💻
OSWE Everything
CtrlK
💻
OSWE Everything
CtrlK
  • Recon
    • General Information Gathering
    • Blackbox API Discovery
  • VULNERABILITIES
    • Type Juggling
    • Cross Site Scripting
      • Hunting for files
    • Insecure Deserialization
      • .NET
      • JSF ViewState
        • ViewState Encryption / Description Tool
    • SQL Injection
      • Blind SQL Injection
      • SQLi debugging
      • Code review
      • Errors and additional information
      • Approaches to leverage different databases
    • XML External Entity (XXE)
      • Types of XML Entities
      • Exploitation
      • Wrappers for errors
      • Post Exploitation
    • JavaScript Prototype Pollution
      • Understand the vulnerability
      • The most frequent functions that leads to Prototype Pollution
      • Exploitation
    • OS Command Injection
      • Exploitation
    • Server Side Template Injection
      • Exploitation
    • Authentication Bypass
      • Checklist
      • Looking for unauthenticated endpoints
        • Java
  • Unsecure Random Function
    • Exploitation
  • Cross Origin Resource Sharing (CORS)
    • Prerequisites of Exploitation
  • Client Side Request Forgery (CSRF)
    • Prerequisites of Exploitation
  • Exploit Writing
    • Cheatsheet
      • Command line arguments
      • Requests and proxy
    • Skeleton Scripts
  • Code review
    • Manual code review
      • Routing
      • Searching for exploits
      • Debugging
    • Decompilation
      • Java
      • .NET
        • Betterr Debbuging Experience
        • Finding cross references in code
        • Modiyfing assemblies
    • Managing the application
      • Identifying application file location
      • Restarting web applications
    • Debbuging
    • Remote Debbuging
  • Preparation Machines
    • [HTB] Vault
    • [HTB] Arkham
    • Other HTB scripts
  • ADDITIONAL INFORMATION
    • Sources
    • RDP connection
  • External Resources
    • WhiteBox Pentest
Powered by GitBook
On this page
  1. Code review

Decompilation

Java.NET
PreviousDebuggingNextJava