Zawaf/CTF-notes

Everything needed for doing CTFs

CTF-Notes - Hackers Resources Galore

Index

• AwesomeXSS
  • Database
• resource-threat-hunting
• Bypassing-Web-Application-Firewalls
• Windows-Privilege-Escalation
• Powershell-Cheatsheet
• Hydra-Cheatsheet
• MSF-Venom-Cheatsheet
• Linux-Privilege-Escalation
• Active-Directory-Fun
• Offensive-Security-OSCP-Cheatsheets
  • ctfs-walkthroughs
  • lab
  • memory-forensics
  • offensive-security
  • offensive-security-experiments
• PayloadsAllTheThings
  • [AWS Amazon Bucket S3](./PayloadsAllTheThings/AWS Amazon Bucket S3)
  • [Command Injection](./PayloadsAllTheThings/Command Injection)
  • [CRLF Injection](./PayloadsAllTheThings/CRLF Injection)
  • [CSRF Injection](./PayloadsAllTheThings/CSRF Injection)
  • [CSV Injection](./PayloadsAllTheThings/CSV Injection)
  • [CVE Exploits](./PayloadsAllTheThings/CVE Exploits)
  • [Directory Traversal](./PayloadsAllTheThings/Directory Traversal)
  • [File Inclusion](./PayloadsAllTheThings/File Inclusion)
  • [GraphQL Injection](./PayloadsAllTheThings/GraphQL Injection)
  • [Insecure Deserialization](./PayloadsAllTheThings/Insecure Deserialization)
  • [Insecure Direct Object References](./PayloadsAllTheThings/Insecure Direct Object References)
  • [Insecure Management Interface](./PayloadsAllTheThings/Insecure Management Interface)
  • [Insecure Source Code Management](./PayloadsAllTheThings/Insecure Source Code Management)
  • [JSON Web Token](./PayloadsAllTheThings/JSON Web Token)
  • [LaTeX Injection](./PayloadsAllTheThings/LaTeX Injection)
  • [LDAP Injection](./PayloadsAllTheThings/LDAP Injection)
  • [Methodology and Resources](./PayloadsAllTheThings/Methodology and Resources)
  • [NoSQL Injection](./PayloadsAllTheThings/NoSQL Injection)
  • OAuth
  • [Open Redirect](./PayloadsAllTheThings/Open Redirect)
  • [SAML Injection](./PayloadsAllTheThings/SAML Injection)
  • [Server Side Request Forgery](./PayloadsAllTheThings/Server Side Request Forgery)
  • [Server Side Template Injection](./PayloadsAllTheThings/Server Side Template Injection)
  • [SQL Injection](./PayloadsAllTheThings/SQL Injection)
  • _template_vuln
  • [Type Juggling](./PayloadsAllTheThings/Type Juggling)
  • [Upload Insecure Files](./PayloadsAllTheThings/Upload Insecure Files)
  • [Web Cache Deception](./PayloadsAllTheThings/Web Cache Deception)
  • [Web Sockets](./PayloadsAllTheThings/Web Sockets)
  • [XPATH Injection](./PayloadsAllTheThings/XPATH Injection)
  • [XSS Injection](./PayloadsAllTheThings/XSS Injection)
  • [XXE Injection](./PayloadsAllTheThings/XXE Injection)
• Awesome-Advanced-Windows-Exploitation-References
• Awesome-Hacking-Resources
• OSCP-Materials-master
  • [Linux Privilege Escalation and Post Exploitation](./OSCP-Materials-master/Linux Privilege Escalation and Post Exploitation)
  • Metasploit-Meterpreter-Msfvenom
  • [PASSWORD CRACKING and Usefull TOOLS and Commands](./OSCP-Materials-master/PASSWORD CRACKING and Usefull TOOLS and Commands)
  • [SHELLCODE and Buffer Over Flow](./OSCP-Materials-master/SHELLCODE and Buffer Over Flow)
  • [Understand Privilege Escalation](./OSCP-Materials-master/Understand Privilege Escalation)
  • [Window Privilege Escalation and Post Exploitation](./OSCP-Materials-master/Window Privilege Escalation and Post Exploitation)
  • [Cheat Sheets](./OSCP-Materials-master/Cheat Sheets)
• ctf
  • natas
• [metasploit scripts](./metasploit scripts)
• [SCADA PLC ICS Pentest PDFs](./SCADA PLC ICS Pentest PDFs)
  • [awesome-industrial-control-system-security](./SCADA PLC ICS Pentest PDFs/awesome-industrial-control-system-security)
• python-pty-shells-master
• SecLists
  • Discovery
  • Web-Shells
  • Pattern-Matching
  • Payloads
  • Fuzzing
  • IOCs
  • Miscellaneous
  • Passwords
  • Usernames
• Web-CTF-Cheatsheet
  • scripts
• pentestbook
  • assets
  • physical_access_to_machine
  • styles
  • writeups
• IntruderPayloads
  • BurpAttacks
  • FuzzLists
  • Plugins
  • Uploads
• oscp
  • recon_enum
  • reports
  • templates
• Red-Team-Infrastructure-Wiki
  • images
• xapax.github.io
  • css
  • img
  • js
  • reveng
• pronotes
• pentest_compilation
• OSCPRepo
  • CheetSheets
  • KeepNotes
  • [Local Info Enum](./OSCPRepo/Local Info Enum)
  • PDFs&Documents
  • [Priv Esc Checks](./OSCPRepo/Priv Esc Checks)
  • Process&Methodology
  • Reporting
  • Scanning&Recon
  • Tools
  • lists
  • scripts
• Books
• penbook
  • assets
  • physical_access_to_machine
  • styles
  • writeups
• security-cheatsheets
• escalationserver
• [Notes VA](./Notes VA)
  • [lpeworkshop](./Notes VA/lpeworkshop)