Hacking Web Applications - Revision history

Booda at 17:38, 11 April 2024

2024-04-11T17:38:24Z

← Older revision		Revision as of 17:38, 11 April 2024
Line 106:		Line 106:
	==== Exploit Discovery ====		==== Exploit Discovery ====

	==== ~~Payloads~~ ====		==== APIs ====

	==== Open Redirects ====		==== Open Redirects ====

Booda: Implementing Jason Haddix Methodology geared towards hacktivists

2024-04-11T17:37:00Z

Implementing Jason Haddix Methodology geared towards hacktivists

← Older revision		Revision as of 17:37, 11 April 2024
Line 1:		Line 1:
	'''NOTE:''' This page is under construction		'''NOTE:''' This page is under construction
			== Web Application Hacking Methodology - Overview ==

			=== Information Gathering - OSINT ===

			==== Target Organization ====

			===== Basic Information =====

			====== Name ======

			====== Physical Address ======

			====== Employee Count ======

			====== Employee Roles ======

			====== Target Company TLDs ======

			====== Company Acquisitions ======

			====== Social Media Presence ======

			====== Revenue ======

			====== Leadership ======

			====== Job Openings ======

			==== Organization Employees ====

			===== Email Addresses =====

			===== Phone Numbers =====

			===== Social Media Profiles =====

			===== Breached Emails =====

			===== Breached Usernames =====

			===== Breached Passwords =====

			===== Curriculum Vitae Discovery =====

			=== Reconnaissance ===

			==== Passive ====

			===== Dorking =====

			===== DNS Enumeration =====

			===== Domain Information =====

			===== Certificate Information =====

			===== Web Stack Technology Identification =====

			===== Port Scanning & Service Analysis =====

			===== Discovering Historical Data =====

			===== ASN Enumeration =====

			==== Active ====

			===== Security Control Identification =====

			===== Port Scanning & Service Enumeration =====

			===== Subdomain Enumeration =====

			===== Web Stack Technology Identification =====

			===== Walking the Application =====

			===== Web Crawling =====

			===== Source Code Analysis - JavaScript =====

			=== Content Discovery ===

			===== Subdomain Brute-forcing =====

			===== Directory Brute-forcing =====

			===== Parameter Fuzzing =====

			===== Endpoint Analysis =====

			=== Vulnerability Scanning ===

			==== CVE Discovery ====

			==== Misconfiguration Discovery ====

			==== Common Vulns ====

			==== Content Management System & Plugins ====

			=== Application Analysis ===

			==== Bypassing Security Controls ====

			==== Exploit Discovery ====

			==== Payloads ====

			==== Open Redirects ====

			==== IDOR ====

			==== Authentication ====

			==== File Upload Vulnerabilities ====

			=== Low Hanging Fruits ===

			==== S3 Buckets ====

			==== Subdomain Takeover ====

			==== Exposed Assets ====

			==== Injections ====

			==== Default Credentials ====

			==== Exposed Secrets ====

			=== Tools ===
			{\| class="wikitable" style="width:600px"
			\|-
			! Tool !! Description !! Link
			\|-
			\| Example \|\| Example \|\| Example
			\|-
			\| Example \|\| Example \|\| Example
			\|-
			\| Example \|\| Example \|\| Example
			\|}

Booda: Replaced content with "'''NOTE:''' This page is under construction"

2023-09-23T16:02:54Z

Replaced content with "'''NOTE:''' This page is under construction"

← Older revision		Revision as of 16:02, 23 September 2023
Line 1:		Line 1:
	'''NOTE:''' This page is under construction		'''NOTE:''' This page is under construction

