# 0xPThree.gitbook.io

## notes

- [Ports](https://0xpthree.gitbook.io/notes/network-services/ports.md)
- [21 - FTP](https://0xpthree.gitbook.io/notes/network-services/ports/21-ftp.md)
- [22 - SSH](https://0xpthree.gitbook.io/notes/network-services/ports/22-ssh.md)
- [23 - Telnet](https://0xpthree.gitbook.io/notes/network-services/ports/23-telnet.md)
- [25, 465, 587 - SMTP(S)](https://0xpthree.gitbook.io/notes/network-services/ports/25-465-587-smtp-s.md)
- [53 - DNS](https://0xpthree.gitbook.io/notes/network-services/ports/53-dns.md)
- [80, 443 - HTTP(S)](https://0xpthree.gitbook.io/notes/network-services/ports/80-443-http-s.md)
- [Frameworks](https://0xpthree.gitbook.io/notes/network-services/ports/80-443-http-s/frameworks.md)
- [Drupal](https://0xpthree.gitbook.io/notes/network-services/ports/80-443-http-s/frameworks/drupal.md)
- [Flask](https://0xpthree.gitbook.io/notes/network-services/ports/80-443-http-s/frameworks/flask.md)
- [Laravel](https://0xpthree.gitbook.io/notes/network-services/ports/80-443-http-s/frameworks/laravel.md)
- [Tomcat](https://0xpthree.gitbook.io/notes/network-services/ports/80-443-http-s/frameworks/tomcat.md)
- [Werkzeug](https://0xpthree.gitbook.io/notes/network-services/ports/80-443-http-s/frameworks/werkzeug.md)
- [Fuzzing](https://0xpthree.gitbook.io/notes/network-services/ports/80-443-http-s/fuzzing.md)
- [Grafana](https://0xpthree.gitbook.io/notes/network-services/ports/80-443-http-s/grafana.md)
- [Languages](https://0xpthree.gitbook.io/notes/network-services/ports/80-443-http-s/languages.md)
- [PHP](https://0xpthree.gitbook.io/notes/network-services/ports/80-443-http-s/languages/php.md)
- [WebDAV](https://0xpthree.gitbook.io/notes/network-services/ports/80-443-http-s/webdav.md)
- [Web Vulnerabilities](https://0xpthree.gitbook.io/notes/network-services/ports/80-443-http-s/web-vulnerabilities.md)
- [CloudFlare Bypass](https://0xpthree.gitbook.io/notes/network-services/ports/80-443-http-s/web-vulnerabilities/cloudflare-bypass.md)
- [Command Injection](https://0xpthree.gitbook.io/notes/network-services/ports/80-443-http-s/web-vulnerabilities/command-injection.md)
- [CSTI](https://0xpthree.gitbook.io/notes/network-services/ports/80-443-http-s/web-vulnerabilities/csti.md): Client Side Template Injection
- [File Inclusion/Path Traversal](https://0xpthree.gitbook.io/notes/network-services/ports/80-443-http-s/web-vulnerabilities/file-inclusion-path-traversal.md)
- [SQL Injection](https://0xpthree.gitbook.io/notes/network-services/ports/80-443-http-s/web-vulnerabilities/sql-injection.md)
- [SSI](https://0xpthree.gitbook.io/notes/network-services/ports/80-443-http-s/web-vulnerabilities/ssi.md): Server Side Includes
- [SSTI](https://0xpthree.gitbook.io/notes/network-services/ports/80-443-http-s/web-vulnerabilities/ssti.md)
- [Upload bypass](https://0xpthree.gitbook.io/notes/network-services/ports/80-443-http-s/web-vulnerabilities/upload-bypass.md)
