumeration/ffuf.md | 1329L |
| -rw-r--r-- | src/content/sheets/enumeration/gobuster.md | 644L |
| -rw-r--r-- | src/content/sheets/enumeration/google-dorking.md | 583L |
| -rw-r--r-- | src/content/sheets/enumeration/lfi.md | 87L |
| -rw-r--r-- | src/content/sheets/enumeration/nikto-nuclei-web-scanner-cheatsheets.md | 942L |
| -rw-r--r-- | src/content/sheets/enumeration/nmap-nse-scripts.md | 351L |
| -rw-r--r-- | src/content/sheets/enumeration/nmap.md | 316L |
| -rw-r--r-- | src/content/sheets/enumeration/nse-guide.md | 1536L |
| -rw-r--r-- | src/content/sheets/enumeration/nuclei.md | 630L |
| -rw-r--r-- | src/content/sheets/enumeration/rustscan.md | 936L |
| -rw-r--r-- | src/content/sheets/enumeration/shodan.md | 621L |
| -rw-r--r-- | src/content/sheets/enumeration/smbmap.md | 278L |
| -rw-r--r-- | src/content/sheets/enumeration/smtp-user-enum.md | 270L |
| -rw-r--r-- | src/content/sheets/enumeration/windows-enumeration.md | 559L |
| -rw-r--r-- | src/content/sheets/enumeration/wpscan.md | 366L |
| -rw-r--r-- | src/content/sheets/exploitation/buffer-overflow.md | 162L |
| -rw-r--r-- | src/content/sheets/exploitation/dll-injection.md | 118L |
| -rw-r--r-- | src/content/sheets/exploitation/metasploit.md | 968L |
| -rw-r--r-- | src/content/sheets/exploitation/process-hollowing.md | 185L |
| -rw-r--r-- | src/content/sheets/exploitation/sqlmap-cheat-sheet-sql-injection-testing-data-extraction.md | 506L |
| -rw-r--r-- | src/content/sheets/exploitation/sqlmap.md | 670L |
| -rw-r--r-- | src/content/sheets/exploitation/thread-execution-hijacking.md | 175L |
| -rw-r--r-- | src/content/sheets/git-workflow/git-branching.md | 291L |
| -rw-r--r-- | src/content/sheets/git-workflow/git-complete-branch-vault-management-guide.md | 622L |
| -rw-r--r-- | src/content/sheets/git-workflow/git-move-existing-edits-to-a-new-branch-railway-site.md | 119L |
| -rw-r--r-- | src/content/sheets/git-workflow/git-reset.md | 186L |
| -rw-r--r-- | src/content/sheets/git-workflow/git.md | 778L |
| -rw-r--r-- | src/content/sheets/git-workflow/jj-field-guide.md | 57L |
| -rw-r--r-- | src/content/sheets/linux-it/chmod.md | 490L |
| -rw-r--r-- | src/content/sheets/linux-it/find-command.md | 463L |
| -rw-r--r-- | src/content/sheets/linux-it/linux-file-directory-search.md | 812L |
| -rw-r--r-- | src/content/sheets/linux-it/linux-find.md | 297L |
| -rw-r--r-- | src/content/sheets/linux-it/macos-iso-to-usb.md | 314L |
| -rw-r--r-- | src/content/sheets/linux-it/macos-terminal-tweaks.md | 792L |
| -rw-r--r-- | src/content/sheets/linux-it/macos-terminal.md | 762L |
| -rw-r--r-- | src/content/sheets/linux-it/rdp.md | 302L |
| -rw-r--r-- | src/content/sheets/linux-it/tmux.md | 314L |
| -rw-r--r-- | src/content/sheets/osint/archiving-and-evidence.md | 752L |
| -rw-r--r-- | src/content/sheets/osint/companies-and-finance.md | 637L |
| -rw-r--r-- | src/content/sheets/osint/conflict-and-environment.md | 641L |
| -rw-r--r-- | src/content/sheets/osint/data-analysis-and-visualisation.md | 687L |
| -rw-r--r-- | src/content/sheets/osint/email-and-phone.md | 824L |
| -rw-r--r-- | src/content/sheets/osint/geolocation.md | 510L |
| -rw-r--r-- | src/content/sheets/osint/image-video-forensics.md | 490L |
| -rw-r--r-- | src/content/sheets/osint/maps-and-satellite-imagery.md | 1147L |
