# 0xDev

> 0xDev is a personal knowledge base focused on offensive security, red teaming, and security research. The focus is on practical knowledge - understanding how things work, breaking them down, and documenting them clearly enough to revisit later

- [About 0xDev](https://0-x.dev/about.md): Practical notes, research, and hands on knowledge covering offensive security, red teaming, and security research.
- [Legal Disclaimer: Authorized Use and Responsible Disclosure](https://0-x.dev/disclaimer.md): Read the legal disclaimer for 0xDev Security. All content is for authorized security testing and educational research purposes only.
- [Passive Information Gathering](https://0-x.dev/passive-information-gathering.md)
- [Directory & Subdomain Fuzzing](https://0-x.dev/directory-subdomain-fuzzing.md)
- [Web Login Brute Forcing](https://0-x.dev/web-login-brute-forcing.md)
- [WebDAV](https://0-x.dev/web-dav.md)
- [Automated Web Scanners](https://0-x.dev/automated-web-scanners.md)
- [WordPress](https://0-x.dev/cms/wordpress.md)
- [Drupal](https://0-x.dev/cms/drupal.md)
- [Joomla](https://0-x.dev/cms/joomla.md)
- [XSS (Cross-Site Scripting)](https://0-x.dev/xss.md)
- [LFI & RFI | Directory Traversal](https://0-x.dev/lfi-and-rfi-directory-traversal.md)
- [Browser Cookies Attacks](https://0-x.dev/cookie-attacks.md)
- [IDOR (Insecure Direct Object Reference)](https://0-x.dev/insecure-direct-object-reference.md)
- [HTTP Verb Tampering](https://0-x.dev/http-verb-tampering.md)
- [Command Injection](https://0-x.dev/command-injection.md)
- [File Upload Attacks](https://0-x.dev/file-upload-attacks.md)
- [XXE (XML External Entity)](https://0-x.dev/xxe.md)
- [XSLT Injection](https://0-x.dev/xslt-injection.md)
- [GraphQL Attacks](https://0-x.dev/graph-ql-attacks.md)
- [Git Attacks](https://0-x.dev/git-attacks.md)
- [Linux OS Enumeration](https://0-x.dev/linux/linux-os-enumeration.md)
- [Linux Privilege Escalation](https://0-x.dev/linux/linux-privilege-escalation.md)
- [Linux Privileged Groups](https://0-x.dev/linux/linux-privileged-groups.md)
- [Linux Kernel & Software CVE Exploits](https://0-x.dev/linux/linux-exploits.md)
- [Windows OS Enumeration](https://0-x.dev/windows-os-enumeration.md)
- [Windows User Rights Assignment](https://0-x.dev/windows-user-rights-assignment.md)
- [Windows Privilege Escalation](https://0-x.dev/windows-privilege-escalation.md)
- [AD Enumeration (Unauthenticated)](https://0-x.dev/ad/enumeration-unauthenticated.md)
- [AD Enumeration (Credentialed)](https://0-x.dev/ad/enumeration-credentialed.md)
- [Kerberoasting](https://0-x.dev/ad/kerberoasting.md)
- [Kerberos Ticket Attacks](https://0-x.dev/ad/kerberos-ticket-attacks.md)
- [AS-REP Roasting](https://0-x.dev/ad/as-rep-roasting.md)
- [BloodHound](https://0-x.dev/ad/bloodhound.md)
- [AD Privileged Groups](https://0-x.dev/ad/privileged-groups.md)
- [Domain Credential Dumping](https://0-x.dev/ad/domain-credential-dumping.md)
- [AD Access Control List (ACL) Abuse](https://0-x.dev/ad/acl-abuse.md)
- [AD Known Vulnerabilities](https://0-x.dev/ad/known-vulnerabilities.md)