- [XLST](https://0xpthree.gitbook.io/notes/network-services/ports/80-443-http-s/web-vulnerabilities/xlst.md): Extensible Stylesheet Language Transformations
- [XML Injection](https://0xpthree.gitbook.io/notes/network-services/ports/80-443-http-s/web-vulnerabilities/xml-injection.md)
- [88 - Kerberos](https://0xpthree.gitbook.io/notes/network-services/ports/88-kerberos.md)
- [135, 593 - MSRPC](https://0xpthree.gitbook.io/notes/network-services/ports/135-593-msrpc.md)
- [139, 445 - SMB](https://0xpthree.gitbook.io/notes/network-services/ports/139-445-smb.md)
- [161, 162, 10161, 10162 - SNMP](https://0xpthree.gitbook.io/notes/network-services/ports/161-162-10161-10162-snmp.md)
- [1433, 3306 - SQL](https://0xpthree.gitbook.io/notes/network-services/ports/1433-3306-sql.md)
- [2049 - NFS](https://0xpthree.gitbook.io/notes/network-services/ports/2049-nfs.md)
- [2375 - Docker](https://0xpthree.gitbook.io/notes/network-services/ports/2375-docker.md)
- [ADCS](https://0xpthree.gitbook.io/notes/active-directory/adcs.md)
- [DACL Abuse](https://0xpthree.gitbook.io/notes/active-directory/dacl-abuse.md)
- [AddMember](https://0xpthree.gitbook.io/notes/active-directory/dacl-abuse/addmember.md)
- [ForceChangePassword](https://0xpthree.gitbook.io/notes/active-directory/dacl-abuse/forcechangepassword.md)
- [Kerberoasting](https://0xpthree.gitbook.io/notes/active-directory/dacl-abuse/kerberoasting.md)
- [ReadLAPSPassword](https://0xpthree.gitbook.io/notes/active-directory/dacl-abuse/readlapspassword.md)
- [ReadGMSAPassword](https://0xpthree.gitbook.io/notes/active-directory/dacl-abuse/readgmsapassword.md)
- [Grant Ownership](https://0xpthree.gitbook.io/notes/active-directory/dacl-abuse/grant-ownership.md)
- [Grant Rights](https://0xpthree.gitbook.io/notes/active-directory/dacl-abuse/grant-rights.md)
- [Logon Script](https://0xpthree.gitbook.io/notes/active-directory/dacl-abuse/logon-script.md)
- [Rights on RODC object](https://0xpthree.gitbook.io/notes/active-directory/dacl-abuse/rights-on-rodc-object.md)
- [Security groups](https://0xpthree.gitbook.io/notes/active-directory/security-groups.md)
- [Misc](https://0xpthree.gitbook.io/notes/active-directory/misc.md)
- [Python](https://0xpthree.gitbook.io/notes/coding-languages/python.md)
- [Ansible](https://0xpthree.gitbook.io/notes/exploits-pocs/ansible.md)
- [Ansible AWX](https://0xpthree.gitbook.io/notes/exploits-pocs/ansible/ansible-awx.md)
- [Apache](https://0xpthree.gitbook.io/notes/exploits-pocs/apache.md)
- [HTTP Server - CVE-2021-41773](https://0xpthree.gitbook.io/notes/exploits-pocs/apache/http-server-cve-2021-41773.md)
- [Struts - CVE-2024-53677 / S2-067](https://0xpthree.gitbook.io/notes/exploits-pocs/apache/struts-cve-2024-53677-s2-067.md)
- [Tomcat - CVE-2020-1938 / CVE-2020-10487](https://0xpthree.gitbook.io/notes/exploits-pocs/apache/tomcat-cve-2020-1938-cve-2020-10487.md)
- [Tomcat - CVE-2025-24813](https://0xpthree.gitbook.io/notes/exploits-pocs/apache/tomcat-cve-2025-24813.md)
- [AppArmor](https://0xpthree.gitbook.io/notes/exploits-pocs/apparmor.md)
