# 80 http

- [/phpbash.php](/pentesting-notes/r3dcl1ff/enumeration/80-http/phpbash.php.md): /phpbash.php
- [inspecting source | Devtools](/pentesting-notes/r3dcl1ff/enumeration/80-http/inspecting-source-or-devtools.md)
- [toolbar that allows to run commands on target](/pentesting-notes/r3dcl1ff/enumeration/80-http/toolbar-that-allows-to-run-commands-on-target.md)
- [Wordpress Enumeration](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration.md): Enumeration one-liners and exploitation of vulnerable plugins
- [Extra commands](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/extra-commands.md)
- [WPScan one-liners](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/wpscan-one-liners.md)
- [Plugins & Themes exploitation](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/plugins-and-themes-exploitation.md): Different techniques to attack vulnerable plugins in Wordpress
- [AdRotate](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/plugins-and-themes-exploitation/adrotate.md)
- [Tsumugi 404.php](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/plugins-and-themes-exploitation/tsumugi-404.php.md): Authenticated exploit
- [Twentytwenty (Theme)](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/plugins-and-themes-exploitation/twentytwenty-theme.md)
- [Woody AD Snippets](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/plugins-and-themes-exploitation/woody-ad-snippets.md): Need creds and access to admin dashboard
- [Activity monitor 2](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/plugins-and-themes-exploitation/activity-monitor-2.md): Exploit available
- [wp.spritz](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/plugins-and-themes-exploitation/wp.spritz.md)
- [Social Warfare](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/plugins-and-themes-exploitation/social-warfare.md): Read /etc/passwd
- [Mail Masta 1.0](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/plugins-and-themes-exploitation/mail-masta-1.0.md)
- [Twentyfourteen](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/plugins-and-themes-exploitation/twentyfourteen.md): Different versions will have different nomenclatures (twentythirteen, twentyfifthteen...etc)
- [CVE-2020-35489 Contact Form 7](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/cve-2020-35489-contact-form-7.md)
- [one-liners](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/one-liners.md)
- [CVE-2023-23488](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/cve-2023-23488.md): Unauthenticated SQL Injection - Paid Memberships Pro < 2.9.8 (WordPress Plugin)
- [nmap](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/nmap.md)
- [Common directories](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/common-directories.md)
- [MoveStore API Auth bypass](/pentesting-notes/r3dcl1ff/enumeration/80-http/wordpress-enumeration/movestore-api-auth-bypass.md)
- [Drupal](/pentesting-notes/r3dcl1ff/enumeration/80-http/drupal.md)
- [Koken CMS](/pentesting-notes/r3dcl1ff/enumeration/80-http/koken-cms.md): Authenticated exploit  #might need to use a full php-reverse-shell.php instead of php one-liner
- [Codiad](/pentesting-notes/r3dcl1ff/enumeration/80-http/codiad.md)
- [/.git](/pentesting-notes/r3dcl1ff/enumeration/80-http/.git.md): Enumerate with gitdumper
- [Subrion CMS 4.2.1](/pentesting-notes/r3dcl1ff/enumeration/80-http/subrion-cms-4.2.1.md): Need user creds and access to admin panel
- [Fuel CMS](/pentesting-notes/r3dcl1ff/enumeration/80-http/fuel-cms.md)
- [phpmyadmin](/pentesting-notes/r3dcl1ff/enumeration/80-http/phpmyadmin.md)
- [/cgi-bin Shellshock](/pentesting-notes/r3dcl1ff/enumeration/80-http/cgi-bin-shellshock.md)
- [Sar2HTML](/pentesting-notes/r3dcl1ff/enumeration/80-http/sar2html.md)
- [Cute News](/pentesting-notes/r3dcl1ff/enumeration/80-http/cute-news.md)
- [Nagios](/pentesting-notes/r3dcl1ff/enumeration/80-http/nagios.md)
- [Joomla](/pentesting-notes/r3dcl1ff/enumeration/80-http/joomla.md)
- [advanced\_component\_system](/pentesting-notes/r3dcl1ff/enumeration/80-http/advanced_component_system.md)
- [webdav](/pentesting-notes/r3dcl1ff/enumeration/80-http/webdav.md)
- [OTRS 5.0](/pentesting-notes/r3dcl1ff/enumeration/80-http/otrs-5.0.md)
- [Apache James](/pentesting-notes/r3dcl1ff/enumeration/80-http/apache-james.md)
- [Ovidentia](/pentesting-notes/r3dcl1ff/enumeration/80-http/ovidentia.md)
- [Cuppa CMS](/pentesting-notes/r3dcl1ff/enumeration/80-http/cuppa-cms.md)
- [Phreebooks](/pentesting-notes/r3dcl1ff/enumeration/80-http/phreebooks.md)
- [Elastix 2.2.0](/pentesting-notes/r3dcl1ff/enumeration/80-http/elastix-2.2.0.md)
- [ApPHP MicroBlog](/pentesting-notes/r3dcl1ff/enumeration/80-http/apphp-microblog.md)
- [MongoDB 2.2.3](/pentesting-notes/r3dcl1ff/enumeration/80-http/mongodb-2.2.3.md)
- [CMS Made Simple 2.2.13](/pentesting-notes/r3dcl1ff/enumeration/80-http/cms-made-simple-2.2.13.md)
- [Jinja2](/pentesting-notes/r3dcl1ff/enumeration/80-http/jinja2.md)
- [Webmin](/pentesting-notes/r3dcl1ff/enumeration/80-http/webmin.md): Read /etc/passwd
- [robots.txt](/pentesting-notes/r3dcl1ff/enumeration/80-http/robots.txt.md)
- [BuilderEngine 3.5.0 Remote Code Execution via elFinder 2.0](/pentesting-notes/r3dcl1ff/enumeration/80-http/builderengine-3.5.0-remote-code-execution-via-elfinder-2.0.md)
- [Squid proxy](/pentesting-notes/r3dcl1ff/enumeration/80-http/squid-proxy.md)
- [simfony CMS](/pentesting-notes/r3dcl1ff/enumeration/80-http/simfony-cms.md)
- [C-Panel Reflected XSS - CVE-2023-294](/pentesting-notes/r3dcl1ff/enumeration/80-http/c-panel-reflected-xss-cve-2023-294.md): POC for CVE 2023-294
- [vBulletin <= 5.6.9: Pre-authentication Remote Code Execution](/pentesting-notes/r3dcl1ff/enumeration/80-http/vbulletin-less-than-5.6.9-pre-authentication-remote-code-execution.md)
