# Leet Sheet ## Leet Sheet - [Leet Sheet](https://heinosass.gitbook.io/leet-sheet/readme.md): Landing Page - [TODO](https://heinosass.gitbook.io/leet-sheet/todo.md) - [Automated Reconnaissance](https://heinosass.gitbook.io/leet-sheet/reconnaissance/automated-reconnaissance.md) - [Domains](https://heinosass.gitbook.io/leet-sheet/reconnaissance/dns-recon.md): Get hostnames and info from DNS servers - [Scour the Web](https://heinosass.gitbook.io/leet-sheet/reconnaissance/google-fu.md) - [Metadata](https://heinosass.gitbook.io/leet-sheet/reconnaissance/metadata.md) - [Enumeration](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/enumeration.md) - [Webserver Virtualhost Subdomains](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/enumeration/webserver-virtualhost-subdomains.md) - [Common Identifiers](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/enumeration/common-identifiers.md) - [Web Fuzzing](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/enumeration/web-fuzzing.md) - [Directory Enumeration](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/enumeration/directory-enumeration.md) - [Automated Directory Enumeration](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/enumeration/directory-enumeration/automated-directory-enumeration.md) - [Manual Directory Enumeration](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/enumeration/directory-enumeration/manual-directory-enumeration.md) - [Automated Web Technology Detection](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/enumeration/automated-web-technology-detection.md) - [User Attacks](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/user-attacks.md): These attacks affect a user in a web application - [CORS Misconfigurations](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/user-attacks/cors-misconfigurations.md) - [DNS Rebinding](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/user-attacks/dns-rebinding.md) - [Open Redirect](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/user-attacks/open-redirect.md) - [Clickjacking](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/user-attacks/clickjacking.md) - [Cross Site Request Forgery (CSRF)](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/user-attacks/cross-site-request-forgery-csrf.md): Making a request on the user's behalf. - [Session Fixation](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/user-attacks/session-fixation.md) - [XSS/Cross Site Scripting](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/user-attacks/xss-cross-site-scripting.md) - [CSS Injection](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/user-attacks/css-injection.md) - [HTML Injection](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/user-attacks/html-injection.md) - [Phishing](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/user-attacks/phishing.md) - [Database Attacks](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/database-attacks.md) - [SQL Injection](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/database-attacks/sql-injection.md): SQLi / SQL Injection - [Get a Shell From DB Connection](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/database-attacks/get-a-shell-from-db-connection.md): You have a connection to a database. How can you get a shell from that? - [Server Attacks](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks.md) - [Collisions](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/collisions.md) - [Server Side Request Forgery](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/server-side-request-forgery.md): SSRF / Server Side Request Forgery - [Redis SSRF](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/server-side-request-forgery/redis-ssrf.md) - [Insecure Direct Object Reference](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/insecure-direct-object-reference.md) - [Timing-Based Side-Channel Attacks](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/timing-based-side-channel-attacks.md) - [Attacking Authentication Methods](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/attacking-authentication-methods.md) - [JWT Attacks](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/attacking-authentication-methods/jwt-attacks.md) - [Brute Forcing Web Forms](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/attacking-authentication-methods/brute-forcing-web-forms.md): Usually