Simple Commands
Notes and commands for Simple Commands.
Web
Request forgery
Notes and commands for Request forgery.
In GET Parameters
Notes and commands for In GET Parameters.
In Cookie
Notes and commands for In Cookie.
SSRF
Notes and commands for SSRF.
File Injection
Notes and commands for File Injection.
Blind Injection
Notes and commands for blind Injection.
Request Forgery (Web Tampering)
Notes and commands for Request Forgery (Web Tampering).
Tools
Notes and commands for Tools.
Dir Fuzzing
Notes and commands for Dir Fuzzing.
Defense
Notes and commands for Defense.
2min_rule
Notes and commands for 2min_rule.
Using GET
Notes and commands for Using GET.
u_token != session_token
CSRF token is not bound to the session token.
Token==Cookie
Notes and commands for Token==Cookie.
Token tied to cookie
CSRF token tied to a cookie (not necessarily the session cookie).
Strict Gadgets
Notes and commands for Strict Gadgets.
Removing
Notes and commands for Removing.
Ref. XSS
Notes and commands for Ref. XSS.
Defense
Notes and commands for Defense.
CORS: TLS Break
Notes and commands for CORS: TLS Break.
CORS: Subdomains
Notes and commands for CORS: Subdomains.
CORS: NULL
Notes and commands for CORS: NULL.
Basic (CORS: True)
Notes and commands for Basic (CORS: True).
Unions
Notes and commands for Unions.
SQL in PHP
Notes and commands for SQL in PHP.
Prevention
Notes and commands for Prevention.
Insecure Direct Object References (IDOR
Notes and commands for Insecure Direct Object References (IDOR.
Injection
Notes and commands for Injection.
General SQL
Notes and commands for General SQL.
Fingerprinting
Notes and commands for Fingerprinting.
Phishing
Notes and commands for Phishing.
Defacing
Notes and commands for Defacing.
Tools
Notes and commands for Tools.
Prevention
Notes and commands for Prevention.
Bind-XSS-Cookie Stealing
Notes and commands for Bind-XSS-Cookie Stealing.
Basic Payloads
Notes and commands for Basic Payloads.
NIS2 Readiness Consulting Site
Next.js site for NIS2 consulting with a quick-check API, MDX blog, and configurable branding.
Example Lab: Initial Recon & Exploit
Baseline workflow for recon, foothold, and post-exploitation notes.