0x1RISTechDocs
HomeStart HereBasicsBackendOffSecCheatsheetsAbout
Theme
OffSecOffSec
Reconnaissance
Reconnaissance
Passive
OSINT IntroductionSocial Media OSINTBreach DatabasesCode Repositories OSINTArchive Analysis
Active
Subdomain EnumerationDNS EnumerationPort ScanningService Fingerprinting
Analysis
Technology DetectionJavaScript AnalysisCloud AssetsScreenshotting
Operations
Recon ChecklistRecon Case Studies
Vulnerability Guides
Vulnerability Analysis & Exploitation GuidesVuln Checklist
Authentication-bypass
Authentication BypassAuthentication Bypass Attack VectorsAuthentication Bypass ExploitationAuthentication Bypass Case StudiesAuthentication Bypass Mitigations
Authorization-bypass
Authorization BypassAuthorization Bypass Attack VectorsAuthorization Bypass ExploitationAuthorization Bypass Case StudiesAuthorization Bypass Mitigations
Command-injection
Introduction to Command Injection VulnerabilitiesCommand Injection Attack Vectors: Real-World ScenariosExploiting OS Command InjectionCase Studies: Command Injection in the WildMitigating OS Command Injection
Csrf
Introduction to Cross-Site Request Forgery (CSRF) VulnerabilitiesExploitationCase StudiesCSRF Mitigation Strategies and Best Practices
Deserialization
IntroExploitationCase StudiesMitigations
File-upload
IntroExploitationBypassesCase StudiesMitigations
Http-request-smuggling
IntroExploitationCase StudiesMitigations
Idor
IntroExploitationCase StudiesMitigations
Lfi
Introduction to Local File Inclusion (LFI)ExploitationCase Studies: From LFI to RCE and BeyondMitigations
Open-redirect
IntroExploitationMitigations
Race-conditions
IntroExploitationMitigations
Rce
IntroExploitationCase StudiesMitigations
Rfi
IntroExploitationCase StudiesMitigations
Sqli
Introduction to SQL Injection (SQLi)Union-Based SQL InjectionError-Based SQL InjectionIntroduction to Blind SQL InjectionBoolean-Based Blind SQL InjectionTime-Based Blind SQL InjectionAdvanced SQL Injection TechniquesCase Study: SQLi in a Product Filtering Mechanism
Ssrf
IntroExploitationCase StudiesMitigations
Template-injection
IntroExploitationMitigations
Xss
IntroReflected XssStored XssDom XssBlind XssMutation XssWaf BypassCase Studies
Misconfigurations
Active Directory
Active Directory Security , The Real-World Field ManualAD Enumeration , You Can't Hit What You Can't SeeNTLM Authentication - The Protocol That Won't DieKerberos Authentication - The Three-Headed Dog of ADCommon Active Directory Misconfigurations - Where Security BreaksActive Directory Security Best Practices - Building a Secure Foundation
Exploitation
Index
Binary-exploitation
Binary Case StudiesBuffer OverflowFormat StringsHeap OverflowIntroRet2libcRopSropUse After Free
Client-side
Mobile ExploitationSocial Engineering
Network
Iot AttacksNetwork ExploitationWireless Attacks
Web
Api ExploitationCloud ExploitationWeb Exploitation
Payloads & Wordlists
Index
Payloads-library
Command InjectionDeserializationLfi RfiRceSmugglingSqliSsrfUpload BypassXss
Wordlists-collection
Cloud EnumerationCustom WordlistsDirectoriesFuzzingParametersPasswordsSubdomains
Payload Generation
Advanced Techniques
Index
Exploitation-internals
Container EscapesHeap SprayingKernel ExploitsMemory CorruptionSandbox Escapes
Post-exploitation
Evasion And ObfuscationLateral MovementMitm AttacksPersistence Techniques
Privilege-escalation
DockerEscalation ChecklistKubernetesLinuxWindows
Android Pentest
Android Penetration Testing Documentation - The Complete Guide
Android Basics
Android MasteryADB and Android ToolingAndroid Permissions ModelAndroid Reverse Engineering
Android Component Testing - When Apps Talk Too MuchAndroid Static Analysis - Reading Apps Like BooksAndroid Dynamic Analysis - Watching Apps in ActionAndroid Network Security Testing - Watching Apps TalkAndroid Storage Security Testing - Finding Data That Shouldn't Be ThereAndroid Runtime Instrumentation - Hooking Into Apps
Tools & Automation
Security Tools & Automation
Automation
Automation ScriptsCustom ReconXReporting ToolsZap Tricks
Exploit
Exploitation ToolsFuzzing ToolsMetasploit TricksPost Exploitation Tools
Recon
Burp TricksNmap TricksRecon Tools
Reverse
Docker ToolsWireless Tools
Reporting & Writeups
Reporting & Writeups
Bounty
Bounty TipsBug Bounty Case StudiesCommunication Tips
Reporting
Bug Report TemplateDisclosure GuidelinesReport ChecklistWriteup Examples
Ctf Writeups
Home/OffSec/Index

Index

Advanced Techniques

Explore advanced offensive security tactics: privilege escalation, evasion, persistence, memory corruption, and more.
All techniques are derived from real-world research and red team operations.

Previous
Payload Generation
Next
Container Escapes
0x1RIS0x1RIS

Runnable security and backend notes. Labs, cheatsheets, and references.

Docs

Start HereBasicsBackendOffSecCheatsheets

Guides

AboutLearning ResourcesOthersBlog

Connect

GitHubLinkedInTryHackMeTelegram
© 2026 0x1RIS. All rights reserved.Updated for 2026.
Type to search the docs…