- [CrackArmor LPE via Confused-Deputy and Sudo/Postfix](https://0xpthree.gitbook.io/notes/exploits-pocs/apparmor/crackarmor-lpe-via-confused-deputy-and-sudo-postfix.md)
- [ASP.NET](https://0xpthree.gitbook.io/notes/exploits-pocs/asp.net.md)
- [SOAPwn](https://0xpthree.gitbook.io/notes/exploits-pocs/asp.net/soapwn.md)
- [ViewState - CVE-2025-53770](https://0xpthree.gitbook.io/notes/exploits-pocs/asp.net/viewstate-cve-2025-53770.md)
- [Confluence - CVE-2023-22527](https://0xpthree.gitbook.io/notes/exploits-pocs/confluence-cve-2023-22527.md)
- [CUPS - CVE-2024-47\*\*\*](https://0xpthree.gitbook.io/notes/exploits-pocs/cups-cve-2024-47.md)
- [D-Link](https://0xpthree.gitbook.io/notes/exploits-pocs/d-link.md)
- [CVE-2020-29322](https://0xpthree.gitbook.io/notes/exploits-pocs/d-link/cve-2020-29322.md)
- [Decrypt firmware: DIR-X1560](https://0xpthree.gitbook.io/notes/exploits-pocs/d-link/decrypt-firmware-dir-x1560.md)
- [Dmidecode - CVE-2023-30630](https://0xpthree.gitbook.io/notes/exploits-pocs/dmidecode-cve-2023-30630.md)
- [Erlang](https://0xpthree.gitbook.io/notes/exploits-pocs/erlang.md)
- [OTP SSH - CVE-2025-32433](https://0xpthree.gitbook.io/notes/exploits-pocs/erlang/otp-ssh-cve-2025-32433.md)
- [EternalBlue - MS17-010](https://0xpthree.gitbook.io/notes/exploits-pocs/eternalblue-ms17-010.md)
- [FileCloud](https://0xpthree.gitbook.io/notes/exploits-pocs/filecloud.md)
- [Gitlab - CVE-2023-7028](https://0xpthree.gitbook.io/notes/exploits-pocs/gitlab-cve-2023-7028.md)
- [Golang](https://0xpthree.gitbook.io/notes/exploits-pocs/golang.md)
- [mholt/archiver](https://0xpthree.gitbook.io/notes/exploits-pocs/golang/mholt-archiver.md)
- [CVE-2024-0406](https://0xpthree.gitbook.io/notes/exploits-pocs/golang/mholt-archiver/cve-2024-0406.md)
- [CVE-2025-3445](https://0xpthree.gitbook.io/notes/exploits-pocs/golang/mholt-archiver/cve-2025-3445.md)
- [Ivanti - CVE-2024-21893 / 21887](https://0xpthree.gitbook.io/notes/exploits-pocs/ivanti-cve-2024-21893-21887.md)
- [Jenkins - CVE-2024-23897](https://0xpthree.gitbook.io/notes/exploits-pocs/jenkins-cve-2024-23897.md)
- [LXD group - N/A](https://0xpthree.gitbook.io/notes/exploits-pocs/lxd-group-n-a.md)
- [MongoDB](https://0xpthree.gitbook.io/notes/exploits-pocs/mongodb.md)
- [MongoBleed - CVE-2025-14847](https://0xpthree.gitbook.io/notes/exploits-pocs/mongodb/mongobleed-cve-2025-14847.md)
- [nf\_tables - CVE-2024-1086](https://0xpthree.gitbook.io/notes/exploits-pocs/nf_tables-cve-2024-1086.md)
- [NFS - N/A](https://0xpthree.gitbook.io/notes/exploits-pocs/nfs-n-a.md)
- [Node](https://0xpthree.gitbook.io/notes/exploits-pocs/node.md)
- [markdown-pdf - CVE-2023-0835](https://0xpthree.gitbook.io/notes/exploits-pocs/node/markdown-pdf-cve-2023-0835.md)
- [sanitize-html - CVE-2024-21501](https://0xpthree.gitbook.io/notes/exploits-pocs/node/sanitize-html-cve-2024-21501.md)
- [Oracle](https://0xpthree.gitbook.io/notes/exploits-pocs/oracle.md)
- [WebLogic - CVE-2018-2628](https://0xpthree.gitbook.io/notes/exploits-pocs/oracle/weblogic-cve-2018-2628.md)
