AI Basics Deep Learning Generative AI Supervised Learning Testing ML Unsupervised Learning Web LLM Attacks

Certifications HTB Breach HTB Bruno HTB Data HTB Down HTB Forgotten HTB Lock HTB Reset HTB Scepter

Architecture

GRPC Kubernetes Web Cache Web Requests Web Service and API Attacks Websockets

Authentication

JSON Web Token Oauth Session Puzzling Session Security

Businss-Logic

Logic Bugs Race Conditions

Client-Side

CORS Misconfigurations CSRF Token Bypass CSRF Execution After Redirect Same Origin Policy XSS Attacks XSS

Injection

Command Injections Django SSTI Jinja2 SSTI Time Based Blind SQLi Union SQL injection XSLT

Reports

Broken Access Control Bussines Logic CORS IDOR Open Redirect OSINT Path Traversal SQLi SSRF WAF Bypass XSS

Server-Side

DNS Rebinding Havoc SSRF with RCE Server Side Attacks SSRF

Active-Directory

Bloodhound Certifried Cross Forest Attacks Cross Forest Trust Abuse ESC1 ESC10 ESC11 ESC2 ESC3 ESC4 ESC5 ESC6 ESC7 ESC8 ESC9 Extrasids Attack Intra Forest Attacks Kerberos Ntlm Relay PERSIST1 PKINIT Powerview Sharpview

C2-Sliver

Essentials impersonation lateral movement persistance pivot privilege escalation

Networking

Docker Enumeration Ligolo Net Commands NetExec Networking SSH

Privilege-Escalation

Credential Hunting Credentials Essentials Linux Privilege Escalation

Setups

WSL2 VPN Working

SQL

MSSQL Attacks MSSQL Studio SQL

Web

Command Injection Fuzzing LFI SSRF SSTI XEE XSS

Windows

Credentials Enumeration Essentials Exchange Mimikatz Net Commands Windows Lateral Movement Windows Privilege Escalation

Elastic Search Git RCE via Git clone Linux Adm Group Linux Path Injection Linux Staff Group NFS Impersonation Screenshot Capturing Snap Package PE

Forward Shell JWT Token Creator LDAP Data Exfil pbkdf2 Tcp Server Client Xpath Data Exfil

ADCS Bloodhound CE Certificate Templates DACL DCSync DNSAdmins DPAPI GPOs Hashes from .vhd Interesting Groups Kerberos LAPS LDAP MSSQL Ntlm Relay PFX file Print Operators RBCD Shadow Credentials User Account Control User Enumeration

Questions?

Got any questions or want to connect?

hello@mcz3n.com

Home / Content / Blog

Blog Content

Browse all Blog content

Blog

Certifications

HTB Breach

HTB Bruno

HTB Data

HTB Down

HTB Forgotten

HTB Lock

HTB Reset

HTB Scepter