Cub3sec's Offensive Handbook
Ctrlk
  • ๐Ÿ–ฅ๏ธCub3sec's Offensive Handbook
  • ๐Ÿ”Enumeration
    • ๐Ÿ“ดPassive
    • ๐Ÿ“ณActive
    • ๐Ÿ•ธ๏ธWeb Application
  • ๐Ÿ“ฅInitial Access
    • ๐Ÿ•ธ๏ธCommon Web Application Attacks
      • Cross-Site Scripting (XSS)
      • Cross-Site Request Forgery (CSRF)
      • Directory Traversal
      • File Inclusion
      • File Upload
      • Command Injection
    • ๐Ÿ’‰SQL Injection Attacks
    • ๐ŸงClient-Side Attacks
    • ๐Ÿ”‘Password Attacks
    • ๐ŸšShells
  • โš”๏ธPrivilege Escalation
    • ๐ŸงLinux
    • ๐ŸชŸWindows
  • ๐Ÿ๏ธLateral Movement
    • ๐ŸงLinux
    • ๐ŸชŸWindows
  • ๐Ÿ–๏ธReporting
    • ๐Ÿ–Š๏ธReport writing
  • ๐Ÿš”AV Evasion
    • ๐Ÿ’ŠAV Detection
    • ๐Ÿ’‰Process Memory Injection
    • Defender Bypass
  • ๐Ÿ“‚Active Directory
    • ๐Ÿ”Enumeration
    • Attacking Authentication
    • Shadow Credentials
    • Targeted Kerberoasting
Powered by GitBook
On this page
  1. ๐Ÿ“ฅInitial Access
  2. ๐Ÿ•ธ๏ธCommon Web Application Attacks

Directory Traversal

PreviousCross-Site Request Forgery (CSRF)NextFile Inclusion