> For the complete documentation index, see [llms.txt](https://itrp19-notes.gitbook.io/notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://itrp19-notes.gitbook.io/notes/reference.md). # Reference - [Hacking](https://itrp19-notes.gitbook.io/notes/reference/hacking.md): Remember to be Nice and Don't be an Asshole - [Penetration Testing Resources Bookmarks](https://itrp19-notes.gitbook.io/notes/reference/hacking/penetration-testing-resources-bookmarks.md) - [Research Links](https://itrp19-notes.gitbook.io/notes/reference/hacking/penetration-testing-resources-bookmarks/research-links.md) - [Cheat Sheet](https://itrp19-notes.gitbook.io/notes/reference/hacking/penetration-testing-resources-bookmarks/cheat-sheet.md) - [Learning/Training](https://itrp19-notes.gitbook.io/notes/reference/hacking/penetration-testing-resources-bookmarks/learning-training.md) - [Tools](https://itrp19-notes.gitbook.io/notes/reference/hacking/penetration-testing-resources-bookmarks/tools.md) - [Payloads](https://itrp19-notes.gitbook.io/notes/reference/hacking/penetration-testing-resources-bookmarks/payloads.md) - [Shell](https://itrp19-notes.gitbook.io/notes/reference/hacking/penetration-testing-resources-bookmarks/shell.md) - [AI](https://itrp19-notes.gitbook.io/notes/reference/hacking/penetration-testing-resources-bookmarks/ai.md) - [Reads](https://itrp19-notes.gitbook.io/notes/reference/hacking/penetration-testing-resources-bookmarks/reads.md) - [Podcast](https://itrp19-notes.gitbook.io/notes/reference/hacking/penetration-testing-resources-bookmarks/podcast.md) - [Social Engineering](https://itrp19-notes.gitbook.io/notes/reference/hacking/penetration-testing-resources-bookmarks/social-engineering.md) - [Payloads](https://itrp19-notes.gitbook.io/notes/reference/hacking/penetration-testing-resources-bookmarks/payloads-1.md) - [Web/App Pentesting](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting.md) - [SQL Injection](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting/sql-injection.md) - [SQL Injection In The URL](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting/sql-injection/sql-injection-in-the-url.md) - [SQL Injection In The Search Field](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting/sql-injection/sql-injection-in-the-search-field.md) - [SQL Injection in Login forms](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting/sql-injection/sql-injection-in-login-forms.md) - [Boolean SQL Injection Blind](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting/sql-injection/boolean-sql-injection-blind.md) - [Time based SQL Injection Blind](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting/sql-injection/time-based-sql-injection-blind.md) - [Bypassing SQL Filters](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting/sql-injection/bypassing-sql-filters.md) - [SQL Injection with sqlmap](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting/sql-injection/sql-injection-with-sqlmap.md) - [XPath Injection - Authentication Bypass](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting/sql-injection/xpath-injection-authentication-bypass.md) - [XPath Advanced Data Exfiltration](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting/sql-injection/xpath-injection-authentication-bypass/xpath-advanced-data-exfiltration.md) - [Payloads](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting/sql-injection/payloads.md) - [XSS](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting/xss.md) - [Payloads](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting/xss/payloads.md) - [XSS Reflected](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting/xss/xss-reflected.md) - [XSS Stored](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting/xss/xss-stored.md) - [Dom-based](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting/xss/dom-based.md) - [Blind](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting/xss/blind.md) - [Command Injection](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting/command-injection.md) - [Payloads](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting/command-injection/payloads.md) - [File