containers

Kubernetes Pwn

Namespace and pod enumeration, metadata endpoints, service account abuse and reverse shells from inside a cluster.

 databases

PostgreSQL Pwn

Recon queries, information_schema tricks, reading files and turning a superuser shell into code execution.

 cloud

S3 Bucket Pwn

Enumerating buckets anonymously, understanding ListBucket/Get/Put permissions and the risks of public-write buckets.

 ci/cd

Jenkins Pwn

Groovy script console one-liners, credential dumping and exposed endpoints worth checking on every instance.

 cms

WPScan Pwn

Finding vulnerable plugins and themes, enumerating users and running password attacks against WordPress.

 crypto

Decode Fernet

Recognising Fernet tokens and decrypting them once you have found the key.

 recon

Nmap Pwn

Host discovery, fast port scans, NSE vulnerability scripts and brute force collections for common services.

 shell

CLI Tips

Searching, editing and text processing one-liners that make the rest of this work faster.

 misc

Misc

Docker and Kubernetes housekeeping commands, regex tricks and other odds and ends worth keeping handy.