Exploitation — Hub
Attack techniques once you’ve found a vulnerability or attack surface.
Confirm vulns manually first, then automate with tools (SQLMap, MetaSploit).
📌 Notes in This Folder
| Note | Purpose |
|---|---|
| SQL Injection | SQLi hub — union, blind, automation |
| Union Based SQLi | Union-based injection |
| Blind SQLi | Boolean/time-based blind |
| Local File Inclusion (LFI) | LFI → RCE paths |
| Remote File Inclusion (RFI) | RFI — include remote URL → shell on Kali |
| File Upload Bypass | Bypass upload filters |
| Web Servers | Nginx, Tomcat, IIS — platform enum & exploit |
| Buffer Overflow | Windows BOF methodology |
| XSS - Cross-Site Scripting | XSS types & abuse |
| Vulnerabilities | Vuln classes overview |
📌 Web Exploit Decision Tree
Input reflected? → SQLi / XSS / LFI / RFI
File upload? → [[File Upload Bypass]]
Parameters in URL? → [[Local File Inclusion (LFI)]], [[Remote File Inclusion (RFI)]], [[SQL Injection]]
Custom binary? → [[Buffer Overflow]]