> For the complete documentation index, see [llms.txt](https://dhaneshsivasamy07.gitbook.io/oscp-2022/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://dhaneshsivasamy07.gitbook.io/oscp-2022/misc/web.md).

# Web

### Identifying CVE

* CMS Name exploit as google search --> Rapid 7 will provide t CVE ID (mostly) --> Search CVE ID --> CVE Mitre site provides information about the exploit
* CVE-ID github provides opensource exploit scripts

### RCE

* When ever you face an RCE exploit first check with a ping command because some RCE's are blind RCE  (meaning the oupt for whoami /other commands will not be shown )