GRASSPALM SECURITY https://validator.w3.org/feed/docs/rss2.html Steghide GTFOBins pdfLatex Spawning shells – python, socat Apache Tomcat Application Manager – war file deployment exploit sqsh – MSSQL Linux Client NTLM Pass the hash ASLR Bruteforce Port knocking binwalk C program for find system,exit and SHELL zip2john BOF – Different method Exploiting tar running as root in cron Writing /etc/sudoers using SUID set openssl file PHP file encoding with phpfilter and LFI ldconfig SUID bit set stdin PAUSE using cat Feed binary stdin from inside gdb Exploiting a system command in SUID application Windows PrevEsc Pivoting and Proxy-chaining Dirtycow LFI into RCE using SMTP Upload php as image – File header rbash Escape CURL based LFI Bindshell in C Linux command scraps wfuzz Hydra SSL-enabled POP nmap base64 encoding for command injection Windows add user in C MSF Local Exploit Suggester C Shell JSON POST using CURL mysql injection statements sed,grep,find World writable files Analyzing binaries with strings Step towards Privilege Escalation php mailer exploit MySQL 4.x/5.0 (Linux) – User-Defined Function (UDF) Hexdump Processing List Realtime Running Process Difference Remote Buffer Overflow – Windows PCMan FTP DNS Enumeration Explore