Conceptos
Cada técnica en su categoría. Índice temático: busca arriba o desplázate por las categorías.
grep>
Inyección SQL9
Blind SQL Injection (Boolean-based)
WebMultiError-based SQL Injection
WebMultiMagento Shoplift (CVE-2015-1397)
WebMultiOut-of-Band SQL Injection
WebMultiSQL Injection Authentication Bypass
WebMultiSQL Injection to File Write (INTO OUTFILE)
WebMultiSQL Truncation
WebMultiUnion-based SQL Injection
WebMultiWP Advanced Search SQLi (CVE-2024-9796)
WebMultiLFI / RFI / Path Traversal17
Arbitrary File Read
WebMultiColdFusion directory traversal (CVE-2010-2861)
WebMultiDirectory traversal in Argus Surveillance DVR (CVE-2018-13388)
WebWindowsGhost file read via symlink (CVE-2023-40028)
WebMultiGrafana path traversal (CVE-2021-43798)
WebMultiJenkins CLI file read (CVE-2024-23897)
WebMultiLFI to RCE via phpinfo() Race Condition
WebMultiLocal File Inclusion (LFI) & Path Traversal
WebMultiLog Poisoning (LFI to RCE)
WebMultiNull Byte Injection (%00) in LFI
WebMultiPath traversal in aiohttp (CVE-2024-23334)
WebMultiPath traversal in php-spx (CVE-2024-42007)
WebMultiPHAR Deserialization (LFI to RCE)
WebMultiPHP Filter Wrapper (Source Disclosure)
WebMultiPHP zip:// Wrapper RCE
WebMultiRemote File Inclusion (RFI) to RCE
WebMultiWordPress plugin LFI
WebMultiSubida de ficheros a RCE11
Cacti RCE (CVE-2024-25641)
WebMultiFile Upload Bypass (Content-Type)
WebMultiFile Upload Bypass (Magic Bytes)
WebMultiFile Upload to RCE
WebMultiFile Upload via WebDAV (PUT + MOVE)
WebWindowsIIS 6.0 WebDAV (CVE-2017-7269)
WebWindowsPluck CMS: module RCE (CVE-2023-50564)
WebMultiRCE in LimeSurvey via plugin upload
WebMultiSubrion CMS: file upload to RCE (CVE-2018-19422)
WebMultiweb.config RCE on IIS
WebWindowsWordPress theme editor RCE
WebMultiInyección de comandos3
Inyección de plantillas (SSTI)6
Deserialización insegura6
Inyección de código / eval()6
XSS8
SSRF (Server-Side Request Forgery)1
XXE (XML External Entity)1
Inyección NoSQL1
Inyección LDAP1
Inyección XPath1
JWT y tokens3
Control de acceso / IDOR12
Access-Control Bypass (X-Forwarded-For)
WebMultiGraphQL Abuse
WebMultiHost Header Injection
WebMultiHTTP Request Smuggling
WebMultiHTTP Verb Tampering
WebMultiIDOR / Broken Access Control
WebMultiMass Assignment
WebMultiOAuth / SAML Abuse
WebMultiPadding Oracle Attack
WebMultiPHP Type Juggling
WebMultiPrototype Pollution
WebMultiRace Condition (TOCTOU)
WebMultiAtaques del lado cliente (CSRF, CORS, sesión)8
Exposición de código y secretos4
RCE en aplicaciones y servicios11
Chrome remote debugger abuse
InfraestructuraMultiDrupalgeddon (Drupal RCE)
WebMultiDuplicati login bypass
InfraestructuraMultiExhibitor unauthenticated RCE (CVE-2019-5029)
WebMultiGlassFish 4.x directory traversal (CVE-2017-1000028)
WebMultiH2 Database RCE via JNI
InfraestructuraMultiLibreNMS: add-device RCE
WebMultiLog4Shell (CVE-2021-44228)
WebMultiOpenfire auth bypass (CVE-2023-32315)
WebMultiRCE in HashiCorp Consul (service registration)
InfraestructuraMultiSplunk Universal Forwarder (RCE)
InfraestructuraMultiRCE en Git, CI/CD y despliegue6
Enumeración web y fuerza bruta8
Brute Force
WebMultiIIS 8.3 short-name enumeration (tilde)
WebWindowsInternal port discovery via Squid
InfraestructuraMultiSupport portal abuse (osTicket)
WebMultiTargeted password bruteforce (cewl, custom wordlists)
WebMultiUsername enumeration
WebMultiVirtual Host Fuzzing
WebMultiWeb Content Discovery (Directory Fuzzing)
WebMultiAbuso de ACLs de AD16
Account Operators group abuse
Active DirectoryWindowsACL Abuse (DACL)
Active DirectoryWindowsAD Recycle Bin group abuse
Active DirectoryWindowsADCS ESC1 (Arbitrary SAN)
Active DirectoryWindowsADCS ESC8 (relay NTLM a AD CS)
Active DirectoryWindowsADCS ESC9 (No Security Extension)
Active DirectoryWindowsDnsAdmins Abuse (ServerLevelPluginDll)
Active DirectoryWindowsForceChangePassword
Active DirectoryWindowsGenericAll
Active DirectoryWindowsGenericWrite
