Exploitation - Revision history

Quetzalcoatl: /* Cross-site scripting (XSS) */

2025-07-22T17:08:51Z

Cross-site scripting (XSS)

← Older revision		Revision as of 17:08, 22 July 2025
Line 18:		Line 18:

	=== Cross-site scripting (XSS) ===		=== Cross-site scripting (XSS) ===
			* https://github.com/hahwul/dalfox
	* https://github.com/s0md3v/XSStrike		* https://github.com/s0md3v/XSStrike
	* https://github.com/mandatoryprogrammer/xsshunter		* https://github.com/mandatoryprogrammer/xsshunter

Booda: /* Payloads */

2023-08-01T14:33:46Z

Payloads

← Older revision		Revision as of 14:33, 1 August 2023
Line 3:		Line 3:
	* https://github.com/swisskyrepo/PayloadsAllTheThings		* https://github.com/swisskyrepo/PayloadsAllTheThings
	* https://github.com/payloadbox		* https://github.com/payloadbox
			* WAF bypass payloads: https://github.com/waf-bypass-maker/waf-community-bypasses

	=== Metasploit ===		=== Metasploit ===

Booda: /* Cross-site scripting (XSS) */

2023-07-29T23:59:31Z

Cross-site scripting (XSS)

← Older revision		Revision as of 23:59, 29 July 2023
Line 18:		Line 18:
	=== Cross-site scripting (XSS) ===		=== Cross-site scripting (XSS) ===
	* https://github.com/s0md3v/XSStrike		* https://github.com/s0md3v/XSStrike
	*https://github.com/mandatoryprogrammer/xsshunter		* https://github.com/mandatoryprogrammer/xsshunter
			* https://www.ired.team/offensive-security-experiments/offensive-security-cheetsheets/sql-injection-xss-playground#xss

	=== Command Injection ===		=== Command Injection ===

Booda: /* SQL injection (SQLi) */

2023-07-29T23:59:10Z

SQL injection (SQLi)

← Older revision		Revision as of 23:59, 29 July 2023
Line 14:		Line 14:
	* Tamper agent scripts for sqlmap (WAF bypass): https://forum.bugcrowd.com/t/sqlmap-tamper-scripts-sql-injection-and-waf-bypass/423		* Tamper agent scripts for sqlmap (WAF bypass): https://forum.bugcrowd.com/t/sqlmap-tamper-scripts-sql-injection-and-waf-bypass/423
	* https://github.com/r0oth3x49/ghauri		* https://github.com/r0oth3x49/ghauri
			* SQL Injection & XSS Playground: https://www.ired.team/offensive-security-experiments/offensive-security-cheetsheets/sql-injection-xss-playground#classic-sql-injection

	=== Cross-site scripting (XSS) ===		=== Cross-site scripting (XSS) ===

Booda: /* Metasploit */

2023-07-28T19:14:13Z

Metasploit

← Older revision		Revision as of 19:14, 28 July 2023
Line 5:		Line 5:

	=== Metasploit ===		=== Metasploit ===
	* [https://docs.metasploit.com/docs/using-metasploit/getting-started/nightly-installers.html ~~Install on server]~~		* Install on server: https://docs.metasploit.com/docs/using-metasploit/getting-started/nightly-installers.html

	=== Public exploits ===		=== Public exploits ===

Booda at 18:36, 26 July 2023

2023-07-26T18:36:14Z

← Older revision		Revision as of 18:36, 26 July 2023
Line 24:		Line 24:
	=== SSRF ===		=== SSRF ===
	* https://github.com/swisskyrepo/SSRFmap		* https://github.com/swisskyrepo/SSRFmap

	~~= Destruction =~~
	There may be times during a hacktivist operation when you come to the end of your hack, you've fully compromised your target, exfiltrated everything you can/want and now before finally leaving the network and leaking all the targets secrets online you want to cause chaos and destruction. As was seen by Guacamaya where they used <code>sdelete64.exe -accepteula -r -s C:\*</code> to wipe systems attached to Pronicos domain you might also want to do the same for Linux and Windows systems in your operations, maybe you want to recursively print a text file with your manifesto across a system/network, encrypt files beyond recovery or just delete everything.