- [WebLogic - CVE-2019-2729](https://0xpthree.gitbook.io/notes/exploits-pocs/oracle/weblogic-cve-2019-2729.md)
- [WebLogic - CVE-2023-21839](https://0xpthree.gitbook.io/notes/exploits-pocs/oracle/weblogic-cve-2023-21839.md)
- [WebLogic - CVE-2024-20931](https://0xpthree.gitbook.io/notes/exploits-pocs/oracle/weblogic-cve-2024-20931.md)
- [WebLogic - CVE-2024-21006](https://0xpthree.gitbook.io/notes/exploits-pocs/oracle/weblogic-cve-2024-21006.md)
- [Identity Manager - CVE-2025-61757](https://0xpthree.gitbook.io/notes/exploits-pocs/oracle/identity-manager-cve-2025-61757.md)
- [PHP](https://0xpthree.gitbook.io/notes/exploits-pocs/php.md)
- [CVE-2024-4577](https://0xpthree.gitbook.io/notes/exploits-pocs/php/cve-2024-4577.md)
- [React](https://0xpthree.gitbook.io/notes/exploits-pocs/react.md)
- [RSC - CVE-2025-55182](https://0xpthree.gitbook.io/notes/exploits-pocs/react/rsc-cve-2025-55182.md)
- [Native CLI - CVE-2025-11953](https://0xpthree.gitbook.io/notes/exploits-pocs/react/native-cli-cve-2025-11953.md)
- [RunC](https://0xpthree.gitbook.io/notes/exploits-pocs/runc.md)
- [CVE-2022-0811](https://0xpthree.gitbook.io/notes/exploits-pocs/runc/cve-2022-0811.md)
- [CVE-2024-21626](https://0xpthree.gitbook.io/notes/exploits-pocs/runc/cve-2024-21626.md)
- [Snap - CVE-2019-7304](https://0xpthree.gitbook.io/notes/exploits-pocs/snap-cve-2019-7304.md)
- [Sudo](https://0xpthree.gitbook.io/notes/exploits-pocs/sudo.md)
- [CVE-2025-32463](https://0xpthree.gitbook.io/notes/exploits-pocs/sudo/cve-2025-32463.md)
- [TP-Link - CVE-2024-5035](https://0xpthree.gitbook.io/notes/exploits-pocs/tp-link-cve-2024-5035.md)
- [VMware](https://0xpthree.gitbook.io/notes/exploits-pocs/vmware.md)
- [CVE-2025-41244](https://0xpthree.gitbook.io/notes/exploits-pocs/vmware/cve-2025-41244.md)
- [Firmware](https://0xpthree.gitbook.io/notes/hardware/firmware.md)
- [JTAG](https://0xpthree.gitbook.io/notes/hardware/jtag.md): Joint Test Action Group
- [SPI](https://0xpthree.gitbook.io/notes/hardware/spi.md): Serial Peripheral Interface
- [UART](https://0xpthree.gitbook.io/notes/hardware/uart.md): Universal Asynchronous Receiver / Transmitter
- [USB](https://0xpthree.gitbook.io/notes/hardware/usb.md)
- [Compile payload](https://0xpthree.gitbook.io/notes/post-exploit/compile-payload.md)
- [Obfuscation](https://0xpthree.gitbook.io/notes/post-exploit/obfuscation.md)
- [Read VMDK files](https://0xpthree.gitbook.io/notes/post-exploit/read-vmdk-files.md)
- [Saved Credentials](https://0xpthree.gitbook.io/notes/post-exploit/saved-credentials.md)
- [Linux - Ansible AWX / Tower](https://0xpthree.gitbook.io/notes/post-exploit/saved-credentials/linux-ansible-awx-tower.md)
- [Linux - Dell Networker](https://0xpthree.gitbook.io/notes/post-exploit/saved-credentials/linux-dell-networker.md)
- [Windows - Mozilla Firefox](https://0xpthree.gitbook.io/notes/post-exploit/saved-credentials/windows-mozilla-firefox.md)
- [Windows - Notepad++](https://0xpthree.gitbook.io/notes/post-exploit/saved-credentials/windows-notepad++.md)
