- [Web服务突破](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/README.md)
  - [前端](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/前端.md)
  - [SQL注入](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/SQL注入/README.md)
    - [判断注入](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/SQL注入/判断注入.md)
    - [数据库类型识别](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/SQL注入/数据库类型识别.md)
    - [MSSQL](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/SQL注入/MSSQL.md)
    - [MYSQL](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/SQL注入/MYSQL.md)
    - [Oracle](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/SQL注入/Oracle.md)
    - [PostgreSQL](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/SQL注入/PostgreSQL.md)
    - [SQLite](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/SQL注入/SQLite.md)
    - [DB2](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/SQL注入/DB2.md)
    - [SQLMAP](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/SQL注入/SQLMAP.md)
  - [XSS](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/XSS.md)
  - [CSRF](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/CSRF.md)
  - [PHP包含下载读取](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/PHP包含下载读取.md)
  - [XML](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/XML.md)
  - [SSRF](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/SSRF.md)
  - [DNSLOG](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/DNSLOG.md)
  - [Xpath注入](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/Xpath注入.md)
  - [SSTI](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/SSTI.md)
  - [命令注入](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/命令注入.md)
  - [PHPMyAdmin利用](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/PHPMyAdmin利用.md)
  - [PHP-FPM之RCE](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/PHP-FPM之RCE.md)
  - [PHPstudy后门](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/PHPstudy后门.md)
  - [IIS写权限](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/IIS写权限.md)
  - [绕过WAF](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/绕过WAF.md)
  - [数据库](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/数据库.md)
  - [命令执行](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/命令执行.md)
  - [CmdHijack](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/CmdHijack.md)
  - [Fuzz目录](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/Fuzz目录.md)
  - [web程序漏洞](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/web程序漏洞.md)  
  - [编辑器漏洞](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/编辑器漏洞.md)               
  - [邮件地址payload](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/邮件地址payload.md)        
  - [从LFI到RCE](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/从LFI到RCE.md)             
  - [深x服](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/深x服.md)                         
  - [天r信](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/tianr.md)                     
  - [Web server日志分析命令](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/Web-server日志分析命令.md)
  - [默认密码](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/默认密码.md)  
  - [wso2](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/Web服务突破/wso2.md) 
- [未授权访问](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/未授权访问/README.md)
  - [Redis](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/未授权访问/Redis.md)
  - [activemq](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/未授权访问/activemq.md)
  - [docker](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/未授权访问/docker.md)
  - [elastic](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/未授权访问/elastic.md)
  - [hadoop](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/未授权访问/hadoop.md)
  - [jboss](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/未授权访问/jboss.md)
  - [jenkins](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/未授权访问/jenkins.md)
  - [memcache](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/未授权访问/memcache.md)
  - [mongo](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/未授权访问/mongo.md)
  - [zookeeper](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/未授权访问/zookeeper.md)
  - [CouchDB](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/未授权访问/CouchDB.md)
  - [Jenkins](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/未授权访问/Jenkins.md)
  - [Solr](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/未授权访问/Solr.md)
  - [VNC](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/未授权访问/VNC.md)
  - [Weblogic](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/未授权访问/Weblogic.md)
  - [Zabbix](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/未授权访问/Zabbix.md)

- [一些Bypass](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/一些Bypass/README.md)
  - [Linux绕过disable_function](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/一些Bypass/Linux绕过disable_function.md)
  - [Windows系统组件com绕过](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/一些Bypass/Windows系统组件com绕过.md)
  - [cgi启动方式](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/一些Bypass/cgi启动方式.md)
  - [蚁剑绕过](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/一些Bypass/蚁剑绕过.md)
  - [ImageMagick组件绕过](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/一些Bypass/ImageMagick组件绕过.md)
  - [常规函数绕过](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/一些Bypass/常规函数绕过.md)
  - [Open_basedir绕过](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/一些Bypass/Open_basedir绕过.md)
  - [绕过lsa protection](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/一些Bypass/绕过lsa-protection.md)
  - [Bypass mod_security](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/一些Bypass/Bypass-mod_security.md)
- [TomcatAjp之LFI&RCE](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/TomcatAjp之LFI&RCE.md)
- [MSSQL&Agent之Job上线](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/MSSQL&Agent之Job上线.md)
- [MySQL开启外联](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/MySQL开启外联.md)
- [MySQL连接读取文件](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/MySQL连接读取文件.md)
- [MySQL不登陆执行命令](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/MySQL不登陆执行命令.md)
- [近源攻击](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/近源攻击/README.md)
  - [WI-FI破解](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/近源攻击/WI-FI破解.md)
  - [钓鱼网络](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/近源攻击/钓鱼网络.md)
  - [无线干扰](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/近源攻击/无线干扰.md)
  - [BadUSB](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/近源攻击/BadUSB.md)
  - [蓝牙](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/近源攻击/蓝牙.md)
  - [克隆卡](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/近源攻击/克隆卡.md)
- [鱼叉式攻击](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/鱼叉式攻击/README.md)
  - [钓鱼邮件](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/鱼叉式攻击/钓鱼邮件.md)
  - [钓鱼连接](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/鱼叉式攻击/钓鱼连接.md)
  - [第三方鱼叉](https://github.com/xiaoy-sec/Pentest_Note/blob/master/wiki/初始访问/鱼叉式攻击/第三方鱼叉.md)