| -rw-r--r-- | src/content/sheets/osint/osint-foundations.md | 717L |
| -rw-r--r-- | src/content/sheets/osint/people-search.md | 676L |
| -rw-r--r-- | src/content/sheets/osint/reverse-image-search.md | 412L |
| -rw-r--r-- | src/content/sheets/osint/social-media-monitoring.md | 557L |
| -rw-r--r-- | src/content/sheets/osint/social-media-platforms.md | 1387L |
| -rw-r--r-- | src/content/sheets/osint/transport-tracking.md | 551L |
| -rw-r--r-- | src/content/sheets/osint/usernames-and-accounts.md | 811L |
| -rw-r--r-- | src/content/sheets/osint/websites-and-infrastructure.md | 589L |
| -rw-r--r-- | src/content/sheets/password-attacks/hashcat.md | 221L |
| -rw-r--r-- | src/content/sheets/password-attacks/john-the-ripper.md | 511L |
| -rw-r--r-- | src/content/sheets/password-attacks/linux-credential-flag-hunting.md | 346L |
| -rw-r--r-- | src/content/sheets/password-attacks/password-attacks.md | 594L |
| -rw-r--r-- | src/content/sheets/password-attacks/windows-credential-flag-hunting.md | 502L |
| -rw-r--r-- | src/content/sheets/pentest-workflow/acl-and-object-abuse.md | 728L |
| -rw-r--r-- | src/content/sheets/pentest-workflow/active-directory-enumeration.md | 872L |
| -rw-r--r-- | src/content/sheets/pentest-workflow/adcs-and-certificate-abuse.md | 629L |
| -rw-r--r-- | src/content/sheets/pentest-workflow/alternate-data-streams-guide.md | 437L |
| -rw-r--r-- | src/content/sheets/pentest-workflow/attack-flow-dashboard.md | 221L |
| -rw-r--r-- | src/content/sheets/pentest-workflow/attack-flow-guide.md | 526L |
| -rw-r--r-- | src/content/sheets/pentest-workflow/attacking-common-applications-guide.md | 1220L |
| -rw-r--r-- | src/content/sheets/pentest-workflow/attacking-common-services-guide.md | 679L |
| -rw-r--r-- | src/content/sheets/pentest-workflow/documentation-and-reporting.md | 457L |
| -rw-r--r-- | src/content/sheets/pentest-workflow/domain-trusts-and-cross-forest.md | 381L |
| -rw-r--r-- | src/content/sheets/pentest-workflow/foothold-file-transfers.md | 551L |
| -rw-r--r-- | src/content/sheets/pentest-workflow/foothold-shells-payloads-metasploit.md | 565L |
| -rw-r--r-- | src/content/sheets/pentest-workflow/htb-attack-flow-playbook.md | 142L |
| -rw-r--r-- | src/content/sheets/pentest-workflow/kerberos-attacks.md | 514L |
| -rw-r--r-- | src/content/sheets/pentest-workflow/lateral-movement-pivoting-and-loot.md | 1400L |
| -rw-r--r-- | src/content/sheets/pentest-workflow/loot.md | 349L |
| -rw-r--r-- | src/content/sheets/pentest-workflow/most-used-commands.md | 693L |
| -rw-r--r-- | src/content/sheets/pentest-workflow/network-service-attack-manual.md | 1135L |
| -rw-r--r-- | src/content/sheets/pentest-workflow/passive-external-recon.md | 373L |
| -rw-r--r-- | src/content/sheets/pentest-workflow/password-attacks-and-credential-hunting.md | 709L |
| -rw-r--r-- | src/content/sheets/pentest-workflow/potato-attacks-guide.md | 620L |
| -rw-r--r-- | src/content/sheets/pentest-workflow/privilege-escalation.md | 1303L |
| -rw-r--r-- | src/content/sheets/pentest-workflow/recon-and-host-discovery.md | 545L |
| -rw-r--r-- | src/content/sheets/pentest-workflow/service-enumeration.md | 1160L |
| -rw-r--r-- | src/content/sheets/pentest-workflow/tool-index.md | 128L |
