hacktricks

browser-extension-pentesting-methodology

Translated ['src/pentesting-web/browser-extension-pentesting-methodology

2025-04-13 15:54:55 +00:00

cache-deception

Translated ['src/network-services-pentesting/1883-pentesting-mqtt-mosqui

2025-03-24 11:33:52 +00:00

content-security-policy-csp-bypass

Translated ['src/generic-hacking/reverse-shells/windows.md', 'src/generi

2025-02-04 18:49:50 +00:00

dangling-markup-html-scriptless-injection

Translated ['src/binary-exploitation/arbitrary-write-2-exec/aw2exec-got-

2025-01-04 13:08:19 +00:00

deserialization

Translated ['src/backdoors/salseo.md', 'src/binary-exploitation/rop-retu

2025-04-07 02:25:12 +00:00

file-inclusion

Translated ['src/AI/AI-llm-architecture/0.-basic-llm-concepts.md', 'src/

2025-07-12 11:26:21 +00:00

file-upload

Translated ['src/backdoors/salseo.md', 'src/binary-exploitation/rop-retu

2025-04-07 02:25:12 +00:00

hacking-with-cookies

Translated ['src/pentesting-web/hacking-with-cookies/README.md'] to sw

2025-05-18 03:22:09 +00:00

http-request-smuggling

Translated ['src/mobile-pentesting/ios-pentesting/ios-pentesting-without

2025-07-12 18:08:30 +00:00

login-bypass

Translated ['src/binary-exploitation/basic-stack-binary-exploitation-met

2025-01-04 02:38:29 +00:00

pocs-and-polygloths-cheatsheet

Translated ['src/generic-hacking/reverse-shells/windows.md', 'src/generi

2025-02-04 18:49:50 +00:00

postmessage-vulnerabilities

Translated ['src/AI/AI-llm-architecture/0.-basic-llm-concepts.md', 'src/

2025-07-08 13:06:53 +00:00

saml-attacks

Translated ['src/AI/AI-llm-architecture/0.-basic-llm-concepts.md', 'src/

2025-07-08 13:06:53 +00:00

sql-injection

Translated ['src/network-services-pentesting/pentesting-mysql.md', 'src/

2025-07-14 08:42:19 +00:00

ssrf-server-side-request-forgery

Translated ['src/AI/AI-Models-RCE.md', 'src/binary-exploitation/chrome-e

2025-07-22 11:48:25 +00:00

ssti-server-side-template-injection

Translated ['src/pentesting-web/ssti-server-side-template-injection/READ

2025-03-21 09:29:27 +00:00

unicode-injection

Translated ['src/backdoors/salseo.md', 'src/binary-exploitation/rop-retu

2025-04-07 02:25:12 +00:00

web-vulnerabilities-methodology

Translated ['src/binary-exploitation/arbitrary-write-2-exec/aw2exec-got-

2025-01-04 13:08:19 +00:00

xs-search

Translated ['src/backdoors/salseo.md', 'src/binary-exploitation/rop-retu

2025-04-07 02:25:12 +00:00

xss-cross-site-scripting

Translated ['src/AI/AI-llm-architecture/0.-basic-llm-concepts.md', 'src/

2025-07-12 11:26:21 +00:00

2fa-bypass.md

Translated ['src/macos-hardening/macos-security-and-privilege-escalation

2025-01-03 06:11:33 +00:00

abusing-hop-by-hop-headers.md

Translated ['src/macos-hardening/macos-security-and-privilege-escalation

2025-01-03 06:11:33 +00:00

account-takeover.md

Translated ['src/pentesting-web/account-takeover.md'] to sw

2025-04-20 14:57:41 +00:00

bypass-payment-process.md

Translated ['src/macos-hardening/macos-security-and-privilege-escalation

2025-01-03 06:11:33 +00:00

captcha-bypass.md

Translated ['src/README.md', 'src/binary-exploitation/rop-return-oriente

2025-01-03 18:18:49 +00:00

clickjacking.md

Translated ['src/network-services-pentesting/pentesting-web/ruby-tricks.

