Skip to content

0x1RIS Notes And Cheatsheets Hub

Disclosure Guidelines

Initializing search

Home
Introduction
Basics
Offensive Security Modules
Learning Resources
Programming Cheatsheets

0x1RIS Notes And Cheatsheets Hub

Home
Introduction
Introduction
Basics
Basics
Offensive Security Modules
Offensive Security Modules
- Reconnaissance
  Reconnaissance
- Vulnerability Guides
  Vulnerability Guides
  - Overview
  - Misconfigurations
  - Vulnerability Checklist
  - Authentication Bypass
    Authentication Bypass
    
    Overview
    
    Attack Vectors
    
    Exploitation
    
    Mitigations
    
    Case Studies
  - Authorization Bypass
    Authorization Bypass
    
    Overview
    
    Attack Vectors
    
    Exploitation
    
    Mitigations
    
    Case Studies
  - Command Injection
    Command Injection
    
    Attack Vectors
    
    Case Studies
    
    Exploitation
    
    Introduction
    
    Mitigations
  - CSRF
    CSRF
    
    Case Studies
    
    Exploitation
    
    Introduction
    
    Mitigations
  - Deserialization
    Deserialization
    
    Case Studies
    
    Exploitation
    
    Introduction
    
    Mitigations
  - File Upload
    File Upload
    
    Bypasses
    
    Case Studies
    
    Exploitation
    
    Introduction
    
    Mitigations
  - HTTP Request Smuggling
    HTTP Request Smuggling
    
    Case Studies
    
    Exploitation
    
    Introduction
    
    Mitigations
  - IDOR
    IDOR
    
    Case Studies
    
    Exploitation
    
    Introduction
    
    Mitigations
  - LFI
    LFI
    
    Case Studies
    
    Exploitation
    
    Introduction
    
    Mitigations
  - Open Redirect
    Open Redirect
    
    Exploitation
    
    Introduction
    
    Mitigations
  - Race Conditions
    Race Conditions
    
    Exploitation
    
    Introduction
    
    Mitigations
  - RCE
    RCE
    
    Case Studies
    
    Exploitation
    
    Introduction
    
    Mitigations
  - RFI
    RFI
    
    Case Studies
    
    Exploitation
    
    Introduction
    
    Mitigations
  - SQLi
    SQLi
    
    Advanced SQLi
    
    Blind SQLi
    
    Boolean-based
    
    Case Studies
    
    Error-based
    
    Introduction
    
    Time-based
    
    Union-based
  - SSRF
    SSRF
    
    Case Studies
    
    Exploitation
    
    Introduction
    
    Mitigations
  - Template Injection
    Template Injection
    
    Exploitation
    
    Introduction
    
    Mitigations
  - XSS
    XSS
    
    Blind XSS
    
    Case Studies
    
    DOM XSS
    
    Introduction
    
    Mutation XSS
    
    Reflected XSS
    
    Stored XSS
    
    WAF Bypass
- Exploitation Examples
  Exploitation Examples
  - Overview
  - API Exploitation
  - Binary Exploitation
    Binary Exploitation
    
    Buffer Overflow
    
    Format Strings
    
    Heap Overflow
    
    Introduction
    
    Ret2libc
    
    ROP
    
    SROP
    
    Use After Free
    
    Binary Case Studies
  - Cloud Exploitation
  - IoT Attacks
  - Mobile Exploitation
  - Network Exploitation
  - Social Engineering
  - Web Exploitation
  - Wireless Attacks
- Advanced Techniques
  Advanced Techniques
  - Overview
  - Container Escapes
  - Evasion and Obfuscation
  - Heap Spraying
  - Kernel Exploits
  - Lateral Movement
  - Memory Corruption
  - MITM Attacks
  - Persistence Techniques
  - Sandbox Escapes
  - Privilege Escalation
    Privilege Escalation
    
    Docker
    
    Escalation Checklist
    
    Kubernetes
    
    Linux
    
    Windows
- Payloads and Wordlists
  Payloads and Wordlists
  - Overview
  - Payload Generation
  - Payloads Library
    Payloads Library
    
    Command Injection
    
    Deserialization
    
    LFI/RFI
    
    RCE
    
    Smuggling
    
    SQLi
    
    SSRF
    
    Upload Bypass
    
    XSS
  - Wordlists Collection
    Wordlists Collection
    
    Cloud Enumeration
    
    Custom Wordlists
    
    Directories
    
    Fuzzing
    
    Parameters
    
    Passwords
    
    Subdomains
- Tools and Automation
  Tools and Automation
- Active Directory
  Active Directory
- Android Penetration Testing
  Android Penetration Testing
- Reporting and Writeups
  Reporting and Writeups
Learning Resources
Learning Resources
Programming Cheatsheets
Programming Cheatsheets
- Overview
- Bash
- C
- C++
- Go
- HTML/CSS
- Java
- JavaScript
- Kotlin
- PHP
- PowerShell
- Python
- Regex
- Rust
- SQL
- TypeScript

Home
Offensive Security Modules
Reporting and Writeups

Disclosure Guidelines¶

2025-08-19 2025-08-19

© 2025 0x1RIS. All rights reserved.