Active DirectoryWindowsGPO abuse (SharpGPOAbuse, Restricted Groups)
Active DirectoryWindowsLAPS (Local Administrator Password Solution)
Active DirectoryWindowsRBCD (Resource-Based Constrained Delegation)
Active DirectoryWindowsShadow Credentials
Active DirectoryWindowsWriteDACL
Active DirectoryWindowsWriteOwner
Active DirectoryWindowsAtaques Kerberos13
AS-REP Roasting
Active DirectoryWindowsConstrained Delegation
Active DirectoryWindowsGolden Ticket
Active DirectoryWindowsKerberoasting
Active DirectoryWindowsKerberos Double Hop
Active DirectoryWindowsKerberos user enumeration
Active DirectoryWindowsOverpass-the-Hash
Active DirectoryWindowsPass-the-Ticket
Active DirectoryWindowssAMAccountName Spoofing (noPac)
Active DirectoryWindowsSID History Abuse
Active DirectoryWindowsSilver Ticket
Active DirectoryWindowsTargeted Kerberoasting (forged SPN)
Active DirectoryWindowsUnconstrained Delegation
Active DirectoryWindowsEnumeración de AD5
Credenciales y post-explotación AD16
Authentication Coercion (PetitPotam / PrinterBug)
Active DirectoryWindowsCredential leak in PowerShell history
Active DirectoryWindowsDCSync
Active DirectoryWindowsDPAPI Secrets
Active DirectoryWindowsDumping credentials from LSASS (Mimikatz)
Active DirectoryWindowsEvent Log Readers: credentials in the security log
InfraestructuraWindowsGPP cpassword (MS14-025)
Active DirectoryWindowsLectura de contraseñas gMSA
Active DirectoryWindowsLLMNR / NBT-NS Poisoning
Active DirectoryWindowsNTDS.dit Dump
Active DirectoryWindowsNTLM Relay
Active DirectoryWindowsNTLMv2 coercion with SCF/URL (IconFile UNC)
Active DirectoryWindowsPass-the-Hash
Active DirectoryWindowsSAM & LSA Secrets Dump
Active DirectoryWindowsSaved Credentials on Windows (cmdkey and runas)
InfraestructuraWindowsWMI lateral movement
Active DirectoryWindowsTokens y Potato (Windows)8
churrasco (token kidnapping)
InfraestructuraWindowsFullPowers (restore token privileges)
InfraestructuraWindowsGodPotato
InfraestructuraWindowsPrintSpoofer
InfraestructuraWindowsRDP Session Hijacking (tscon) and Pass-the-Hash
InfraestructuraWindowsRunasCs
InfraestructuraWindowsSeImpersonate and Potato attacks
InfraestructuraWindowsSeLoadDriverPrivilege (Print Operators) to SYSTEM
InfraestructuraWindowsServicios, tareas y privilegios (Windows)11
AlwaysInstallElevated abuse
InfraestructuraWindowsAutoLogon credentials
InfraestructuraWindowsDLL Hijacking
InfraestructuraWindowsGUI privesc (Save As / File Open) in elevated apps
InfraestructuraWindowsicacls: rewriting NTFS permissions to read a file
InfraestructuraWindowsInsecure service permissions (Windows)
InfraestructuraWindowsScheduled task hijacking (Windows)
InfraestructuraWindowsSeBackupPrivilege
InfraestructuraWindowsSeManageVolumePrivilege and DLL hijacking
InfraestructuraWindowsServer Operators group abuse
Active DirectoryWindowsUnquoted Service Path
InfraestructuraWindowsExploits locales y de kernel (Windows)11
Decrypting Solar-PuTTY sessions
InfraestructuraMultielectron-updater signature bypass
InfraestructuraWindowsescalation via VSStandardCollectorService150 (CVE-2024-20656)
InfraestructuraWindowsMoniker Link in Microsoft Outlook (CVE-2024-21413)
InfraestructuraWindowsPortableKanban password decryption
InfraestructuraWindowsPrintNightmare
Active DirectoryWindowsReversible password storage
InfraestructuraMultiSMBv2 srv2.sys (CVE-2009-3103 / MS09-050)
InfraestructuraWindowsStack buffer overflow (stack BOF)
InfraestructuraWindowsUAC Bypass
InfraestructuraWindowsWindows kernel exploit
InfraestructuraWindowssudo, SUID y capabilities15
Abusing SUID binaries
InfraestructuraLinuxAbusing SUID screen
InfraestructuraLinuxArbitrary read with 7-Zip @listfile
InfraestructuraLinuxcap_setuid capability abuse
InfraestructuraLinuxcap_sys_ptrace capability abuse
InfraestructuraLinuxdosbox SUID abuse
InfraestructuraLinuxEscalation via sudo mosh-server