2025-06-15 15:14:26 +00:00

client-side-path-traversal.md

Translated ['src/macos-hardening/macos-security-and-privilege-escalation

2025-01-03 06:11:33 +00:00

client-side-template-injection-csti.md

Translated ['src/generic-hacking/reverse-shells/windows.md', 'src/generi

2025-02-04 18:49:50 +00:00

command-injection.md

Translated ['src/README.md', 'src/binary-exploitation/rop-return-oriente

2025-01-03 18:18:49 +00:00

cors-bypass.md

Translated ['src/macos-hardening/macos-security-and-privilege-escalation

2025-01-03 06:11:33 +00:00

crlf-0d-0a.md

Translated ['src/pentesting-web/crlf-0d-0a.md'] to sw

2025-07-16 16:10:37 +00:00

csrf-cross-site-request-forgery.md

Translated ['src/binary-exploitation/arbitrary-write-2-exec/aw2exec-got-

2025-01-04 13:08:19 +00:00

dapps-DecentralizedApplications.md

Translated ['src/AI/AI-llm-architecture/0.-basic-llm-concepts.md', 'src/

2025-07-12 11:26:21 +00:00

dependency-confusion.md

Translated ['src/macos-hardening/macos-security-and-privilege-escalation

2025-01-03 06:11:33 +00:00

domain-subdomain-takeover.md

Translated ['src/pentesting-web/domain-subdomain-takeover.md', 'src/pent

2025-02-04 18:54:59 +00:00

email-injections.md

Translated ['src/binary-exploitation/arbitrary-write-2-exec/aw2exec-__ma

2025-01-05 22:25:17 +00:00

formula-csv-doc-latex-ghostscript-injection.md

Translated ['src/backdoors/salseo.md', 'src/binary-exploitation/rop-retu

2025-04-07 02:25:12 +00:00

grpc-web-pentest.md

Translated ['src/macos-hardening/macos-security-and-privilege-escalation

2025-01-03 06:11:33 +00:00

h2c-smuggling.md

Translated ['src/pentesting-web/h2c-smuggling.md'] to sw

2025-05-03 00:05:22 +00:00

hacking-jwt-json-web-tokens.md

Translated ['src/README.md', 'src/binary-exploitation/rop-return-oriente

2025-01-03 18:18:49 +00:00

http-connection-contamination.md

Translated ['src/macos-hardening/macos-security-and-privilege-escalation

2025-01-03 06:11:33 +00:00

http-connection-request-smuggling.md

Translated ['src/pentesting-web/http-connection-request-smuggling.md'] t

2025-07-12 22:07:56 +00:00

http-response-smuggling-desync.md

Translated ['.github/pull_request_template.md', 'src/1911-pentesting-fox

2025-01-03 03:36:40 +00:00

idor.md

Translated ['src/AI/AI-llm-architecture/0.-basic-llm-concepts.md', 'src/

2025-07-12 11:26:21 +00:00

iframe-traps.md

Translated ['.github/pull_request_template.md', 'src/1911-pentesting-fox

2025-01-03 03:36:40 +00:00

json-xml-yaml-hacking.md

Translated ['src/AI/AI-llm-architecture/1.-tokenizing.md', 'src/AI/AI-ll

2025-07-08 16:49:00 +00:00

ldap-injection.md

Translated ['src/AI/AI-llm-architecture/0.-basic-llm-concepts.md', 'src/

2025-07-08 13:06:53 +00:00

less-code-injection-ssrf.md

Translated ['src/generic-methodologies-and-resources/pentesting-wifi/ena

2025-07-15 17:14:46 +00:00

nosql-injection.md

Translated ['src/pentesting-web/nosql-injection.md'] to sw

2025-07-08 19:39:49 +00:00

oauth-to-account-takeover.md

Translated ['src/generic-methodologies-and-resources/external-recon-meth

