drd_'s Latest Posts
How To:
Enumerate SMB with Enum4linux & Smbclient
How To:
Beat LFI Restrictions with Advanced Techniques
How To:
Upgrade a Dumb Shell to a Fully Interactive Shell for More Flexibility
How To:
Scan Websites for Interesting Directories & Files with Gobuster
How To:
Use LinEnum to Identify Potential Privilege Escalation Vectors
How To:
Use Burp & FoxyProxy to Easily Switch Between Proxy Settings
How To:
Use Metasploit's Timestomp to Modify File Attributes & Avoid Detection
How To:
Perform a Pass-the-Hash Attack & Get System Access on Windows
How To:
Bypass UAC & Escalate Privileges on Windows Using Metasploit
How To:
Manually Exploit EternalBlue on Windows Server Using MS17-010 Python Exploit
How To:
Exploit EternalBlue on Windows Server with Metasploit
How To:
Compromise a Web Server & Upload Files to Check for Privilege Escalation, Part 2
How To:
Compromise a Web Server & Upload Files to Check for Privilege Escalation, Part 1
How To:
Use Websploit to Scan Websites for Hidden Directories
How To:
Crack Password-Protected Microsoft Office Files, Including Word Docs & Excel Spreadsheets
How To:
Gain SSH Access to Servers by Brute-Forcing Credentials
How To:
Enumerate NetBIOS Shares with NBTScan & Nmap Scripting Engine
How To:
Elevate a Netcat Shell to a Meterpreter Session for More Power & Control
How To:
Detect Vulnerabilities in a Web Application with Uniscan
How To:
Hack Distributed Ruby with Metasploit & Perform Remote Code Execution
How To:
Use Metasploit's Database to Stay Organized & Store Information While Hacking
How To:
Generate a Clickjacking Attack with Burp Suite to Steal User Clicks
How To:
Use SQL Injection to Run OS Commands & Get a Shell
How To:
Advanced Techniques to Bypass & Defeat XSS Filters, Part 2
How To:
Advanced Techniques to Bypass & Defeat XSS Filters, Part 1
How To:
Discover XSS Security Flaws by Fuzzing with Burp Suite, Wfuzz & XSStrike
How To:
Use Commix to Automate Exploiting Command Injection Flaws in Web Applications
How To:
Use Metasploit's Web Delivery Script & Command Injection to Pop a Shell
How To:
Exploit Java Remote Method Invocation to Get Root
How To:
Use MSFconsole's Generate Command to Obfuscate Payloads & Evade Antivirus Detection
How To:
Use Metasploit's WMAP Module to Scan Web Applications for Common Vulnerabilities
How To:
Get Started Writing Your Own NSE Scripts for Nmap
How To:
Exploit Remote File Inclusion to Get a Shell
How To:
Discover Open Ports Using Metasploit's Built-in Port Scanner
How To:
Abuse Session Management with OWASP ZAP
How To:
Manipulate User Credentials with a CSRF Attack
How To:
Crack Shadow Hashes After Getting Root on a Linux System
How To:
Perform Local Privilege Escalation Using a Linux Kernel Exploit
How To:
Exploit Shellshock on a Web Server Using Metasploit
Sites
- Hot
- Latest
-
How To:
Fingerprint Web Apps & Servers for Better Recon & More Successful Hacks
-
How To:
Write Your Own Subdomain Enumeration Script for Better Recon
-
How To:
Clear the Logs & Bash History on Hacked Linux Systems to Cover Your Tracks & Remain Undetected
-
How To:
Use Banner Grabbing to Aid in Reconnaissance & See What Services Are Running on the System
-
How To:
Discover Hidden Subdomains on Any Website with Subfinder
-
How To:
Use Gtfo to Search for Abusable Binaries During Post-Exploitation
-
How To:
Escape Restricted Shell Environments on Linux
-
How To:
Use Linux Smart Enumeration to Discover Paths to Privesc
-
How To:
Fuzz Parameters, Directories & More with Ffuf
