Skip to content
0x1RIS Hub
Web Exploitation
Initializing search
Home
Learn
Recon
Vulns
Exploit
Advanced
Resources
Menu
×
0x1RIS Hub
Home
Learn
Learn
Getting Started
Getting Started
About 0x1RIS
Methodology
Foundations
Foundations
System Fundamentals
System Fundamentals
Linux Basics
Windows Basics
Android Basics
Networking Basics
Security Concepts
Security Concepts
Cryptography
DFIR
Reverse Engineering
Threat Modeling
Practical Skills
Practical Skills
Scripting Essentials
Virtualization
Lab Setup
Recon
Recon
OSINT Introduction
Subdomain Enumeration
DNS Enumeration
Port Scanning
Service Fingerprinting
Technology Detection
Screenshotting
JavaScript Analysis
Social Media OSINT
Code Repositories OSINT
Cloud Assets
Breach Databases
Archive Analysis
Recon Checklist
Case Studies
Vulns
Vulns
Vuln Research
Vuln Research
Vulnerability Checklist
Misconfigurations
Web Vulns
Web Vulns
XSS
XSS
Overview
Reflected XSS
Stored XSS
DOM XSS
Blind XSS
Mutation XSS
WAF Bypass
Case Studies
SQL Injection
SQL Injection
Overview
Union-Based
Error-Based
Boolean-Based
Time-Based
Blind SQLi
Advanced SQLi
Case Studies
Command Injection
Command Injection
Overview
Attack Vectors
Exploitation
Mitigations
Case Studies
File Upload
File Upload
Overview
Exploitation
Bypass Techniques
Mitigations
Case Studies
SSRF
SSRF
Overview
Exploitation
Mitigations
Case Studies
CSRF
CSRF
Overview
Exploitation
Mitigations
Case Studies
LFI/RFI
LFI/RFI
LFI Overview
LFI Exploitation
LFI Mitigations
LFI Case Studies
RFI Overview
RFI Exploitation
RFI Mitigations
RFI Case Studies
SSTI
SSTI
Overview
Exploitation
Mitigations
Race Conditions
Race Conditions
Overview
Exploitation
Open Redirect
Open Redirect
Overview
Exploitation
Mitigations
HTTP Request Smuggling
HTTP Request Smuggling
Overview
Exploitation
Mitigations
Case Studies
Auth Vulns
Auth Vulns
Authentication Bypass
Authentication Bypass
Overview
Attack Vectors
Exploitation
Mitigations
Case Studies
Authorization Bypass
Authorization Bypass
Overview
Attack Vectors
Exploitation
Mitigations
Case Studies
IDOR
IDOR
Overview
Exploitation
Mitigations
Case Studies
Critical Vulns
Critical Vulns
RCE
RCE
Overview
Exploitation
Mitigations
Case Studies
Deserialization
Deserialization
Overview
Exploitation
Mitigations
Case Studies
Exploit
Exploit
Web Exploitation
API Exploitation
Network Exploitation
Mobile Exploitation
Cloud Exploitation
IoT Attacks
Wireless Attacks
Social Engineering
Binary Exploitation
Binary Exploitation
Overview
Buffer Overflow
Heap Overflow
Format Strings
ret2libc
ROP
SROP
Use-After-Free
Case Studies
Active Directory
Active Directory
Enumeration
Kerberos Attacks
NTLM Attacks
Misconfigurations
Security Best Practices
Android Pentest
Android Pentest
Static Analysis
Dynamic Analysis
Instrumentation
Storage Testing
Network Testing
Component Testing
Advanced
Advanced
Kernel Exploits
Memory Corruption
Heap Spraying
Sandbox Escapes
Container Escapes
MITM Attacks
Persistence Techniques
Lateral Movement
Evasion & Obfuscation
Privilege Escalation
Privilege Escalation
Linux
Windows
Docker
Kubernetes
Checklist
Resources
Resources
Payloads & Wordlists
Payloads & Wordlists
Payload Generation
Payloads Library
Payloads Library
XSS
SQLi
RCE
LFI/RFI
Command Injection
SSRF
Deserialization
Request Smuggling
Upload Bypass
Wordlists Collection
Wordlists Collection
Subdomains
Directories
Passwords
Parameters
Fuzzing
Cloud Enumeration
Custom Wordlists
Tools & Automation
Tools & Automation
Recon Tools
Nmap Tricks
Burp Tricks
ZAP Tricks
Metasploit Tricks
Exploitation Tools
Fuzzing Tools
Post-Exploitation Tools
Wireless Tools
Docker Tools
Reporting Tools
Automation Scripts
Custom ReconX
Cheatsheets
Cheatsheets
Bash
C
C++
Go
HTML/CSS
Java
JavaScript
Kotlin
PHP
PowerShell
Python
Regex
Rust
SQL
TypeScript
Reporting & Resources
Reporting & Resources
Report Checklist
Writeup Examples
CTF Writeups
Bug Report Template
Bug Bounty Case Studies
Disclosure Guidelines
Communication Tips
Bounty Tips
Learning
Learning
Books
Blogs
YouTube Channels
Podcasts
Newsletters
Communities
Labs & Platforms
Certifications
Extras
Extras
Mobile Peasant Containment Zone
Home
Exploit
Web Exploitation
¶