「net」の検索結果

You are helping a penetration tester exploit authenticated access to Apache

日本語の概要は準備中です。原文の説明を表示しています。

You are helping a penetration tester discover vulnerabilities in a web

日本語の概要は準備中です。原文の説明を表示しています。

You are helping a penetration tester bypass two-factor authentication. The

日本語の概要は準備中です。原文の説明を表示しています。

You are helping a penetration tester exploit Apache JServ Protocol (AJP)

日本語の概要は準備中です。原文の説明を表示しています。

You are helping a penetration tester exploit Java deserialization

日本語の概要は準備中です。原文の説明を表示しています。

You are helping a penetration tester exploit DOM-based cross-site scripting. The

日本語の概要は準備中です。原文の説明を表示しています。

You are helping a penetration tester exploit PHP deserialization

日本語の概要は準備中です。原文の説明を表示しています。

You are helping a penetration tester bypass file upload restrictions to achieve

日本語の概要は準備中です。原文の説明を表示しています。

You are helping a penetration tester exploit race conditions and TOCTOU

日本語の概要は準備中です。原文の説明を表示しています。

You are helping a penetration tester exploit HTTP request smuggling

日本語の概要は準備中です。原文の説明を表示しています。

You are helping a penetration tester exploit blind SQL injection. The target

日本語の概要は準備中です。原文の説明を表示しています。

You are helping a penetration tester exploit error-based SQL injection. The

日本語の概要は準備中です。原文の説明を表示しています。

You are helping a penetration tester exploit OS command injection. The target

日本語の概要は準備中です。原文の説明を表示しています。

You are helping a penetration tester exploit password reset vulnerabilities.

日本語の概要は準備中です。原文の説明を表示しています。

Deauthentication and disassociation attacks against 802.11 networks — targeted single-client deauth for handshake capture, broadcast deauth for DoS (with authorization), action-frame attacks bypassing 802.11w (PMF), beacon flooding, mdk4 / aireplay-ng tooling, and rate-limit / PMF-aware operation. Use to coerce client reconnection (handshake capture, evil-twin roaming), as targeted DoS, or to test PMF posture.

日本語の概要は準備中です。原文の説明を表示しています。

Social engineering attack techniques beyond email phishing for authorized red team and physical penetration testing engagements. Covers pretexting methodology (persona creation, authority and urgency psychological triggers, rapport building), vishing (voice phishing via caller ID spoofing, IVR system exploitation, VoIP infrastructure setup with Twilio/Asterisk), smishing (SMS-based phishing, carrier gateway abuse, short code impersonation), physical social engineering (tailgating and piggybacking, RFID badge cloning with Proxmark3, lock picking and bypass, dumpster diving for sensitive documents), USB drop attacks (Rubber Ducky keystroke injection, Bash Bunny multi-vector payloads, O.MG cable covert implants, BadUSB firmware attacks), watering hole attack planning and execution, and OSINT-driven targeting (LinkedIn harvesting, organizational chart reconstruction, employee pattern analysis). Integrates with the Social Engineering Toolkit for attack automation, Proxmark3 for RFID/NFC cloning, USB Rubber Duc...

日本語の概要は準備中です。原文の説明を表示しています。

Time-of-Check / Time-of-Use (TOCTOU) race condition exploitation methodology across binary, kernel, filesystem, web, and container layers. Covers symbolic-link races (open/access/stat split), file-descriptor races, fopen/realpath traversal races, /proc and procfs races, FUSE-backed slow-fs races to widen the window, ptrace and signal races, kernel double-fetch / userspace pointer races, container/runc/symlink escape primitives, kubernetes admission/authz TOCTOU, web auth-vs-authz TOCTOU, JWT-claim TOCTOU at gateway vs service, payment/idempotency races, and modern race-amplification techniques (single-packet attack, slow loris, FUSE pause, cgroup freeze, scheduler shaping). Use when you've identified a 'check then act' pattern in code, when fuzzing for race conditions, or when exploiting concurrency bugs in privileged binaries / kernel / orchestrators.

日本語の概要は準備中です。原文の説明を表示しています。

JWT attack methodology for penetration testers. Covers algorithm confusion (alg:none, RS256→HS256), weak HMAC secret brute force, kid parameter injection (SQLi, path traversal), jku/x5u/jwk header injection, JWKS cache poisoning, JWS/JWE confusion, timing attacks, and mobile JWT storage extraction. Use when testing JWT-based authentication, hunting auth bypass via token manipulation, or evaluating JWT implementation security in web or mobile apps.

日本語の概要は準備中です。原文の説明を表示しています。

Comprehensive API security testing methodology covering REST, gRPC, and WebSocket attack surfaces. Addresses the full OWASP API Security Top 10 2023 including BOLA/IDOR, broken authentication, excessive data exposure, rate limiting bypass, BFLA, mass assignment, SSRF, and security misconfiguration. Includes REST-specific attacks such as HTTP verb tampering, content-type switching, and parameter pollution. Covers gRPC exploitation through protobuf interception, reflection API enumeration, and metadata injection. Addresses WebSocket vulnerabilities including origin bypass, message injection, and cross-site WebSocket hijacking. Provides tooling guidance for Burp Suite, Postman, grpcurl, websocat, and mitmproxy. Each technique includes detection signatures and defensive indicators so you understand what artifacts your testing leaves behind. Designed for authorized penetration testing engagements against API-driven architectures.

日本語の概要は準備中です。原文の説明を表示しています。

Offensive methodology for attacking GraphQL APIs during penetration tests and bug bounty engagements. Covers the full attack lifecycle: endpoint discovery, introspection abuse and blind schema reconstruction when introspection is disabled, authentication and authorization bypass through Relay node IDs and nested object traversal, injection via variables and directives, query batching for brute force and OTP bypass, denial of service through depth bombs and alias amplification, WebSocket subscription hijacking, information disclosure through verbose errors and field suggestion oracles, and file upload abuse via the multipart GraphQL specification. Includes tool-specific guidance for InQL, graphql-cop, CrackQL, BatchQL, Altair, GraphQL Voyager, and clairvoyance. Trigger on: GraphQL, graphql, introspection query, batching attack, query depth, GraphQL injection, GraphQL IDOR, field suggestion, GraphQL auth bypass, GraphQL DoS, GraphQL security, graphql-cop, InQL, CrackQL, BatchQL, Relay node, alias amplificat...

日本語の概要は準備中です。原文の説明を表示しています。

You are conducting a post-engagement retrospective for a penetration tester.

日本語の概要は準備中です。原文の説明を表示しています。

You are helping a penetration tester escalate privileges on a Windows system by

日本語の概要は準備中です。原文の説明を表示しています。

You are helping a penetration tester enumerate a Windows system for local privilege

日本語の概要は準備中です。原文の説明を表示しています。

You are helping a penetration tester enumerate a Linux system for local privilege

日本語の概要は準備中です。原文の説明を表示しています。