	~~=== Reconnaissance ===~~

	~~==== Passive ====~~

	~~===== Dorking =====~~

	~~===== DNS Enumeration =====~~

	~~===== Domain Information =====~~

	~~===== Certificate Information =====~~

	~~===== Web Stack Technology Identification =====~~

	~~===== Port Scanning & Service Analysis =====~~

	~~===== Discovering Historical Data =====~~

	~~===== ASN Enumeration =====~~

	~~==== Active ====~~

	~~===== Security Control Identification =====~~

	~~===== Port Scanning & Service Enumeration =====~~

	~~===== Subdomain Enumeration =====~~

	~~===== Web Stack Technology Identification =====~~

	~~===== Walking the Application =====~~

	~~===== Web Crawling =====~~

	~~===== Source Code Analysis - JavaScript =====~~

	~~=== Content Discovery ===~~

	~~===== Subdomain Brute-forcing =====~~

	~~===== Directory Brute-forcing =====~~

	~~===== Parameter Fuzzing =====~~

	~~===== Endpoint Analysis =====~~

	~~=== Vulnerability Scanning ===~~

	~~==== CVE Discovery ====~~

	~~==== Misconfiguration Discovery ====~~

	~~==== Common Vulns ====~~

	~~==== Content Management System & Plugins ====~~

	~~=== Application Analysis ===~~

	~~==== Bypassing Security Controls ====~~

	~~==== Exploit Discovery ====~~

	~~==== Payloads ====~~

	~~==== Open Redirects ====~~

	~~==== IDOR ====~~

	~~==== Authentication ====~~

	~~==== File Upload Vulnerabilities ====~~

	~~=== Low Hanging Fruits ===~~

	~~==== S3 Buckets ====~~

	~~==== Subdomain Takeover ====~~

	~~==== Exposed Assets ====~~

	~~==== Injections ====~~

	~~==== Default Credentials ====~~

	~~==== Exposed Secrets ====~~

	~~=== Tools ===~~
	~~{\| class="wikitable" style="width:600px"~~
	\|-
	~~! Tool !! Description !! Link~~
	\|-
	~~\| Example \|\| Example \|\| Example~~
	\|-
	~~\| Example \|\| Example \|\| Example~~
	\|-
	~~\| Example \|\| Example \|\| Example~~
	\|}

Booda at 15:52, 23 September 2023

2023-09-23T15:52:42Z

← Older revision		Revision as of 15:52, 23 September 2023
Line 1:		Line 1:
	'''NOTE:''' This page is under construction		'''NOTE:''' This page is under construction

			=== Reconnaissance ===

			==== Passive ====

			===== Dorking =====

			===== DNS Enumeration =====

			===== Domain Information =====

			===== Certificate Information =====

			===== Web Stack Technology Identification =====

			===== Port Scanning & Service Analysis =====

			===== Discovering Historical Data =====

			===== ASN Enumeration =====

			==== Active ====

			===== Security Control Identification =====

			===== Port Scanning & Service Enumeration =====

			===== Subdomain Enumeration =====

			===== Web Stack Technology Identification =====

			===== Walking the Application =====

			===== Web Crawling =====

			===== Source Code Analysis - JavaScript =====

			=== Content Discovery ===

			===== Subdomain Brute-forcing =====

			===== Directory Brute-forcing =====

			===== Parameter Fuzzing =====

			===== Endpoint Analysis =====

			=== Vulnerability Scanning ===

			==== CVE Discovery ====

			==== Misconfiguration Discovery ====

			==== Common Vulns ====

			==== Content Management System & Plugins ====

			=== Application Analysis ===

			==== Bypassing Security Controls ====

			==== Exploit Discovery ====

			==== Payloads ====

			==== Open Redirects ====

			==== IDOR ====

			==== Authentication ====

			==== File Upload Vulnerabilities ====

			=== Low Hanging Fruits ===

			==== S3 Buckets ====

			==== Subdomain Takeover ====

			==== Exposed Assets ====

			==== Injections ====

			==== Default Credentials ====

			==== Exposed Secrets ====

			=== Tools ===
			{\| class="wikitable" style="width:600px"
			\|-
			! Tool !! Description !! Link
			\|-
			\| Example \|\| Example \|\| Example
			\|-
			\| Example \|\| Example \|\| Example
			\|-
			\| Example \|\| Example \|\| Example
			\|}

Booda: Created page with "'''NOTE:''' This page is under construction"

2023-09-20T21:04:42Z

Created page with "'''NOTE:''' This page is under construction"

New page

'''NOTE:''' This page is under construction