- [Windows - WinSCP](https://0xpthree.gitbook.io/notes/post-exploit/saved-credentials/windows-winscp.md)
- [Session Hijack](https://0xpthree.gitbook.io/notes/post-exploit/session-hijack.md)
- [Sniffing Passwords](https://0xpthree.gitbook.io/notes/post-exploit/sniffing-passwords.md)
- [Upgrade shell](https://0xpthree.gitbook.io/notes/post-exploit/upgrade-shell.md)
- [VMware](https://0xpthree.gitbook.io/notes/post-exploit/vmware.md)
- [Disk Encryption](https://0xpthree.gitbook.io/notes/post-exploit/vmware/disk-encryption.md)
- [LDAP Connection (SSO)](https://0xpthree.gitbook.io/notes/post-exploit/vmware/ldap-connection-sso.md)
- [Restore VCSA Postgres Database](https://0xpthree.gitbook.io/notes/post-exploit/vmware/restore-vcsa-postgres-database.md)
- [vCenter Forge SAML](https://0xpthree.gitbook.io/notes/post-exploit/vmware/vcenter-forge-saml.md)
- [Waiter Account Information](https://0xpthree.gitbook.io/notes/post-exploit/vmware/waiter-account-information.md)
- [MSSQL](https://0xpthree.gitbook.io/notes/sql-injection/mssql.md)
- [Docker](https://0xpthree.gitbook.io/notes/development/docker.md)
- [Ansible AWX](https://0xpthree.gitbook.io/notes/development/docker/ansible-awx.md)
- [Docker Compose](https://0xpthree.gitbook.io/notes/development/docker/docker-compose.md)
- [FileCloud](https://0xpthree.gitbook.io/notes/development/docker/filecloud.md)
- [FirmAE - Emulate Firmware](https://0xpthree.gitbook.io/notes/development/docker/firmae-emulate-firmware.md)
- [Oracle](https://0xpthree.gitbook.io/notes/development/docker/oracle.md)
- [Identity Governance](https://0xpthree.gitbook.io/notes/development/docker/oracle/identity-governance.md)
- [WebLogic](https://0xpthree.gitbook.io/notes/development/docker/oracle/weblogic.md)
- [Rocket.Chat](https://0xpthree.gitbook.io/notes/development/docker/rocket.chat.md)
- [Tomcat](https://0xpthree.gitbook.io/notes/development/docker/tomcat.md)
- [Vaultwarden](https://0xpthree.gitbook.io/notes/development/docker/vaultwarden.md)
- [Hardware](https://0xpthree.gitbook.io/notes/development/hardware.md)
- [WiFi Bus Timetable](https://0xpthree.gitbook.io/notes/development/hardware/wifi-bus-timetable.md)
- [Pwnagotchi](https://0xpthree.gitbook.io/notes/development/hardware/pwnagotchi.md)
- [Linux](https://0xpthree.gitbook.io/notes/development/linux.md)
- [Dnsmasq DHCP](https://0xpthree.gitbook.io/notes/development/linux/dnsmasq-dhcp.md)
- [HTTPS Proxy](https://0xpthree.gitbook.io/notes/development/linux/https-proxy.md)
- [Netplan + Networkd](https://0xpthree.gitbook.io/notes/development/linux/netplan-+-networkd.md)
- [SSL/TLS Certificates](https://0xpthree.gitbook.io/notes/development/linux/ssl-tls-certificates.md)
- [Windows](https://0xpthree.gitbook.io/notes/development/windows.md)
- [Harden Windows Host](https://0xpthree.gitbook.io/notes/development/windows/harden-windows-host.md)
- [Umbraco](https://0xpthree.gitbook.io/notes/development/windows/umbraco.md)
- [TODO](https://0xpthree.gitbook.io/notes/todo.md)