H[a|i]cking Website

Nmap & PowerShell Scanning Techniques

Published on Jan 17, 2025

SMB & NetBIOS Enumeration Techniques

Published on Jan 17, 2025

Windows Enumeration with enum4linux

Published on Jan 18, 2025

SMTP Enumeration Techniques

Published on Jan 18, 2025

Netcat use cases

Published on Jan 18, 2025

SNMP Enumeration Techniques

Published on Jan 18, 2025

DNS Enumeration Basics

Published on Jan 22, 2025

Nmap NSE Scripts for Vulnerability Scanning

Published on Jan 22, 2025

Bypassing Anti-CSRF Protection with XSS: Exploiting WordPress Nonces

Published on Feb 13, 2025

WordPress Reverse Shell: Achieving Full Access

Published on Feb 14, 2025

Exploiting LFI with Log Poisoning

Published on Mar 13, 2025

PHP Wrappers: File Inclusion & Code Execution

Published on Mar 13, 2025

Remote File Inclusion (RFI)

Published on Mar 13, 2025

File Upload Vulnerability: Using Executable Files

Published on Mar 20, 2025

File Upload Vulnerability: Using Non-Executable Files

Published on Mar 20, 2025

OS Command Injection

Published on Mar 20, 2025

.ASPX File Upload Exploit and Reverse Shell

Published on Mar 21, 2025

Hijacking Exposed SSH Keys for Initial Access

Published on Aug 17, 2025

SQL Commands Cheat Sheet & Injection Payloads

Published on Mar 24, 2025

Manual SQLi to Code Execution

Published on Mar 26, 2025

Automating SQL Injection with sqlmap

Published on Mar 26, 2025

UNION SELECT SQL Injection: Concepts and a Practical Example

Published on Apr 16, 2025

From SQL Error to Reverse Shell: Full SQLi Exploit on example.lab

Published on Apr 23, 2025

SQL Injection with System Command Execution via PostgreSQL

Published on Apr 26, 2025

Extracting Files via Time-Based Blind SQLi in PostgreSQL

Published on Apr 26, 2025

Leveraging Microsoft Word Macros for Reverse Shell

Published on Jun 5, 2025

Obtaining Code Execution via Windows Library Files

Published on Jun 5, 2025

Exploiting Public Vulnerabilities: qdPM 9.1 RCE

Published on Jun 14, 2025

Easy Chat Server 3.1 SEH Exploit

Published on Jun 19, 2025

Offline Hash Cracking: PHPass Portable MD5

Published on Apr 21, 2025

Cracking Methodology & Keepass Database

Published on Jun 24, 2025

SSH & RDP Dictionary Attacks with Hydra

Published on Jun 24, 2025

SSH Private Key Passphrase Cracking

Published on Jun 24, 2025

NTLM, SAM & Mimikatz Overview

Published on Jun 25, 2025

Pass-the-Hash & NTLM Relay Techniques

Published on Jun 25, 2025

Cracking Net-NTLMv2: Concepts & Responder

Published on Jun 25, 2025

Relaying Net-NTLMv2 & Windows Reverse Shell

Published on Jun 25, 2025

AV Evasion in Practice

Published on Jun 27, 2025

PowerShell Commands for Searching Sensitive Information

Published on Jun 27, 2025

Service Binary Hijacking

Published on Jul 02, 2025

DLL hijacking

Published on Jul 02, 2025

Unquoted Service Paths

Published on Jul 06, 2025

Privilege Escalation via Scheduled Tasks

Published on Jul 06, 2025

Using Exploits for Privilege Escalation

Published on Jul 06, 2025

Remotely Enabling RDP

Published on Sep 05, 2025

Manual Enumeration on Linux

Published on Jul 7, 2025

Inspecting Service Footprints & Abusing Cron Jobs

Published on Jul 8, 2025

Insecure File Permissions & Privilege Escalation

Published on Jul 8, 2025

Insecure System Components

Published on Jul 9, 2025

Linux Privilege Escalation: Wildcards with tar

Published on Oct 5, 2025

Practical Linux Tunneling Techniques

Published on Jul 27, 2025

Practical Windows Port Forwarding Techniques

Published on Jul 27, 2025

HTTP Tunneling

Published on Aug 2, 2025

DNS Tunneling

Published on Aug 2, 2025

Browser Pivoting with Chisel Reverse Port Forwarding

Published on Aug 17, 2025

Pivoting with a SOCKS5 Proxy for Internal Enumeration with Metasploit

Published on Aug 17, 2025

Using Chisel to Reach Any Local TCP-Only Service

Published on Sep 05, 2025

Metasploit Basics

Published on Aug 3, 2025

Metasploit Payloads

Published on Aug 3, 2025

Performing Post-Exploitation with Metasploit

Published on Aug 3, 2025

Automating Metasploit

Published on Aug 3, 2025

Active Directory : Manual Enumeration

Published on Aug 5, 2025

Active Directory : Advanced Manual Enumeration

Published on Aug 5, 2025

Automated AD Enumeration with SharpHound & BloodHound

Published on Aug 5, 2025

Recover Cached AD Credentials

Published on Aug 9, 2025

Password Attacks (Active Directory)

Published on Aug 9, 2025

AS-REP Roasting (Kerberos)

Published on Aug 9, 2025

Kerberoasting

Published on Aug 9, 2025

Silver Tickets

Published on Aug 9, 2025

Domain Controller Synchronization (DCSync)

Published on Aug 9, 2025

WMI and WinRM

Published on Aug 9, 2025

PsExec

Published on Aug 9, 2025

Pass the Hash

Published on Aug 9, 2025

PtH to Reach Internal Service

Published on Sep 5, 2025

Overpass the Hash

Published on Aug 10, 2025

Pass the Ticket

Published on Aug 10, 2025

DCOM

Published on Aug 10, 2025

AD Persistence with Golden Ticket

Published on Aug 10, 2025

AD Persistence with Shadow Copies

Published on Aug 10, 2025

AWS Cloud Domain and Subdomain Reconnaissance

Published on Aug 10, 2025