	~~See [[Chaos and Destruction]] for different ways to achieve this!~~

Booda: /* Destruction */

2023-07-24T21:21:48Z

Destruction

← Older revision		Revision as of 21:21, 24 July 2023
Line 26:		Line 26:

	= Destruction =		= Destruction =
	There may be times during a hacktivist operation when you come to the end of your hack, you've fully compromised your target, exfiltrated everything you can/want and now before finally leaving the network and leaking all the targets secrets online you want to cause chaos and destruction. As was seen by Guacamaya where they used <code>sdelete64.exe -accepteula -r -s C:\*</code> to wipe systems attached to Pronicos domain you might also want to do the same for Linux and ~~windows~~ systems in your operations, maybe you want to recursively print a text file with your manifesto across a system/network, encrypt files beyond recovery or just delete everything.		There may be times during a hacktivist operation when you come to the end of your hack, you've fully compromised your target, exfiltrated everything you can/want and now before finally leaving the network and leaking all the targets secrets online you want to cause chaos and destruction. As was seen by Guacamaya where they used <code>sdelete64.exe -accepteula -r -s C:\*</code> to wipe systems attached to Pronicos domain you might also want to do the same for Linux and Windows systems in your operations, maybe you want to recursively print a text file with your manifesto across a system/network, encrypt files beyond recovery or just delete everything.

	See [[Chaos and Destruction]] for different ways to achieve this!		See [[Chaos and Destruction]] for different ways to achieve this!

Booda: /* Destruction */

2023-07-24T21:16:35Z

Destruction

← Older revision		Revision as of 21:16, 24 July 2023
Line 26:		Line 26:

	= Destruction =		= Destruction =
	There may be times during a hacktivist operation when you come to an end of your hack, you've fully compromised ~~the~~ target, exfiltrated everything you can/want and now before finally leaving the network and leaking all the targets secrets online you want to cause chaos and destruction. As was seen by Guacamaya where they used <code>sdelete64.exe -accepteula -r -s C:\*</code> to wipe systems attached to Pronicos domain you might also want to do the same for Linux and windows systems in your operations, maybe you want to recursively print a text file with your manifesto across a system/network, encrypt files beyond recovery or just delete everything.		There may be times during a hacktivist operation when you come to the end of your hack, you've fully compromised your target, exfiltrated everything you can/want and now before finally leaving the network and leaking all the targets secrets online you want to cause chaos and destruction. As was seen by Guacamaya where they used <code>sdelete64.exe -accepteula -r -s C:\*</code> to wipe systems attached to Pronicos domain you might also want to do the same for Linux and windows systems in your operations, maybe you want to recursively print a text file with your manifesto across a system/network, encrypt files beyond recovery or just delete everything.

	See [[Chaos and Destruction]] for different ways to achieve this!		See [[Chaos and Destruction]] for different ways to achieve this!

Booda: Destruction

2023-07-24T20:13:39Z

Destruction

← Older revision		Revision as of 20:13, 24 July 2023
Line 24:		Line 24:
	=== SSRF ===		=== SSRF ===
	* https://github.com/swisskyrepo/SSRFmap		* https://github.com/swisskyrepo/SSRFmap

			= Destruction =
			There may be times during a hacktivist operation when you come to an end of your hack, you've fully compromised the target, exfiltrated everything you can/want and now before finally leaving the network and leaking all the targets secrets online you want to cause chaos and destruction. As was seen by Guacamaya where they used <code>sdelete64.exe -accepteula -r -s C:\*</code> to wipe systems attached to Pronicos domain you might also want to do the same for Linux and windows systems in your operations, maybe you want to recursively print a text file with your manifesto across a system/network, encrypt files beyond recovery or just delete everything.

			See [[Chaos and Destruction]] for different ways to achieve this!

Booda at 02:30, 22 April 2023

2023-04-22T02:30:21Z

← Older revision		Revision as of 02:30, 22 April 2023
Line 17:		Line 17:
	=== Cross-site scripting (XSS) ===		=== Cross-site scripting (XSS) ===
	* https://github.com/s0md3v/XSStrike		* https://github.com/s0md3v/XSStrike
			*https://github.com/mandatoryprogrammer/xsshunter

	=== Command Injection ===		=== Command Injection ===
	* https://github.com/commixproject/commix		* https://github.com/commixproject/commix

			=== SSRF ===
			* https://github.com/swisskyrepo/SSRFmap