Results for “smtp-injection”

Detect and exploit Server-Side Template Injection vulnerabilities across multiple template engines including Jinja2, Twig, Freemarker, and Velocity, with payloads for sandbox escape and remote code execution. Includes detection methodology, bypass techniques, and fix patterns.

Enumerate SMB, WinRM, LDAP, and MSSQL services, validate credentials, spray passwords, and execute commands on remote hosts using NetExec during authorized penetration tests.

NoSQL injection playbook. Use when MongoDB-style operators, JSON query objects, flexible search filters, or backend query DSLs may allow data or logic abuse.

Extract Kerberos tickets from LSASS memory, inject them into an attacker session, and perform lateral movement to access remote systems as the impersonated user.

Detect and exploit Server-Side Template Injection (SSTI) vulnerabilities across Jinja2, Twig, Freemarker, and other template engines to achieve remote code execution during authorized penetration tests.

XSLT injection testing: processor fingerprinting, XXE and document() SSRF, EXSLT write primitives, PHP/Java/.NET extension RCE surfaces. Use when user-controlled XSLT/stylesheet input or transform endpoints are in scope.

Simulates man-in-the-middle attacks using Ettercap, mitmproxy, and Bettercap in authorized environments to intercept, analyze, and modify network traffic for testing encryption enforcement, certificate validation, and detection capabilities.

Multimodal proposal brief intake — turns text, audio, or video into a structured, completeness-checked brief.md. Use when the user pastes a client brief, drops a voice memo or call recording, shares a video brief, asks to 'intake a proposal', 'structure this brief', or starts a new proposal run. Triggers: 'intake this brief', 'transcribe this recording', 'structure the brief', 'new proposal from voice memo', 'parse this RFP brief'.

Documents MariaDB-specific INSERT syntax and behavior, including RETURNING, ON DUPLICATE KEY UPDATE, INSERT IGNORE, and various forms and modifiers, to help write and review INSERT statements.

Test MSW Pattern

Simulates SSL stripping attacks using sslstrip, Bettercap, and mitmproxy in authorized environments to test HSTS enforcement, certificate validation, and HTTPS upgrade mechanisms.

Team-Wiki Ingest