Post-Exploitation

Credential Harvesting from Web Configs

Techniques for extracting plaintext credentials and secrets from web application config files post-compromise, targeting HTTP/HTTPS services.

Mar 28, 2026 • 3 min read

Web Shell Management and Upgrade

Covers deploying, managing, and upgrading web shells over HTTP/HTTPS for persistent post-exploitation access, including shell stabilisation and capability escalation.

Mar 28, 2026 • 3 min read