Uncle Rat's Notes

Total pages: 93 Homepage

/ 8 pages
Uncle Rat's Notes
Broad scope methodology - Manual
Medium articles
OWASP top 10
Practical Demonstration - Main Web Application hacking
Rat's methodology
Tools
Vulnerability types
- Broad%20scope%20methodology%20-%20Manual%201097d5c08b8a4da0907fd593003272ae/ 9 pages
- 0. Subdomain enumeration
- 1. Creating our list of subdomains
- 2. Processing Our List Of Subdomain
- 3. Subdomain flyover
- 4. Exploiting open ports
- A. Vulnerability scanning
- B. Vulnerability testing strategy
- 98 Running your scripts on a VPS
- 99. List of tools for grabbing subdomains
- Medium%20articles%20772065d32a0a4425a2f6343adc86acb5/ 5 pages
- How to become a hacker
- Are you a competitive hacker?
- Docker: A Bug Bounty Hunters Best Friend
- How to handle failure
- Bugbountyhunter.com membership
- OWASP%20top%2010%20ef5159f34b624404992e480ef1eedd4d/ 1 pages
- Full
- - Full%209b423f8672d4467da1789985a0525622/ 8 pages
  - Introduction
  - 1. Injection
  - 2. Broken authentication
  - 3. Sensitive data exposure
  - 4 XML eXternal Entities
  - 5. Broken Access Control
  - 6. Security Misconfiguration
  - 7. XSS
  - - 1%20Injection%20299ca260cd4e4c5e9afcf191d2b8f1e9/
    - - Copy%20of%20Linux%20and%20windows%20commands%2000be2c96ca4a45b5adfad32224ecfcdf/ 5 pages
      - Name of current user
      - Operating system
      - Network configuration
      - Network connections
      - Running processes
- Tools%2006ba3f2249914070ae81c11f60c6a370/ 4 pages
- Burp suite
- Analyzing javascript files
- Directory brute forcing
- Nmap
- - Burp%20suite%2030c8cfff5a484eb4bf31006031feb363/ 16 pages
  - Burp Suite: Do i need the profesional edition?
  - Burp Suite: Dashboard
  - Burp suite: Target
  - Burp suite: Proxy
  - Burp suite: Intruder
  - Burp Suite: repeater
  - Burp Suite: Sequencer
  - Burp Suite: Decoder
  - Burp Suite: Comparer
  - Burp Suite: Extender
  - Burp: Authorize
  - Burp: Match and replace
  - Burp suite: Top 5 Proffesional extensions
  - Burp suite: Top 5 Community edition extensions
  - Burp suite: How to use burp to look for SQLi
  - Burp Suite: Content discovery
- Vulnerability%20types%20d6487b7204244f159482be2dfb025fea/ 11 pages
- CSRF
- IDOR
- XSS
- Template injections
- BAC
- XXE
- SSRF
- Command injection
- Business logic flaws
- Insecure deserialization
- The Origin Of Business logic vulnerabilities
- - Command%20injection%20f3446f65fdc9437b9c16ef96b33edc36/
  - - Linux%20and%20windows%20commands%208ed7d380f0a740dfbdb72395dccf7cc8/ 5 pages
    - Name of current user
    - Operating system
    - Network configuration
    - Network connections
    - Running processes
  - Template%20injections%205633da87439b4f3b91e56feeb5a3332f/ 2 pages
  - SSTI
  - CSTI
  - XSS%200ad0878f33094ea6b8ac90e94c2b0dc2/ 3 pages
  - XSS Cheat sheet
  - General XSS Beginner Guide
  - DOM XSS
  - - XSS%20Cheat%20sheet%205c643ce56d1e4ed9871fdd909ded017e/
    - - Contexts%208aae6c796a57413099e7e4fdd0ef5709/ 2 pages
      - Breaks javascript functions
      - Try to insert our own JS code
      - Techniques%20c0f9870e01324ea5b82e30269cc90503/ 8 pages
      - Basic modifications
      - Attributes and tags
      - Event handlers
      - Delimiters and brackers
      - Delimiters and brackers - 2
      - Eval()
      - Using filtered words in filtered words
      - Use your imagination <3
      - Types%20of%20XSS%20f9e208deac544d628aeb1522700c8975/ 6 pages
      - Value reflection
      - Test objectives
      - Step 1
      - Step 2
      - Step 3
      - Untitled