# Exploitation

# Links

# DNS

[https://nip.io/](https://nip.io/) Wildcard DNS

# Request Interception

Tools:

- BurpSuite

Links:

- [Requestbin](https://requestbin.com/): Interecepts HTTP Requests (useful for blind SSRF)

# HTTPD

##### Busybox HTTPD

```bash
httpd [-ifv[v]] [-c CONFFILE] [-p [IP:]PORT] [-u USER[:GRP]] [-r REALM] [-h HOME] or httpd -d/-e/-m STRING

Listen for incoming HTTP requests

Options:

        -i              Inetd mode
        -f              Do not daemonize
        -v[v]           Verbose
        -c FILE         Configuration file (default httpd.conf)
        -p [IP:]PORT    Bind to ip:port (default *:80)
        -u USER[:GRP]   Set uid/gid after binding to port
        -r REALM        Authentication Realm for Basic Authentication
        -h HOME         Home directory (default .)
        -m STRING       MD5 crypt STRING
        -e STRING       HTML encode STRING
        -d STRING       URL decode STRING
```

# Conversion

- [CyberChef](https://gchq.github.io/CyberChef/): Encode/Decode string formats with recipes

# Payloads

- [PayloadsAllTheThings](https://swisskyrepo.github.io/PayloadsAllTheThingsWeb/): Misc payloads and bypasses