Rednote
GuidebooksTerminalCode
  • Welcome!
  • Utility
    • General
    • Server
    • Transferring File
      • Main
      • Code
      • Miscellaneous
    • Reverse & Bind Shells
      • Havoc
    • Metasploit
    • Service
      • FTP (21)
      • SSH (22)
      • DNS (53)
      • HTTP/HTTPS (80-443)
      • SMTP (25-465-587)
      • POP3 (110-995)
      • IMAP (143-993)
      • MySQL (3306)
      • MSSQL (1433-2433)
      • SMB (139-445)
      • RDP (3389)
      • WinRM (5985-5986)
      • WMI (135)
      • LLMNR & NBT-NS (5355-137)
      • NFS (111-2049)
      • SNMP (161-162)
      • VNC (5900)
      • Rsync (873)
      • R-Service (512-513-514)
      • IPMI (623)
      • Oracle TNS (1521)
  • Pentesting Process
    • Information Gathering
      • Passive
      • Active
      • OSINT
    • Vulnerability
    • Web Attacks
      • GENERAL
      • Crawling/Spidering & Fuzzing
      • Information Disclosure
      • Command Injection
      • Unrestricted File Upload
      • File Inclusion/Path Traversal
      • Request Smuggling
      • Clickjacking
      • Web Cache Poisoning
      • Web Cache Deception
      • Insecure Deserialization
      • Prototype Pollution
      • OAuth 2.0
      • JWT
      • SQLi
        • sqlmap
      • NoSQLi
      • GraphQL
      • XSS
      • SSRF
      • XXE
      • IDOR
      • API
      • SSTI
      • CSRF
      • CORS
      • AJP
      • SSI
      • ESI
      • XSLT
      • Cloud
      • LLM Prompt Security
    • Software Attacks
      • Binary
      • Shellcode
      • AV Evasion & Obfuscation
    • Network Attacks
      • ARP Poisoning
      • Local DNS Cache Poisoning
      • Baby Local DoS
    • Crypto Attacks
      • Utility
      • RSA
      • DSA/DSS
      • PRNG
        • LGC
        • MT
        • LFSR
    • Misc Attacks
    • Social Engineering
    • Password Cracking
      • Wordlist
      • Offline
      • Online
    • Pivoting & Tunneling
    • Local Enumeration
      • Linux
      • Windows
    • Privilege Escalation
      • Linux
        • Linux Privilege Escalation with Groups
        • Linux Privilege Escalation with Library
      • Windows
        • Windows Privilege Escalation with Groups and Privileges
        • Windows Privilege Escalation with DLL Hijacking
    • Active Directory
      • Enumeration
      • Abuse ACL
      • Extract Hash & Password
      • Pass The Hash
      • Pass The Ticket
      • Overpass the Hash
      • Relay Attack
      • Password Spraying Attack
      • AS-REP Roasting
      • Kerberoasting
      • Silver Ticket
      • Golden Ticket
      • DC Synchronization
      • AD Certificates
      • Attacking Domain Trusts
    • Reports
      • Bug Bounty Report
    • CVE
      • Linux
      • Windows
    • OTHER
      • CMS
        • WordPress
        • Joomla
        • Drupal
      • Tomcat
      • Jenkins
      • Splunk
      • Web Service
      • Navigating Python Objects
      • JavaScript Deobfuscation
  • Extra
    • My Books
    • My Exploits
    • Compiled Binaries
Powered by GitBook
On this page
  • GIT
  • Hidden File Extraction
  • Other

Was this helpful?

  1. Pentesting Process

Misc Attacks

Various useful attack tools and techniques.

Last updated 7 months ago

Was this helpful?

GIT

Tool
Details

Search for sensitive information in the git repository gitleaks detect -v . (inside cloned git)

A tool to download a git repository from a website. Useful when you find the .git folder on a website. git-dumper <URL.GIT> <OUTPUT>

Hidden File Extraction

Tool
Details

Web site that allows you to edit the bytes of a file.

Website that performs various techniques for analyzing and extracting hidden files from images or similar.

Detect and hide files in images, videos, audio etc. steghide info <FILENAME> steghide extract -sf <FILENAME>

Allows brute force attacks on hidden files covered by passphrases. stegcracker <FILENAME> [<WORDLIST>]

Tool used to analyze, decode and extract firmware images. binwalk <FILENAME> binwalk -e <FILENAME> (extraction)

Foremost is a forensic program for recovering lost files based on their headers, footers and internal data structures. foremost <FILENAME> foremost -i <INPUT.img> -o <OUTPUT>

Other

Tool
Details

pdfimages

Saves images from a PDF. apt-get install poppler-utils pdfimages <PDF_FILE> <OUTFILE>

Recovers passwords from pixelized screenshots. python3 depix.py -p <IMAGE_TARGET> -s images/searchimages/debruinseq_notepad_Windows10_closeAndSpaced.png -o <OUTFILE>

gitleaks
git-dumper
hexed
aperisolve
steghide
stegcracker
binwalk
foremost
Depix