Tricks: makes you smile

A collection of engaging techniques, some unreleased and some perhaps forgotten, to make pentesting fun again. From layer 3 attacks that still work, to user interaction based exploits that aren’t ‘clickjacking’, to local root privilege escalation without exploits and uncommon web application exploitation techniques.

• Francesco `ascii` Ongaro