Skip to content

Tren/Web_Attack

Repository files navigation

Web_Attack

记录一些渗透中的小技巧,帮助各位攻破各种"不可能"

验证Mail是否存在

http://mailtester.com/testmail.php

搜索Google群组,查看是否有群组,可以查看到邮箱 用户 或者 第三方域名

https://groups.google.com/a/binance.com/forum/

发现WEB-INF/web.xml,扩大攻击面

https://gist.githubusercontent.com/harisec/519dc6b45c6b594908c37d9ac19edbc3/raw/af521a3c730d4a77660e91ed41f51725cb0bbde3/exploit_path_traversals_in_Java_webapps.txt

利用ipv6特性 绕过ip封锁

https://www.cyberis.com/article/bypassing-ip-based-brute-force-protection-ipv6

Google Dork site:"target[.]com" ext:log | ext:txt | ext:conf | ext:cnf | ext:ini | ext:env | ext:sh | ext:bak | ext:backup | ext:swp | ext:old | ext:~ | ext:git | ext:svn | ext:htpasswd | ext:htaccess

About

No description, website, or topics provided.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published