https://solvere.app/tags/web/ Recent content in Web on Solvere Labs en-us contact@solvere.app (Solvere Labs) contact@solvere.app (Solvere Labs) © 2026 Solvere Labs Tue, 09 Jun 2026 00:00:00 +0000 https://solvere.app/icon-512.png https://solvere.app/tags/web/ https://solvere.app/ctfs/thm/operation-promotion/ Tue, 09 Jun 2026 00:00:00 +0000 naval0505 thmwebcommand-injectionprivilege-escalationrcereverse-shellsqliapacheenum4linux https://solvere.app/ctfs/thm/operation-promotion/ You are up for promotion at Hadron Security. Your senior lead, Mara, has handed you a solo engagement against RecruitCorp, a small recruiting firm with a public-facing portal. https://solvere.app/tutorials/guides/wget/ Sun, 24 May 2026 00:00:00 +0000 Solvere Labs webnetworkinglinux https://solvere.app/tutorials/guides/wget/ The wget quick reference: install and verify, a modular copy-paste cheat sheet, and one command for every real situation. Resume a broken download, mirror a site for offline viewing, pull a list of URLs, reuse a login cookie, POST a form, and rate-limit to stay quiet. https://solvere.app/tutorials/guides/sqlmap/ Sat, 09 May 2026 00:00:00 +0000 Solvere Labs websqlisqlmaplinux https://solvere.app/tutorials/guides/sqlmap/ The sqlmap quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Confirm an injectable parameter, feed a saved Burp request, fingerprint the DBMS, walk the dbs/tables/columns ladder, dump only the columns you need, grab password hashes, evade a WAF with tamper scripts, and route through a proxy. https://solvere.app/tutorials/guides/nikto/ Wed, 06 May 2026 00:00:00 +0000 Solvere Labs webreconenumerationlinux https://solvere.app/tutorials/guides/nikto/ The Nikto quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real scan. Scan HTTP and HTTPS, hit odd ports, reach a vhost by Host header, tune out the noise, proxy through Burp, save a machine-readable report, and pull just the findings. https://solvere.app/tutorials/guides/dirsearch/ Mon, 04 May 2026 00:00:00 +0000 Solvere Labs webenumerationlinux https://solvere.app/tutorials/guides/dirsearch/ The dirsearch quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real content-discovery task. Pick a wordlist, append extensions, filter soft-404s by size, recurse into found directories, scan a list of hosts, save JSON, and proxy through Burp. https://solvere.app/tutorials/guides/feroxbuster/ Sun, 05 Apr 2026 00:00:00 +0000 Solvere Labs webenumerationlinux https://solvere.app/tutorials/guides/feroxbuster/ The feroxbuster quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Run recursive content discovery, cap depth, filter soft-404 noise by size or words, add extensions, scan authenticated with a cookie, follow redirects, proxy through Burp, save JSON, and resume an interrupted scan. https://solvere.app/tutorials/guides/wfuzz/ Sat, 28 Mar 2026 00:00:00 +0000 Solvere Labs webreconenumerationbrute-forcelinuxpython https://solvere.app/tutorials/guides/wfuzz/ The Wfuzz quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Fuzz paths, query and POST parameters, headers, cookies, and virtual hosts, filter custom-404 noise by size, brute a login with two markers, encode payloads on the fly, and proxy through Burp. https://solvere.app/tutorials/guides/cewl/ Sat, 28 Mar 2026 00:00:00 +0000 Solvere Labs webreconpassword-crackingbrute-forceenumerationwordpress https://solvere.app/tutorials/guides/cewl/ The CeWL quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Crawl an authorized site, build a wordlist from its own words, tune depth and length, harvest emails and document authors, rank by frequency, then feed hydra, john, and hashcat. https://solvere.app/tutorials/guides/curl/ Thu, 05 Mar 2026 00:00:00 +0000 Solvere Labs webnetworkinglinux https://solvere.app/tutorials/guides/curl/ The curl quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. POST JSON, follow redirects, reuse cookies, pin DNS, resume a download, ignore a self-signed cert, time a slow endpoint, and proxy through Burp. https://solvere.app/tutorials/guides/gobuster/ Sun, 01 Mar 2026 00:00:00 +0000 Solvere