Field Notes / Category

Web Vulnerabilities & Misconfigurations

Practical Web Vulnerabilities & Misconfigurations notes, commands and concise references from the sam0x.me technical library.

01

Web Vulnerabilities & Misconfigurations

Shellshock — Bash CGI vulnerability

Practical Shellshock reference covering Bash, CGI, environment variables, CVE-2014-6271, detection, HTTP header vectors, Nmap, Metasploit and mitigation.
ShellshockBashCGI
13 min→
02

Web Vulnerabilities & Misconfigurations

WebDAV enumeration & misconfiguration

Practical WebDAV reference covering HTTP methods, PROPFIND, authentication, writable resources, DAVTest, Cadaver and common misconfiguration checks.
WebDAVHTTPEnumeration
12 min→