- [AD Resources](https://0-x.dev/ad/resources.md)
- [LLMNR / NBT-NS / mDNS Poisoning](https://0-x.dev/ad/llmnr-nbns-poisoning.md)
- [Malicious Files for NTLM Capture](https://0-x.dev/ad/ntlm-capture-files.md)
- [21 - FTP (File Transfer Protocol)](https://0-x.dev/ftp.md)
- [22 - SSH (Secure Shell)](https://0-x.dev/ssh.md)
- [25, 465 & 587 - SMTP (Simple Mail Transfer Protocol)](https://0-x.dev/smtp.md)
- [80 & 443 - HTTP & HTTPS (Hyper Text Transfer Protocol)](https://0-x.dev/http.md)
- [53 - DNS (Domain Name System)](https://0-x.dev/dns.md)
- [79 - Finger](https://0-x.dev/finger.md)
- [111 - Rpcbind](https://0-x.dev/rpcbind.md)
- [139 & 445 - SMB (Server Message Block)](https://0-x.dev/smb.md)
- [137-139 - NetBIOS (Network Basic Input/Output System)](https://0-x.dev/netbios.md)
- [111 & 2049 - NFS (Network File System)](https://0-x.dev/nfs.md)
- [143 & 993 - IMAP (Internet Message Access Protocol)](https://0-x.dev/imap.md)
- [110 & 995 - POP3 (Post Office Protocol)](https://0-x.dev/pop3.md)
- [161 & 162 - SNMP (Simple Network Management Protocol)](https://0-x.dev/snmp.md)
- [623 - IPMI (Intelligent Platform Management Interface)](https://0-x.dev/ipmi.md)
- [873 - Rsync](https://0-x.dev/rsync.md)
- [1433 - MSSQL (Microsoft SQL Server)](https://0-x.dev/mssql.md)
- [1521 - Oracle Database](https://0-x.dev/oracle-db.md)
- [3306 - MySQL](https://0-x.dev/mysql.md)
- [3389 - RDP (Remote Desktop Protocol)](https://0-x.dev/rdp.md)
- [5985 & 5986 - WinRM (Windows Remote Management)](https://0-x.dev/winrm.md)
- [Password Cracking](https://0-x.dev/password-cracking.md)
- [Username & Password Generation](https://0-x.dev/wordlist-generation.md)
- [Default Login Credentials](https://0-x.dev/default-login-credentials.md)
- [Windows Credentials Attacks](https://0-x.dev/windows-credentials-attacks.md)
- [Linux Credentials Attacks](https://0-x.dev/linux-credentials-attacks.md)
- [Remote Access & Execution](https://0-x.dev/lateral-movement/remote-access.md)
- [Pass-the-Hash (PtH)](https://0-x.dev/lateral-movement/pass-the-hash.md)
- [Pass-the-Ticket (PtT)](https://0-x.dev/lateral-movement/pass-the-ticket.md)
- [Kerberos Double Hop Problem](https://0-x.dev/lateral-movement/kerberos-double-hop-problem.md)
- [Shells](https://0-x.dev/shells.md)
- [File Transfer](https://0-x.dev/file-transfer.md)
- [Pivoting / Port Forwarding ](https://0-x.dev/pivoting-port-forwarding.md)
- [SQL Injection](https://0-x.dev/sql-injection.md)
- [Network Layer Attacks](https://0-x.dev/network-layer-attacks.md)
- [Nmap](https://0-x.dev/nmap.md)
- [NetExec](https://0-x.dev/net-exec.md)
- [Metasploit Framework](https://0-x.dev/metasploit.md)
- [OSINT (Open Source Intelligence)](https://0-x.dev/osint.md)
- [Pulling Video Out of RTP Streams with Wireshark](https://0-x.dev/rtp-to-video-wireshark.md): How to turn captured, unencrypted RTP traffic into a playable H.264 video file using Wireshark and a Lua extractor.
- [HTB Wide - Reverse Engineering Challenge](https://0-x.dev/ctf/htb/challenges/htb-wide-reverse-engineering-challenge.md)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.