Web Hacking — Tools

Post-exploitation / privilege escalation reference

• GTFOBins — one of the best resources for privilege escalation: a curated list of Unix binaries that can be abused to bypass local security restrictions, spawn shells, read/write files, and more, once a foothold is established.

For per-service enumeration/scanning tools (Metasploit auxiliary modules, hash-identifier, BackupFinder, sublist3r, etc.), see Scanning & Enumeration, Information Gathering, and Credential Attacks.