shadowroot97 / ewptxv2

eWPTXv2

eWPTXv2 | Web application Penetration Tester eXtreme

mindmap
  root)**eWPTXv2** 👺(
    Resources 🤓
        https://my.ine.com/CyberSecurity/courses/630a470a/web-application-penetration-testing-extreme
        https://www.youtube.com/watch?v=xQ2rivaFcsE
        https://www.youtube.com/watch?v=UfILDa_qStQ
        https://www.youtube.com/watch?v=x_vPhmvsTOc
        https://portswigger.net/support/sql-injection-in-different-statement-types?source=post_page-----a741220cf145--------------------------------
    Labs 👾
        SSRF
            https://portswigger.net/web-security/all-labs#server-side-request-forgery-ssrf
        XSS
            https://portswigger.net/web-security/all-labs#cross-site-scripting
        SQLi
            https://portswigger.net/web-security/all-labs#sql-injection
        XXE
            https://portswigger.net/web-security/all-labs#xml-external-entity-xxe-injection
        SSTI
            https://portswigger.net/web-security/all-labs#server-side-template-injection
        Insecure deserialization
            https://portswigger.net/web-security/all-labs#insecure-deserialization
        CSRF
            https://portswigger.net/web-security/all-labs#cross-site-request-forgery-csrf
        Authentication vulnerabilities
            https://portswigger.net/web-security/all-labs#authentication

    Tools 🤓
        https://github.com/xmendez/wfuzz
        https://github.com/frohoff/ysoserial
        https://github.com/sqlmapproject/sqlmap
        https://github.com/pentestmonkey/php-reverse-shell/blob/master/php-reverse-shell.php
        https://onlinephp.io/
        https://portswigger.net/web-security/cross-site-scripting/cheat-sheet

Loading

Resources

• Web Application Penetration Testing Extreme
• YouTube Video 1
• YouTube Video 2
• YouTube Video 3
• SQL Injection in Different Statement Types

Labs

• Server-side request forgery (SSRF)
• Cross-site scripting (XSS)
• SQL Injection (SQLi)
• XXE & XXE Blind
• Server-side template injection (SSTI)
• Insecure deserialization
• Cross-site request forgery (CSRF)
• Authentication vulnerabilities

Tools

• Wfuzz
• ysoserial
• SQLMap
• PHP Reverse Shell
• Online PHP Editor
• XSS Cheat Sheet