Upload](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting/file-upload.md) - [Payloads](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting/file-upload/payloads.md) - [Bypass Filters](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting/file-upload/bypass-filters.md) - [File Upload Tricks](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting/file-upload/file-upload-tricks.md) - [SSRF](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting/ssrf.md) - [Payloads](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting/ssrf/payloads.md) - [LFI/RFI](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting/lfi-rfi.md) - [Payloads](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting/lfi-rfi/payloads.md) - [LDAP Injection](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting/ldap-injection.md) - [Port Swigger](https://itrp19-notes.gitbook.io/notes/reference/hacking/port-swigger.md) - [Access control](https://itrp19-notes.gitbook.io/notes/reference/hacking/port-swigger/access-control.md) - [Lab: Unprotected admin functionality](https://itrp19-notes.gitbook.io/notes/reference/hacking/port-swigger/access-control/lab-unprotected-admin-functionality.md) - [Unprotected admin functionality with unpredictable URL](https://itrp19-notes.gitbook.io/notes/reference/hacking/port-swigger/access-control/unprotected-admin-functionality-with-unpredictable-url.md) - [User role controlled by request parameter](https://itrp19-notes.gitbook.io/notes/reference/hacking/port-swigger/access-control/user-role-controlled-by-request-parameter.md) - [User ID controlled by request parameter, with unpredictable user IDs](https://itrp19-notes.gitbook.io/notes/reference/hacking/port-swigger/access-control/user-id-controlled-by-request-parameter-with-unpredictable-user-ids.md) - [User ID controlled by request parameter with password disclosure](https://itrp19-notes.gitbook.io/notes/reference/hacking/port-swigger/access-control/user-id-controlled-by-request-parameter-with-password-disclosure.md) - [Authentication](https://itrp19-notes.gitbook.io/notes/reference/hacking/port-swigger/authentication.md) - [Username enumeration via different responses](https://itrp19-notes.gitbook.io/notes/reference/hacking/port-swigger/authentication/username-enumeration-via-different-responses.md) - [Server-side request forgery (SSRF)](https://itrp19-notes.gitbook.io/notes/reference/hacking/port-swigger/server-side-request-forgery-ssrf.md) - [Basic SSRF against the local server](https://itrp19-notes.gitbook.io/notes/reference/hacking/port-swigger/server-side-request-forgery-ssrf/basic-ssrf-against-the-local-server.md) - [Basic SSRF against another back-end system](https://itrp19-notes.gitbook.io/notes/reference/hacking/port-swigger/server-side-request-forgery-ssrf/basic-ssrf-against-another-back-end-system.md) - [File Upload Vulnerabilities](https://itrp19-notes.gitbook.io/notes/reference/hacking/port-swigger/file-upload-vulnerabilities.md) - [Remote code execution via web shell upload](https://itrp19-notes.gitbook.io/notes/reference/hacking/port-swigger/file-upload-vulnerabilities/remote-code-execution-via-web-shell-upload.md) - [SQL Injection](https://itrp19-notes.gitbook.io/notes/reference/hacking/port-swigger/sql-injection.md) - [SQL injection vulnerability in WHERE clause allowing retrieval of hidden data](https://itrp19-notes.gitbook.io/notes/reference/hacking/port-swigger/sql-injection/sql-injection-vulnerability-in-where-clause-allowing-retrieval-of-hidden-data.md) - [Burp](https://itrp19-notes.gitbook.io/notes/reference/hacking/burp.md) - [Setting up Macro for intruder](https://itrp19-notes.gitbook.io/notes/reference/hacking/burp/setting-up-macro-for-intruder.md) - [Cloud](https://itrp19-notes.gitbook.io/notes/reference/hacking/cloud.md) - [Tools](https://itrp19-notes.gitbook.io/notes/reference/hacking/cloud/tools.md) - [AWS](https://itrp19-notes.gitbook.io/notes/reference/hacking/cloud/aws.md) - [S3 Buckets](https://itrp19-notes.gitbook.io/notes/reference/hacking/cloud/aws/s3-buckets.md) - [Amazon IAM](https://itrp19-notes.gitbook.io/notes/reference/hacking/cloud/aws/amazon-iam.md) - [Dockers](https://itrp19-notes.gitbook.io/notes/reference/hacking/cloud/aws/dockers.md) - [Tools](https://itrp19-notes.gitbook.io/notes/reference/hacking/cloud/aws/dockers/tools.md) - [Azure](https://itrp19-notes.gitbook.io/notes/reference/hacking/cloud/azure.md) - [GCP](https://itrp19-notes.gitbook.io/notes/reference/hacking/cloud/gcp.md): Google