2025-03-29 22:58:40 +00:00

open-redirect.md

Translated ['src/generic-hacking/reverse-shells/windows.md', 'src/generi

2025-02-04 18:49:50 +00:00

orm-injection.md

Translated ['src/binary-exploitation/arbitrary-write-2-exec/aw2exec-__ma

2025-01-05 22:25:17 +00:00

parameter-pollution.md

Translated ['src/AI/AI-llm-architecture/0.-basic-llm-concepts.md', 'src/

2025-07-08 13:06:53 +00:00

phone-number-injections.md

Translated ['src/binary-exploitation/arbitrary-write-2-exec/aw2exec-__ma

2025-01-05 22:25:17 +00:00

proxy-waf-protections-bypass.md

Translated ['.github/pull_request_template.md', 'src/1911-pentesting-fox

2025-01-03 03:36:40 +00:00

race-condition.md

Translated ['src/binary-exploitation/arbitrary-write-2-exec/aw2exec-__ma

2025-01-05 22:25:17 +00:00

rate-limit-bypass.md

Translated ['src/pentesting-web/rate-limit-bypass.md'] to sw

2025-07-12 14:07:50 +00:00

registration-vulnerabilities.md

Translated ['src/backdoors/salseo.md', 'src/binary-exploitation/rop-retu

2025-04-07 02:25:12 +00:00

regular-expression-denial-of-service-redos.md

Translated ['.github/pull_request_template.md', 'src/1911-pentesting-fox

2025-01-03 03:36:40 +00:00

reset-password.md

Translated ['src/pentesting-web/reset-password.md'] to sw

2025-04-13 14:42:51 +00:00

reverse-tab-nabbing.md

Translated ['src/generic-hacking/reverse-shells/windows.md', 'src/generi

2025-02-04 18:49:50 +00:00

rsql-injection.md

Translated ['src/AI/AI-llm-architecture/0.-basic-llm-concepts.md', 'src/

2025-07-08 13:06:53 +00:00

server-side-inclusion-edge-side-inclusion-injection.md

Translated ['src/generic-hacking/reverse-shells/windows.md', 'src/generi

2025-02-04 18:49:50 +00:00

timing-attacks.md

Translated ['src/pentesting-web/browser-extension-pentesting-methodology

2025-01-02 14:01:00 +00:00

uuid-insecurities.md

Translated ['.github/pull_request_template.md', 'src/1911-pentesting-fox

2025-01-03 03:36:40 +00:00

web-tool-wfuzz.md

Translated ['.github/pull_request_template.md', 'src/1911-pentesting-fox

2025-01-03 03:36:40 +00:00

web-vulnerabilities-methodology.md

Translated ['src/binary-exploitation/arbitrary-write-2-exec/aw2exec-got-

2025-01-04 13:08:19 +00:00

websocket-attacks.md

Translated ['src/pentesting-web/websocket-attacks.md'] to sw

2025-03-09 14:31:29 +00:00

xpath-injection.md

Translated ['.github/pull_request_template.md', 'src/1911-pentesting-fox

2025-01-03 03:36:40 +00:00

xs-search.md

Translated ['src/backdoors/salseo.md', 'src/binary-exploitation/rop-retu

2025-04-07 02:25:12 +00:00

xslt-server-side-injection-extensible-stylesheet-language-transformations.md

Translated ['src/binary-exploitation/basic-stack-binary-exploitation-met

2025-01-05 21:06:03 +00:00

xssi-cross-site-script-inclusion.md

Translated ['.github/pull_request_template.md', 'src/1911-pentesting-fox

2025-01-03 03:36:40 +00:00

xxe-xee-xml-external-entity.md

Translated ['src/pentesting-web/xxe-xee-xml-external-entity.md'] to sw

2025-07-12 09:56:03 +00:00