HackIndex
Language
HTTP and HTTPS are the protocols that power the web. HTTP is plain text — everything you send or receive can be read by anyone watching. HTTPS adds encryption using TLS (SSL), which protects data in transit.
HTTP/HTTPS lets browsers load pages, APIs serve JSON, and apps communicate with servers.
No HTTPS or misconfigured TLS (weak ciphers, expired certs).
Sensitive data exposed in URLs or responses.
Broken authentication or session management.
IDOR (Insecure Direct Object References).
Common web vulnerabilities: XSS, SQL injection, CSRF.
Misconfigured headers (CORS, CSP, HSTS).
Directory listing exposed.
Subdomain brute force, passive recon, cert logs, and dorks
Enumerate subdomains and infrastructure by querying Certificate Transparency logs, leveraging publicly recorded TLS certificates to map attack surface during recon.
Leverage advanced Google search operators to uncover exposed files, misconfigs, login portals, and sensitive data indexed on target web infrastructure.
Techniques for gathering web infrastructure intel without direct interaction—DNS records, WHOIS, archived content, metadata, and OSINT sources.
Enumerate hidden subdomains via wordlist-based bruteforce using tools like gobuster, ffuf, and amass to expand attack surface during recon.
HTTP enum covering fingerprinting, vhosts, dirs, APIs, CMS, and headers
Discover hidden API endpoints via fuzzing, path traversal, JS analysis, and spec file leakage to map attack surface on HTTP/HTTPS services.
Identifies CMS platforms (WordPress, Joomla, Drupal) via HTTP responses, meta tags, file paths, and headers to map attack surface during web enumeration.
Techniques for discovering hidden files, directories, and endpoints on web servers using fuzzing tools, wordlists, and response analysis.
Techniques for enumerating Drupal CMS installations, including version detection, module discovery, user enumeration, and identifying misconfigurations via droopescan and manual methods.
Analyze HTTP response headers to identify server technologies, security misconfigurations, and information disclosure vulnerabilities during web enumeration.
Identify web technologies, frameworks, servers & versions via HTTP headers, cookies, error pages, and tool-based analysis to map attack surface.
Web vuln checks: XSS, SQLi, SSRF, XXE, IDOR, JWT, and more
Detect exposed .git directories on web servers that may leak source code, credentials, and project history via misconfigured web root deployments.
Detect command injection vulnerabilities in HTTP/HTTPS services by identifying unsanitized input points that allow OS command execution on the target server.
Techniques for identifying CORS misconfigurations by probing Origin validation, wildcard usage, and credential exposure in cross-origin HTTP responses.
Discover Local and Remote File Inclusion vulnerabilities in web apps by testing path traversal, null bytes, and URL-based payloads via HTTP parameters.
Fuzz HTTP endpoints for local and remote file inclusion vulnerabilities using path traversal sequences, null bytes, and protocol wrappers to expose insecure file handling.
Tests server-side file upload controls for bypass vulnerabilities including MIME spoofing, extension manipulation, and malicious payload delivery via multipart requests.
RCE, SQLi, XSS, LFI, SSRF, XXE, JWT, file upload and more
Exploits CVE-2025-54068, a critical Livewire RCE vulnerability via malicious component payloads over HTTP/HTTPS to achieve remote code execution.
Exploit Local and Remote File Inclusion vulnerabilities in web apps to read sensitive files, achieve RCE, and bypass filters via path traversal and log poisoning.
Techniques to bypass command injection filters and WAFs, including encoding, delimiter abuse, whitespace evasion, and chained payloads for OS command execution.
Exploit insecure file upload endpoints to achieve RCE by bypassing extension filters, MIME validation, and content checks to deploy web shells.
Exploit Local File Inclusion vulnerabilities to achieve RCE via log poisoning, PHP wrappers, /proc/self/environ, and session file injection techniques.
Exploit LFI vulnerabilities to read sensitive files, achieve log poisoning, and escalate to RCE via path traversal and PHP wrapper abuse.
Web shell management, upgrades, and config credential harvesting
Techniques for extracting plaintext credentials and secrets from web application config files post-compromise, targeting HTTP/HTTPS services.
Covers deploying, managing, and upgrading web shells over HTTP/HTTPS for persistent post-exploitation access, including shell stabilisation and capability escalation.
Pivot from web servers to internal nets via proxies and tunneling
Exploit a compromised web server as a pivot point to enumerate and attack internal network segments using tunneling, proxychains, and port forwarding techniques.
HTTP exfil via curl, SQLi, and out-of-band DNS channels
Techniques for extracting database contents through SQL injection, covering UNION-based, blind, and out-of-band methods to retrieve sensitive data.
Covers techniques for tunnelling stolen data over HTTP/HTTPS traffic, exploiting trusted web protocols to bypass DLP controls and evade network detection.
Techniques for exfiltrating data covertly via HTTP/HTTPS using out-of-band channels, bypassing detection through encoded payloads, DNS queries, and indirect communication paths.
Guides on mitigating React CVEs via sanitization and updates
Mitigate React2Shell RCE chain (CVE-2025-55182 + CVE-2025-66478) via HTTP/HTTPS hardening, input validation, and shell execution controls.
We use cookies to improve your browsing experience, analyze site traffic, and personalize content. By clicking "Accept All", you consent to our use of cookies. Privacy Policy.