Skip to main content
OverflowMyBuffers
  • Home
  • Active Directory1
  • Appian6
  • Cloud4
  • Code Reviews1
  • CRTO Notes4
  • Docker1
  • eWPTx1
  • General2
  • Keycloak1
  • Kubernetes2
  • Linux1
  • Mendix1
  • Mobile1
  • OSAI2
  • OSCP2
  • OSED4
  • OSEP Notes4
  • OSINT1
  • OSMR1
  • OSWA1
  • OSWE Notes6
  • Pentesting AI2
  • Reverse Engineering1
  • SAP12
  • Sliver1
  • Tools1
  • Web5
  • Wifi7
Did you know?

In ADCS ESC1, if a certificate template allows enrollees to specify a Subject Alternative Name (SAN) and grants low-privileged users enrollment rights, an attacker can request a certificate as any domain user, including Domain Admin, by simply setting the SAN field.

← All topics

eWPTx

1 note

Notes

  • eWPTX — Exam Field ManualComplete eWPTX (INE Web Application Penetration Tester eXtreme) field manual: methodology and recon, authentication and session attacks, SQL and non-SQL injection (OOB, second-order, NoSQL, LDAP, ORM, XXE), API and web service testing, encoding/filter/WAF bypass, server-side attacks, core web attack reference and an exam-day playbook.
AboutPrivacy PolicyManage cookie preferences