| -rw-r--r-- | src/content/sheets/pentest-workflow/web-enumeration-and-exploitation.md | 2242L |
| -rw-r--r-- | src/content/sheets/pentest-workflow/worked-chains.md | 306L |
| -rw-r--r-- | src/content/sheets/privilege-escalation/linux-privesc.md | 90L |
| -rw-r--r-- | src/content/sheets/privilege-escalation/windows-privesc.md | 2742L |
| -rw-r--r-- | src/content/sheets/tools/cobalt-strike.md | 138L |
| -rw-r--r-- | src/content/sheets/tools/dd-tool.md | 646L |
| -rw-r--r-- | src/content/sheets/tools/eyewitness.md | 342L |
| -rw-r--r-- | src/content/sheets/tools/file-transfers.md | 71L |
| -rw-r--r-- | src/content/sheets/tools/fscan.md | 992L |
| -rw-r--r-- | src/content/sheets/tools/internet-archival-guide.md | 597L |
| -rw-r--r-- | src/content/sheets/tools/netexec-spiderplus.md | 566L |
| -rw-r--r-- | src/content/sheets/tools/ntlm-kerberos-relay.md | 196L |
| -rw-r--r-- | src/content/sheets/tools/pcap-credential-extraction.md | 381L |
| -rw-r--r-- | src/content/sheets/tools/redis-cli.md | 361L |
| -rw-r--r-- | src/content/sheets/tools/sharpsploit.md | 858L |
| -rw-r--r-- | src/content/sheets/tools/smbserver-py.md | 123L |
| -rw-r--r-- | src/content/sheets/tools/smbshare.md | 98L |
| -rw-r--r-- | src/content/sheets/tools/snaffler.md | 862L |
| -rw-r--r-- | src/content/sheets/tools/sponge.md | 485L |
| -rw-r--r-- | src/content/sheets/tools/tar.md | 1086L |
| -rw-r--r-- | src/content/sheets/tools/username-anarchy.md | 11L |
| -rw-r--r-- | src/content/sheets/tools/webfuzz.md | 259L |
| -rw-r--r-- | src/content/sheets/tools/windows-cmd-powershell.md | 2548L |
| -rw-r--r-- | src/content/sheets/tools/xfreerdp.md | 105L |
| -rw-r--r-- | src/content/sheets/tunneling-pivoting/ligolo-ng.md | 736L |
| -rw-r--r-- | src/content/sheets/tunneling-pivoting/pivoting-and-tunnelling.md | 784L |
| -rw-r--r-- | src/content/sheets/tunneling-pivoting/socat.md | 224L |
| -rw-r--r-- | src/content/sheets/tunneling-pivoting/ssh-portfwding-with-metasploit.md | 457L |
| -rw-r--r-- | src/content/sheets/tunneling-pivoting/ssh-tunneling.md | 462L |
| -rw-r--r-- | src/content/sheets/tunneling-pivoting/tunneling-tools.md | 1481L |
| -rw-r--r-- | src/content/sheets/tunneling-pivoting/tunneling.md | 1480L |
| -rw-r--r-- | src/content/sheets/web/blind-xss-to-session-hijacking.md | 465L |
| -rw-r--r-- | src/content/sheets/web/blind-xss-tool-ezxss.md | 386L |
| -rw-r--r-- | src/content/sheets/web/blind-xss-tool-interactsh.md | 439L |
| -rw-r--r-- | src/content/sheets/web/blind-xss-tool-xss-hunter.md | 345L |
| -rw-r--r-- | src/content/sheets/web/command-injection-filter-bypass.md | 369L |
| -rw-r--r-- | src/content/sheets/web/curl.md | 486L |
| -rw-r--r-- | src/content/sheets/web/dalfox.md | 638L |
| -rw-r--r-- | src/content/sheets/web/file-inclusion.md | 175L |
| -rw-r--r-- | src/content/sheets/web/phishing-identification.md | 470L |
| -rw-r--r-- | src/content/sheets/web/phishing-site-link-identification.md | 496L |
| -rw-r--r-- | src/content/sheets/web/sql-injection.md | 196L |
| -rw-r--r-- | src/content/sheets/web/xss.md | 370L |
| -rw-r--r-- | src/data/ired-source.json | 10L |
| -rw-r--r-- | src/data/osint-catalogue.json | 8219L |
| -rw-r--r-- | src/data/pentest-workflow-downloads.json | 461L |