InfraestructuraLinuxLocal privilege escalation in sudo via chroot (CVE-2025-32463)
InfraestructuraLinuxrsync privilege escalation via sudo
InfraestructuraLinuxsetfacl abuse via sudo
InfraestructuraLinuxsudo escape with GTFOBins
InfraestructuraLinuxsudo make: Makefile injection
InfraestructuraLinuxsudo over a writable script (or directory)
InfraestructuraLinuxSymlink abuse in a sudo script
InfraestructuraLinuxUnrestricted sudo (ALL : ALL) ALL
InfraestructuraLinuxCron y tareas programadas5
Grupos y contenedores6
Hijacking de librerías, PATH y systemd6
Ficheros escribibles y otros vectores5
Exploits de kernel y escape de shell (Linux)4
Enumeración y espionaje local6
Bases de datos11
Adminer + LOAD DATA LOCAL INFILE
WebMultiCommand execution in MSSQL (xp_cmdshell)
InfraestructuraWindowsIMPERSONATE in MSSQL (EXECUTE AS LOGIN)
InfraestructuraMultiMSSQL Linked Servers
InfraestructuraMultiMySQL UDF abuse (raptor_udf2)
InfraestructuraLinuxOracle TNS (enumeration and RCE)
InfraestructuraMultiPostgreSQL RCE via COPY ... PROGRAM (CVE-2019-9193)
InfraestructuraLinuxRedis enumeration
InfraestructuraMultiRedis RCE via MODULE LOAD
InfraestructuraLinuxRedis RCE via rogue server (replication)
InfraestructuraLinuxRogue MySQL server (LOAD DATA LOCAL INFILE)
InfraestructuraMultiEnumeración de red y servicios14
Anonymous FTP
InfraestructuraMultiDNS zone transfer (AXFR)
InfraestructuraMultiFrom version to exploit
InfraestructuraMultiIdent user enumeration
InfraestructuraLinuxIKE Aggressive Mode + PSK cracking
InfraestructuraMultiIMAP / POP3 Enumeration
InfraestructuraMultiIPMI Hash Dump (CVE-2013-4786)
InfraestructuraMultiPort Scanning (Nmap)
InfraestructuraMultiR-Services Abuse (rlogin, rsh, rexec)
InfraestructuraLinuxrsync Enumeration
InfraestructuraLinuxSMTP open relay
InfraestructuraMultiSMTP user enumeration (VRFY/EXPN/RCPT)
InfraestructuraMultiSNMP enumeration
InfraestructuraMultiSSH user enumeration (CVE-2018-15473)
InfraestructuraLinuxCracking de hashes y ficheros8
Cisco Type 7 Password Decode
InfraestructuraMultiCracking /etc/shadow
InfraestructuraLinuxCracking a password-protected PDF
InfraestructuraMultiCracking protected files (.zip, .pfx, .kdbx)
InfraestructuraMultiHash Cracking
InfraestructuraMultiKeePass Cracking
InfraestructuraMultiPassword Mutation & Custom Wordlists
Active DirectoryMultiVNC Password Decryption
InfraestructuraWindowsAcceso a credenciales (spray, reutilización, hunting)4
Esteganografía y análisis de ficheros7
.NET Reversing
InfraestructuraWindowsAPK analysis (reversing Android apps)
WebMultiCode execution in LibreOffice via floating frames (CVE-2023-2255)
InfraestructuraMultiData hidden in images (strings/steganography)
InfraestructuraMultiDecompiling a .jar (secrets in bytecode)
InfraestructuraMultiDepix: reversing pixelation
InfraestructuraMultiRCE via LibreOffice macros (ODT)
WebMultiParsers de ficheros vulnerables3
Exploits de servicios de red7
clamav-milter black-hole-mode RCE (CVE-2007-4560)
InfraestructuraLinuxCUPS chain (CVE-2024-47176)
InfraestructuraLinuxEternalBlue (MS17-010)
InfraestructuraWindowsOpenSMTPD RCE (CVE-2020-7247)
InfraestructuraLinuxProFTPD mod_copy (CVE-2015-3306)
InfraestructuraLinuxRCE on an exposed gdbserver
InfraestructuraLinuxWinRM over SSL/TLS with certificate authentication
Active DirectoryWindowsTúneles y pivoting11
Chisel Pivoting (SOCKS5 tunnel)
InfraestructuraMultiDNS Tunneling
InfraestructuraMultiDynamic Port Forwarding (SOCKS)
InfraestructuraMultiICMP Tunneling
InfraestructuraMultiLocal port forwarding (SSH tunnel)
InfraestructuraMultiPivoting with Ligolo-ng
InfraestructuraMultiPivoting with sshuttle
InfraestructuraLinuxPort Forwarding with netsh (portproxy)
InfraestructuraWindowsPort Relay with socat
InfraestructuraMultiRemote Port Forwarding
InfraestructuraMultiSocksOverRDP Pivoting (double hop over RDP)
InfraestructuraWindowsOfuscación y evasión de payloads1
General4
Sin resultados