used to attack a login form - [Loose Comparisons](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/loose-comparisons.md) - [Unrestricted File Upload](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/page-3.md) - [Insecure Deserialization](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/page-2.md) - [Command Injection](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/page-1.md) - [Path Traversal](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/path-traversal.md) - [File Inclusion](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/file-inclusion.md) - [Server-Side Template Injection](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/server-side-template-injection.md) - [XML External Entities Injection (XXE)](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/xml-external-entities-injection-xxe.md) - [Server Misconfigurations](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/server-misconfigurations.md) - [Parser Inconsistencies](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/parser-inconsistencies.md) - [Bypassing WAFs](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/bypassing-wafs.md): Bypass web application firewalls - [DNS Attacks](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/dns-attacks.md) - [Cloud Attacks](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/cloud-attacks.md) - [Amazon Web Services](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/cloud-attacks/amazon-web-services.md) - [Interesting Outdated Attacks](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/interesting-outdated-attacks.md) - [SQL Truncation](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/interesting-outdated-attacks/sql-truncation.md) - [General Enumeration](https://heinosass.gitbook.io/leet-sheet/network-hacking/untitled.md) - [RPC](https://heinosass.gitbook.io/leet-sheet/network-hacking/rpc.md) - [LDAP](https://heinosass.gitbook.io/leet-sheet/network-hacking/ldap.md) - [SMB](https://heinosass.gitbook.io/leet-sheet/network-hacking/smb.md) - [SNMP](https://heinosass.gitbook.io/leet-sheet/network-hacking/snmp.md): Simple Network Management Protocol - [WMI](https://heinosass.gitbook.io/leet-sheet/network-hacking/wmi.md) - [SSH](https://heinosass.gitbook.io/leet-sheet/network-hacking/ssh.md) - [Kerberos](https://heinosass.gitbook.io/leet-sheet/network-hacking/kerberos.md) - [NTLM](https://heinosass.gitbook.io/leet-sheet/network-hacking/ntlm.md): Techniques for stealing and abusing NTLM credentials - [Man-In-the-Middle (MITM)](https://heinosass.gitbook.io/leet-sheet/network-hacking/man-in-the-middle-mitm.md) - [WinRM](https://heinosass.gitbook.io/leet-sheet/network-hacking/winrm.md) - [Windows](https://heinosass.gitbook.io/leet-sheet/post-exploitation/untitled.md) - [CLI Tips](https://heinosass.gitbook.io/leet-sheet/post-exploitation/untitled/cli-tips.md) - [Shells](https://heinosass.gitbook.io/leet-sheet/post-exploitation/untitled/shells.md) - [Windows Script Host](https://heinosass.gitbook.io/leet-sheet/post-exploitation/untitled/windows-script-host.md): WSH - [Windows Privilege Escalation](https://heinosass.gitbook.io/leet-sheet/post-exploitation/untitled/windows-privilege-escalation.md) - [Enumeration](https://heinosass.gitbook.io/leet-sheet/post-exploitation/untitled/windows-privilege-escalation/enumeration.md) - [JuicyPotato/RottenPotato](https://heinosass.gitbook.io/leet-sheet/post-exploitation/untitled/windows-privilege-escalation/juicypotato-rottenpotato.md) - [Kernel Exploits](https://heinosass.gitbook.io/leet-sheet/post-exploitation/untitled/windows-privilege-escalation/kernel-exploits.md) - [Unquoted Service Paths](https://heinosass.gitbook.io/leet-sheet/post-exploitation/untitled/windows-privilege-escalation/unquoted-service-paths.md) - [Active Directory](https://heinosass.gitbook.io/leet-sheet/post-exploitation/untitled/active-directory.md): Active Directory Privilege Escalation - [Dumping Passwords](https://heinosass.gitbook.io/leet-sheet/post-exploitation/untitled/dumping-passwords.md) - [NTLM Hash Theft](https://heinosass.gitbook.io/leet-sheet/post-exploitation/untitled/ntlm-hash-theft.md) - [Linux](https://heinosass.gitbook.io/leet-sheet/post-exploitation/linux.md) - [Port Forwarding](https://heinosass.gitbook.io/leet-sheet/post-exploitation/linux/port-forwarding.md): Port Forwarding and Pivoting - [Shells](https://heinosass.gitbook.io/leet-sheet/post-exploitation/linux/shells.md) - [Linux Privilege Escalation](https://heinosass.gitbook.io/leet-sheet/post-exploitation/linux/linux-privilege-escalation.md) - [Enumeration](https://heinosass.gitbook.io/leet-sheet/post-exploitation/linux/linux-privilege-escalation/enumeration.md) - [SUID Bit](https://heinosass.gitbook.io/leet-sheet/post-exploitation/linux/linux-privilege-escalation/suid-bit.md) - [Dot (.) In PATH](https://heinosass.gitbook.io/leet-sheet/post-exploitation/linux/linux-privilege-escalation/dot-.