| -rw-r--r-- | src/fonts/archivo-400.woff2 | 5628B |
| -rw-r--r-- | src/fonts/archivo-500.woff2 | 5620B |
| -rw-r--r-- | src/fonts/archivo-600.woff2 | 5224B |
| -rw-r--r-- | src/fonts/archivo-700.woff2 | 5652B |
| -rw-r--r-- | src/fonts/dm-mono-300.woff2 | 14784B |
| -rw-r--r-- | src/fonts/dm-mono-400-italic.woff2 | 16012B |
| -rw-r--r-- | src/fonts/dm-mono-400.woff2 | 14820B |
| -rw-r--r-- | src/fonts/dm-mono-500.woff2 | 14988B |
| -rw-r--r-- | src/fonts/eb-garamond-600.woff2 | 18928B |
| -rw-r--r-- | src/fonts/ibm-plex-mono-400.woff2 | 4348B |
| -rw-r--r-- | src/fonts/ibm-plex-mono-600.woff2 | 4320B |
| -rw-r--r-- | src/fonts/jetbrains-mono-400-italic-latin.woff2 | 22228B |
| -rw-r--r-- | src/fonts/jetbrains-mono-400-latin.woff2 | 31432B |
| -rw-r--r-- | src/fonts/jetbrains-mono-700-latin.woff2 | 31432B |
| -rw-r--r-- | src/fonts/noto-sans-display-var-latin.woff2 | 69912B |
| -rw-r--r-- | src/fonts/old-standard-tt-700-wordmark.woff2 | 3084B |
| -rw-r--r-- | src/layouts/Base.astro | 181L |
| -rw-r--r-- | src/lib/hacktricks.ts | 46L |
| -rw-r--r-- | src/lib/internal.ts | 68L |
| -rw-r--r-- | src/lib/payloads.ts | 60L |
| -rw-r--r-- | src/lib/sheets.ts | 60L |
| -rw-r--r-- | src/lib/taxonomy.ts | 38L |
| -rw-r--r-- | src/lib/url.ts | 9L |
| -rw-r--r-- | src/pages/404.astro | 37L |
| -rw-r--r-- | src/pages/[category]/index.astro | 288L |
| -rw-r--r-- | src/pages/credits.astro | 192L |
| -rw-r--r-- | src/pages/hacktricks/[...slug].astro | 67L |
| -rw-r--r-- | src/pages/hacktricks/index.astro | 61L |
| -rw-r--r-- | src/pages/hacktricks/section/[section].astro | 47L |
| -rw-r--r-- | src/pages/index.astro | 279L |
| -rw-r--r-- | src/pages/internal/[...slug].astro | 105L |
| -rw-r--r-- | src/pages/internal/index.astro | 87L |
| -rw-r--r-- | src/pages/payloads/[...slug].astro | 80L |
| -rw-r--r-- | src/pages/payloads/index.astro | 70L |
| -rw-r--r-- | src/pages/sheets/[...slug].astro | 121L |
| -rw-r--r-- | src/pages/tags/[tag].astro | 59L |
| -rw-r--r-- | src/pages/tags/index.astro | 109L |
| -rw-r--r-- | src/scripts/app.ts | 434L |
| -rw-r--r-- | src/scripts/dmn/cursor.ts | 256L |
| -rw-r--r-- | src/scripts/dmn/icon-targets.ts | 96L |
| -rw-r--r-- | src/scripts/dmn/init.ts | 31L |
| -rw-r--r-- | src/scripts/dmn/particle-field.ts | 1036L |
| -rw-r--r-- | src/scripts/dmn/poisson.ts | 110L |
| -rw-r--r-- | src/scripts/dmn/shelf-icons.ts | 20L |
| -rw-r--r-- | src/scripts/dmn/viewer.ts | 65L |
| -rw-r--r-- | src/scripts/fuzz.ts | 188L |
| -rw-r--r-- | src/styles/app.css | 7L |
| -rw-r--r-- | src/styles/chrome.css | 418L |
| -rw-r--r-- | src/styles/daemon.css | 418L |
| -rw-r--r-- | src/styles/dmn.css | 121L |
| -rw-r--r-- | src/styles/flow.css | 346L |
| -rw-r--r-- | src/styles/global.css | 1220L |
| -rw-r--r-- | src/styles/prose.css | 345L |
| -rw-r--r-- | src/styles/tokens.css | 397L |
| -rw-r--r-- | test/hero-and-shelves.test.mjs | 55L |
| -rw-r--r-- | test/homepage-mirrors.test.mjs | 40L |
| -rw-r--r-- | test/internal-links.test.mjs | 57L |
| -rw-r--r-- | test/mobile-nav.test.mjs | 46L |
| -rw-r--r-- | tsconfig.json | 5L |
| -rw-r--r-- | vendor/Active-Directory-Exploitation-Cheat-Sheet/LICENSE | 21L |
| -rw-r--r-- | vendor/PayloadsAllTheThings/LICENSE | 21L |
| -rw-r--r-- | wrangler.jsonc | 15L |