-
How To:
Bypass PowerShell Execution Policy to Pwn Windows
-
How To:
Bypass File Upload Restrictions on Web Apps to Get a Shell
-
How To:
Crack Password-Protected ZIP Files, PDFs & More with Zydra
-
How To:
Crack SSH Private Key Passwords with John the Ripper
-
How To:
Conduct a Pentest Like a Pro in 6 Phases
-
How To:
Use Postenum to Gather Vital Data During Post-Exploitation
-
How To:
Write Your Own Bash Script to Automate Recon
-
How To:
Python 2 vs. Python 3 — Important Differences Every Hacker Should Know
-
How To:
Audit Web Applications & Servers with Tishna
-
How To:
Get Started with Kali Linux in 2020
-
How To:
Gather Information on PostgreSQL Databases with Metasploit
-
How To:
Crack SSH Private Key Passwords with John the Ripper
-
How To:
Use Burp & FoxyProxy to Easily Switch Between Proxy Settings
-
How To:
Crack Password-Protected Microsoft Office Files, Including Word Docs & Excel Spreadsheets
-
How To:
Gain SSH Access to Servers by Brute-Forcing Credentials
-
How To:
Brute-Force FTP Credentials & Get Server Access
-
How To:
Hack Apache Tomcat via Malicious WAR File Upload
-
How To:
Get Root with Metasploit's Local Exploit Suggester
-
How To:
Upgrade a Dumb Shell to a Fully Interactive Shell for More Flexibility
-
How To:
Exploit EternalBlue on Windows Server with Metasploit
-
How To:
Exploit WebDAV on a Server & Get a Shell
-
How To:
Use Command Injection to Pop a Reverse Shell on a Web Server
-
How To:
Bypass File Upload Restrictions on Web Apps to Get a Shell
-
How To:
Attack Web Applications with Burp Suite & SQL Injection
-
How To:
Use Metasploit's WMAP Module to Scan Web Applications for Common Vulnerabilities
-
How To:
Escape Restricted Shell Environments on Linux
-
How To:
Crack Password-Protected ZIP Files, PDFs & More with Zydra
-
How To:
Use Commix to Automate Exploiting Command Injection Flaws in Web Applications
-
How To:
Enumerate NetBIOS Shares with NBTScan & Nmap Scripting Engine
-
How To:
Find Hidden Web Directories with Dirsearch
-
How To:
Discover XSS Security Flaws by Fuzzing with Burp Suite, Wfuzz & XSStrike
-
How To:
Use Wordlister to Create Custom Password Combinations for Cracking
-
How To:
Crack Shadow Hashes After Getting Root on a Linux System
-
How To:
Exploit Shellshock on a Web Server Using Metasploit
-
How To:
Enumerate SMB with Enum4linux & Smbclient
-
How To:
Use SQL Injection to Run OS Commands & Get a Shell
-
How To:
Fuzz Parameters, Directories & More with Ffuf
-
How To:
Scan Websites for Interesting Directories & Files with Gobuster
-
How To:
Use LinEnum to Identify Potential Privilege Escalation Vectors
-
How To:
Exploit Java Remote Method Invocation to Get Root
-
How To:
Manually Exploit EternalBlue on Windows Server Using MS17-010 Python Exploit
-
How To:
Exploit Remote File Inclusion to Get a Shell
-
How To:
Clear the Logs & Bash History on Hacked Linux Systems to Cover Your Tracks & Remain Undetected
-
How To:
Use John the Ripper in Metasploit to Quickly Crack Windows Hashes
-
How To:
Enumerate MySQL Databases with Metasploit
-
How To:
Bypass UAC & Escalate Privileges on Windows Using Metasploit
-
How To:
Perform Local Privilege Escalation Using a Linux Kernel Exploit
-
How To:
Perform a Pass-the-Hash Attack & Get System Access on Windows
-
How To:
Elevate a Netcat Shell to a Meterpreter Session for More Power & Control
-
How To:
Advanced Techniques to Bypass & Defeat XSS Filters, Part 1
-
How To:
Hack Distributed Ruby with Metasploit & Perform Remote Code Execution
