Scribd
Upload
10 views5 pages

CORS and Security Flowcharts Guide

The document outlines various flowcharts related to security vulnerabilities and attack vectors, including CORS misconfiguration, GraphQL introspection, JWT hacking, and cookie tampering. It also details a full kill-chain process for penetration testing and provides a cheat-sheet of over 100 flowcharts categorized by different security topics. The content is extensive enough to warrant compilation into a PDF format.

Uploaded by

david.vrba98
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
10 views5 pages

CORS and Security Flowcharts Guide

The document outlines various flowcharts related to security vulnerabilities and attack vectors, including CORS misconfiguration, GraphQL introspection, JWT hacking, and cookie tampering. It also details a full kill-chain process for penetration testing and provides a cheat-sheet of over 100 flowcharts categorized by different security topics. The content is extensive enough to warrant compilation into a PDF format.

Uploaded by

david.vrba98
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

9.

CORS MISCONFIG → ACCOUNT TAKEOVER FLOWCHART

Inspect headers:

Access-Control-Allow-Origin

Access-Control-Allow-Credentials

Je:

ACAO: *

ACAC: true

→ FULL ATO:

fetch("victim/api", {credentials:"include"})

10. GRAPHQL FLOWCHART

/graphql existuje?

Zkus introspection

schema visible?

Vyhledej:

- mutations

- admin functions

- IDOR resolvers

↓
Zkus:

mutation { promoteUser(id:1, role:"admin") }

Admin? → kill chain

11. JWT HACKING FLOWCHART

decode token

alg = none ?

ANO → admin = true

NE →

alg = HS256?

Brute force secret

alg = RS256?

Key confusion → HS256 using public key

12. COOKIE TAMPERING FLOWCHART

Cookie obsahuje:
role=user?

Zkus role=admin

Zkus base64 decode

Zkus blowfish decode (PHP session)

Zkus weak encryption keys

13. FULL KILL-CHAIN FLOW (MASTER OSCP)

Recon

Najdi vstupní bod:

LFI?

Upload?

SSTI?

SSRF?

SQLi?

Auth bypass?

Admin panel?

Získej foothold:

RCE? upload? SSTI? SQLi file write?

↓
Reverse shell

Stabilizace:

python3 -c 'import pty;[Link]("/bin/bash")'

Privilege escalation:

sudo -l

SUID

capabilities

cron

NFS

Docker

Root → [Link]

14. OSCP FLOW BIBLE (KRÁTCE)

Pokud vidím:

LFI → jdu na log poisoning

Upload → zkouším .htaccess bypass

XSS → admin → upload → RCE

SSRF → Redis / AWS → file write → RCE

SSTI → immediate RCE

SQLi → OUTFILE → RCE

JWT → none/weak → admin → upload

IDOR → admin → upload

Debug mode → env leak → creds → SSH → root


Directory listing → config leak → creds → SSH

15. CHEAT-SHEET FLOWCHARTY PRO 90DENNÍ PROGRAM

Následuje 100+ flowchartů, které budou rozděleny do kategorií:

 Recon

 Authentication

 Broken Access Control

 Injection

 File Handling

 Templating

 Deserialization

 Server Misconfig

 API

 GraphQL

 Mobile API

 OAuth

 JWT

 Microservices

 WAF bypass

 OSCP PrivEsc mapping

Je to tak rozsáhlé, že to patří do PDF.

You might also like