Content Overview

Browse all available content organized by category

AI

AI Basics

Deep Learning

Generative AI

Supervised Learning

Testing ML

Unsupervised Learning

Web LLM Attacks

Blog

Certifications

HTB Breach

HTB Bruno

HTB Data

HTB Down

HTB Forgotten

HTB Lock

HTB Reset

HTB Scepter

Bug Bounty

Architecture – GRPC

Architecture – Kubernetes

Architecture – Web Cache

Architecture – Web Requests

Architecture – Web Service And API Attacks

Architecture – Websockets

Authentication – JSON Web Token

Authentication – Oauth

Authentication – Session Puzzling

Authentication – Session Security

Authorization – 403 Bypass

Business Logic – Logic Bugs

Business Logic – Race Conditions

Client Side – CORS Misconfigurations

Client Side – CSRF Token Bypass

Client Side – CSRF

Client Side – Execution After Redirect

Client Side – Same Origin Policy

Client Side – XSS Attacks

Client Side – XSS

Injection – Command Injections

Injection – Django SSTI

Injection – Jinja2 SSTI

Injection – Time Based Blind SQLi

Injection – Union SQL Injection

Injection – XSLT

Reports – Broken Access Control

Reports – Bussines Logic

Reports – CORS

Reports – IDOR

Reports – Info Disclosure

Reports – OSINT

Reports – Open Redirect

Reports – Path Traversal

Reports – Race Conditions

Reports – SQLi

Reports – SSRF

Reports – WAF Bypass

Reports – XSS

Server Side – DNS Rebinding

Server Side – Havoc SSRF With RCE

Server Side – SSRF

Server Side – Server Side Attacks

Cheatsheets

Active Directory – Bloodhound

Active Directory – Certifried

Active Directory – Cross Forest Attacks

Active Directory – Cross Forest Trust Abuse

Active Directory – ESC1

Active Directory – ESC10

Active Directory – ESC11

Active Directory – ESC2

Active Directory – ESC3

Active Directory – ESC4

Active Directory – ESC5

Active Directory – ESC6

Active Directory – ESC7

Active Directory – ESC8

Active Directory – ESC9

Active Directory – Extrasids Attack

Active Directory – Intra Forest Attacks

Active Directory – Kerberos

Active Directory – Ntlm Relay

Active Directory – PERSIST1

Active Directory – PKINIT

Active Directory – Powerview Sharpview

C2 Sliver – Essentials

C2 Sliver – Impersonation

C2 Sliver – Lateral Movement

C2 Sliver – Persistance

C2 Sliver – Pivot

C2 Sliver – Privilege Escalation

Networking – Docker

Networking – Enumeration

Networking – Ligolo

Networking – Net Commands

Networking – NetExec

Networking – Networking

Networking – SSH

Privilege Escalation – Credential Hunting

Privilege Escalation – Credentials

Privilege Escalation – Essentials

Privilege Escalation – Linux Privilege Escalation

SQL – MSSQL Attacks

SQL – MSSQL Studio

SQL – SQL

Setups – WSL2 VPN Working

Web – Command Injection

Web – Fuzzing

Web – LFI

Web – SSRF

Web – SSTI

Web – XEE

Web – XSS

Windows – Credentials

Windows – Enumeration

Windows – Essentials

Windows – Exchange

Windows – Mimikatz

Windows – Net Commands

Windows – Windows Lateral Movement

Windows – Windows Privilege Escalation

Linux

Elastic Search

Git RCE Via Git Clone

Linux Adm Group

Linux Path Injection

Linux Staff Group

NFS Impersonation

Screenshot Capturing

Snap Package PE

Scripts

Forward Shell

JWT Token Creator

LDAP Data Exfil

Tcp Server Client

Xpath Data Exfil

Pbkdf2

Windows