Labs webenumerationdnsgobusterlinux https://solvere.app/tutorials/guides/gobuster/ The Gobuster quick reference: modes, flags, a modular cheat sheet, and a worked breakdown of every real task. Brute-force directories and files, discover vhosts and DNS subdomains, filter false positives by status and length, fuzz with the FUZZ keyword, route through Burp, and enumerate open S3 buckets. https://solvere.app/tutorials/guides/wpscan/ Mon, 23 Feb 2026 00:00:00 +0000 Solvere Labs webreconwordpresslinux https://solvere.app/tutorials/guides/wpscan/ The WPScan quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Enumerate users, find vulnerable plugins and themes, pull exposed config backups, run an authorized login attack, tune detection-mode noise, and parse the JSON with jq. https://solvere.app/tutorials/guides/whatweb/ Mon, 16 Feb 2026 00:00:00 +0000 Solvere Labs webenumerationlinux https://solvere.app/tutorials/guides/whatweb/ The WhatWeb quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Fingerprint a target, tune aggression, chase redirects to the real app, hit a vhost by Host header, scan a list, proxy through Burp, and save structured JSON. https://solvere.app/tutorials/guides/ffuf/ Fri, 06 Feb 2026 00:00:00 +0000 Solvere Labs webenumerationffuflinux https://solvere.app/tutorials/guides/ffuf/ The ffuf quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Fuzz directories and extensions, discover hidden parameters and virtual hosts, fuzz JSON and login bodies, calibrate away catch-all pages, filter by size, words, or regex, recurse, and replay a captured request. https://solvere.app/tutorials/guides/seclists/ Tue, 03 Feb 2026 00:00:00 +0000 Solvere Labs webenumerationlinux https://solvere.app/tutorials/guides/seclists/ The SecLists quick reference: the folders that matter, the file tools and flags you pair with a list, and a modular cheat sheet. Pick a web-content list, brute subdomains, fuzz a vhost, feed ffuf and gobuster, run a gentle Hydra login test, crack hashes offline, and carve a big list into a focused slice. https://solvere.app/tutorials/guides/amass/ Sun, 01 Feb 2026 00:00:00 +0000 Solvere Labs osintdnsreconenumerationweblinux https://solvere.app/tutorials/guides/amass/ The Amass quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real recon situation. Enumerate subdomains passively then actively, load API keys for real coverage, brute force names, pull JSON with jq, find related domains by WHOIS/ASN/CIDR, diff the stored database, and validate before you scan. https://solvere.app/tutorials/guides/testssl/ Thu, 29 Jan 2026 00:00:00 +0000 Solvere Labs webreconlinux https://solvere.app/tutorials/guides/testssl/ The testssl.sh quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Confirm old protocols are off, read the certificate chain, run every named-vuln check, list ciphers, scan STARTTLS mail ports, and pin one backend behind a load balancer. https://solvere.app/tutorials/guides/dirb/ Fri, 23 Jan 2026 00:00:00 +0000 Solvere Labs webenumerationlinux https://solvere.app/tutorials/guides/dirb/ The DIRB quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real scan. Run a first pass, append extensions, scope one directory, scan behind basic auth, reuse a session cookie, proxy through Burp, and survive a wildcard server. https://solvere.app/tutorials/guides/sslscan/ Sun, 18 Jan 2026 00:00:00 +0000 Solvere Labs webreconlinux https://solvere.app/tutorials/guides/sslscan/ The sslscan quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Scan a non-standard TLS port, upgrade a STARTTLS mail service, set SNI on a shared host, check for Heartbleed, read the cipher and certificate output, and diff a hardening change over time. https://solvere.app/ctfs/vulnhub/mr-robot/ Fri, 24 Jan 2025 00:00:00 +0000 neospl0it vulnhubreversingwebbrute-forcecrongtfobinspassword-crackingprivilege-escalationreverse-shell https://solvere.app/ctfs/vulnhub/mr-robot/ The Mr. Robot virtual machine (VM) is an exciting challenge inspired by the hit TV series Mr. Robot. It features three hidden keys, progressively increasing in difficulty.