Cloud Platform - [Networking](https://itrp19-notes.gitbook.io/notes/reference/hacking/networking.md) - [Cheat Sheet](https://itrp19-notes.gitbook.io/notes/reference/hacking/networking/cheat-sheet.md) - [Hardware Hacking](https://itrp19-notes.gitbook.io/notes/reference/hacking/hardware-hacking.md) - [Computer BIOS](https://itrp19-notes.gitbook.io/notes/reference/hacking/hardware-hacking/computer-bios.md) - [HTML/CSS/JAVA](https://itrp19-notes.gitbook.io/notes/reference/html-css-java.md) - [Tools](https://itrp19-notes.gitbook.io/notes/reference/html-css-java/tools.md) - [HTTP Response Status Codes](https://itrp19-notes.gitbook.io/notes/reference/html-css-java/http-response-status-codes.md) - [Bootstrap Templates](https://itrp19-notes.gitbook.io/notes/reference/html-css-java/bootstrap-templates.md) - [SSL](https://itrp19-notes.gitbook.io/notes/reference/html-css-java/ssl.md): Let's Encrypt SSL Certificates - [cURL](https://itrp19-notes.gitbook.io/notes/reference/html-css-java/curl.md) - [Grep](https://itrp19-notes.gitbook.io/notes/reference/html-css-java/grep.md) - [DataBase](https://itrp19-notes.gitbook.io/notes/reference/database.md) - [My SQL](https://itrp19-notes.gitbook.io/notes/reference/database/my-sql.md) - [Cheat Sheet](https://itrp19-notes.gitbook.io/notes/reference/database/my-sql/cheat-sheet.md) - [Tools](https://itrp19-notes.gitbook.io/notes/reference/database/my-sql/tools.md) - [PYTHON3](https://itrp19-notes.gitbook.io/notes/reference/python3.md) - [Code Resources](https://itrp19-notes.gitbook.io/notes/reference/python3/code-resources.md) - [Python Reference Guide](https://itrp19-notes.gitbook.io/notes/reference/python3/python-reference-guide.md) - [Cheat Sheet](https://itrp19-notes.gitbook.io/notes/reference/python3/python-reference-guide/cheat-sheet.md) - [Code Projects](https://itrp19-notes.gitbook.io/notes/reference/python3/code-projects.md) - [Jiggler Mouse](https://itrp19-notes.gitbook.io/notes/reference/python3/code-projects/jiggler-mouse.md): Have your mouse go on an adventure around the screen. NOTE: To stop, hit the f11 key; it will also stop if it reaches the edge of the screen. - [loan calculator](https://itrp19-notes.gitbook.io/notes/reference/python3/code-projects/loan-calculator.md) - [Bilnd LDAP Data Exfiltration](https://itrp19-notes.gitbook.io/notes/reference/python3/code-projects/bilnd-ldap-data-exfiltration.md) - [SEO](https://itrp19-notes.gitbook.io/notes/reference/seo.md) - [Tools](https://itrp19-notes.gitbook.io/notes/reference/seo/tools.md) - [On-Page SEO](https://itrp19-notes.gitbook.io/notes/reference/seo/on-page-seo.md) - [Local SEO and Keyword Research](https://itrp19-notes.gitbook.io/notes/reference/seo/local-seo-and-keyword-research.md) - [Content Optimization](https://itrp19-notes.gitbook.io/notes/reference/seo/content-optimization.md) - [Technical SEO](https://itrp19-notes.gitbook.io/notes/reference/seo/technical-seo.md) - [Off-Page SEO Tools](https://itrp19-notes.gitbook.io/notes/reference/seo/off-page-seo-tools.md) - [Google Ads](https://itrp19-notes.gitbook.io/notes/reference/seo/google-ads.md) - [Cloud](https://itrp19-notes.gitbook.io/notes/reference/cloud.md) - [AWS](https://itrp19-notes.gitbook.io/notes/reference/cloud/aws.md): Amazon Web Services (AWS) - [Light Sail](https://itrp19-notes.gitbook.io/notes/reference/cloud/aws/light-sail.md) - [Hosting Website on Light Sail and Namecheap](https://itrp19-notes.gitbook.io/notes/reference/cloud/aws/light-sail/hosting-website-on-light-sail-and-namecheap.md) - [Boto3](https://itrp19-notes.gitbook.io/notes/reference/cloud/aws/boto3.md): The AWS SDK for Python (Boto3) lets you set up, manage, and make new AWS services. - [Azure](https://itrp19-notes.gitbook.io/notes/reference/cloud/azure.md): Microsoft Azure - [GCP](https://itrp19-notes.gitbook.io/notes/reference/cloud/gcp.md): Google Cloud Platform (GCP) - [Files](https://itrp19-notes.gitbook.io/notes/reference/files.md) - [PDF](https://itrp19-notes.gitbook.io/notes/reference/files/pdf.md)