-in-path.md) - [Escape From Restricted Shell](https://heinosass.gitbook.io/leet-sheet/post-exploitation/linux/linux-privilege-escalation/escape-from-restricted-shell.md) - [Symlink Trickery](https://heinosass.gitbook.io/leet-sheet/post-exploitation/linux/linux-privilege-escalation/symlink-trickery.md) - [Wildcard Injection](https://heinosass.gitbook.io/leet-sheet/post-exploitation/linux/linux-privilege-escalation/wildcard-injection.md) - [Docker group/LXD group](https://heinosass.gitbook.io/leet-sheet/post-exploitation/linux/linux-privilege-escalation/docker-group-lxd-group.md) - [Password Reuse](https://heinosass.gitbook.io/leet-sheet/post-exploitation/linux/linux-privilege-escalation/password-reuse.md) - [Backdoors](https://heinosass.gitbook.io/leet-sheet/post-exploitation/linux/backdoors.md) - [Docker Container](https://heinosass.gitbook.io/leet-sheet/post-exploitation/docker-container.md) - [General](https://heinosass.gitbook.io/leet-sheet/post-exploitation/general.md) - [CVEs](https://heinosass.gitbook.io/leet-sheet/various/untitled.md) - [SSH Agent Hijacking](https://heinosass.gitbook.io/leet-sheet/various/ssh-agent-hijacking.md) - [Password Cracking](https://heinosass.gitbook.io/leet-sheet/various/password-cracking.md) - [Cryptography](https://heinosass.gitbook.io/leet-sheet/various/cryptography.md): Also ciphers - [Non-Hacking](https://heinosass.gitbook.io/leet-sheet/various/non-hacking.md) - [Malware](https://heinosass.gitbook.io/leet-sheet/various/malware.md) - [Forensics](https://heinosass.gitbook.io/leet-sheet/various/forensics.md) - [Reading Keystrokes from USB PCAP Data](https://heinosass.gitbook.io/leet-sheet/various/forensics/reading-keystrokes-from-usb-pcap-data.md) - [Resources](https://heinosass.gitbook.io/leet-sheet/binary-exploitation/untitled.md) - [Base Knowledge](https://heinosass.gitbook.io/leet-sheet/binary-exploitation/base-knowledge.md) - [Format String Exploits](https://heinosass.gitbook.io/leet-sheet/binary-exploitation/format-string-exploits.md) - [Stack Smashing](https://heinosass.gitbook.io/leet-sheet/binary-exploitation/stack-smashing.md) - [Heap Exploits](https://heinosass.gitbook.io/leet-sheet/binary-exploitation/heap-exploits.md) - [Time-of-Check to Time-of-Use (TOCTOU)](https://heinosass.gitbook.io/leet-sheet/binary-exploitation/time-of-check-to-time-of-use-toctou.md) - [Shellcode](https://heinosass.gitbook.io/leet-sheet/binary-exploitation/shellcode.md) - [Decompilation](https://heinosass.gitbook.io/leet-sheet/binary-exploitation/decompilation.md) - [Debugging](https://heinosass.gitbook.io/leet-sheet/binary-exploitation/debugging.md) - [Exploit Mitigations and Protections](https://heinosass.gitbook.io/leet-sheet/binary-exploitation/exploit-mitigations-and-protections.md) - [Exploit Protection Bypassing](https://heinosass.gitbook.io/leet-sheet/binary-exploitation/exploit-protection-bypassing.md) - [Passing Input](https://heinosass.gitbook.io/leet-sheet/binary-exploitation/passing-input.md) - [Fuzzing](https://heinosass.gitbook.io/leet-sheet/binary-exploitation/fuzzing.md): Find vulnerabilities using fuzzing - [Automatic Exploitation](https://heinosass.gitbook.io/leet-sheet/binary-exploitation/automatic-exploitation.md) - [Mechanical Locks](https://heinosass.gitbook.io/leet-sheet/physical-security/untitled.md) - [Electronic Locks](https://heinosass.gitbook.io/leet-sheet/physical-security/electronic-locks.md) - [Other Attacks](https://heinosass.gitbook.io/leet-sheet/physical-security/other-attacks.md) - [Destructive Entry](https://heinosass.gitbook.io/leet-sheet/physical-security/destructive-entry.md) - [Elevator Attacks](https://heinosass.gitbook.io/leet-sheet/physical-security/elevator-attacks.md) - [Phishing](https://heinosass.gitbook.io/leet-sheet/social-engineering/phishing.md)