PSPiyush Shendeinlinux-administration.hashnode.dev路Jul 17 路 8 min readHTB Web Penetratoin TesterWeb Requests HTTP ( Hyper Text transfer Protocol) URL Resources Over HTTP are accessed via a URL, http flow when first time user enters the url (example.com) into browser , it sends request to DNS se00
PSPiyush Shendeinlinux-administration.hashnode.dev路Jul 4 路 30 min readLinux Administration https://bash-prompt-generator.org/Linux Fundamentals https://bash-prompt-generator.org/ https://explainshell.com/ Linux stands as a fundamental pillar in cybersecurity To begin, let's define what Linux is. Linux is an operating system00
PSPiyush Shendeinpentesting.hashnode.dev路Apr 11 路 12 min readXSS LABS - vulnerability in search box Important links XSS CHEATSHEET Reflected XSS Lab: Reflected XSS into HTML context with nothing encoded paste in search box lab solved Stored XSS - vulnerability in comment box Lab: Stored XSS 00
PSPiyush Shendeintryhackmee.hashnode.dev路Apr 4 路 1 min readBASIC PENTESTING1)first scan with NMAP nmap -T4 -p- -sV -sC -O 2) DIRECTORY ENUMERATION dirbuster& paste the URL link in box and give wordlists and see result 3) RUN enum4linux tool to get usernames and workdomain e00
PSPiyush Shendeinpentesting.hashnode.dev路Apr 3 路 8 min readLABSAUTHENTICATION LABS 馃挕 Broken Access lab's Solution begin's here 1) Unprotected admin functionality - Vertical Privilege Escalation Open the lab In LAB url add /robots.txt at the end and hit ente00