From 380a3cd3e6369835dac6abaaffa4377ec6722598 Mon Sep 17 00:00:00 2001
From: dsh <daniel.s.holdsworth@gmail.com>
Date: Tue, 23 Jul 2024 09:57:39 +0100
Subject: [PATCH] Add wadcoms, gtfobins (#6214)

---
 .../content/gtfobins@Jd9t8e9r29dHRsN40dDOk.md |  8 ++
 .../content/wadcoms@Rnpx7VkhrBkSQTni6UuTR.md  |  8 ++
 .../cyber-security/cyber-security.json        | 80 ++++++++++++++++---
 3 files changed, 86 insertions(+), 10 deletions(-)
 create mode 100644 src/data/roadmaps/cyber-security/content/gtfobins@Jd9t8e9r29dHRsN40dDOk.md
 create mode 100644 src/data/roadmaps/cyber-security/content/wadcoms@Rnpx7VkhrBkSQTni6UuTR.md

diff --git a/src/data/roadmaps/cyber-security/content/gtfobins@Jd9t8e9r29dHRsN40dDOk.md b/src/data/roadmaps/cyber-security/content/gtfobins@Jd9t8e9r29dHRsN40dDOk.md
new file mode 100644
index 000000000..d439785e7
--- /dev/null
+++ b/src/data/roadmaps/cyber-security/content/gtfobins@Jd9t8e9r29dHRsN40dDOk.md
@@ -0,0 +1,8 @@
+# GTFOBINS
+
+GTFOBins (GTFOBINS) is a curated list of Unix binaries that can be exploited by attackers to bypass local security restrictions on a misconfigured system. It provides a detailed index of commands and scripts, demonstrating how certain binaries, when used improperly, can enable privilege escalation, file manipulation, and other unauthorized activities, thus serving as a resource for both security professionals to understand potential vulnerabilities and for attackers to identify and exploit weaknesses.
+
+Learn more from the following resources:
+
+- [@opensource@GTFOBins/GTFOBins.github.io](https://gtfobins.github.io/)
+- [@video@Mastering Privilege Escalation: A Comprehensive Guide on GTFOBins](https://www.youtube.com/watch?v=gx6CTtWohLQ)
\ No newline at end of file
diff --git a/src/data/roadmaps/cyber-security/content/wadcoms@Rnpx7VkhrBkSQTni6UuTR.md b/src/data/roadmaps/cyber-security/content/wadcoms@Rnpx7VkhrBkSQTni6UuTR.md
new file mode 100644
index 000000000..a82296440
--- /dev/null
+++ b/src/data/roadmaps/cyber-security/content/wadcoms@Rnpx7VkhrBkSQTni6UuTR.md
@@ -0,0 +1,8 @@
+# WADCOMS
+
+WADcoms (Web Application Dangerous Commands) is a comprehensive database of dangerous web application commands and patterns that can be exploited to compromise web security. It offers a catalog of potentially harmful commands and their contexts, helping security professionals identify and mitigate risks associated with web applications by understanding how these commands can be misused for attacks like SQL injection, cross-site scripting (XSS), and remote code execution (RCE).
+
+Learn more from the following resources:
+
+- [@opensource@WADComs/WADComs.github.io](https://wadcoms.github.io/)
+- [@article@WADComs: Windows/Active Directory Interactive Cheat Sheet](https://john-woodman.com/research/wadcoms/)
\ No newline at end of file
diff --git a/src/data/roadmaps/cyber-security/cyber-security.json b/src/data/roadmaps/cyber-security/cyber-security.json
index 610233c92..dffad3376 100644
--- a/src/data/roadmaps/cyber-security/cyber-security.json
+++ b/src/data/roadmaps/cyber-security/cyber-security.json
@@ -6130,8 +6130,8 @@
         }
       },
       "zIndex": 999,
-      "width": 345,
-      "height": 36,
+      "width": 315,
+      "height": 60,
       "style": {},
       "positionAbsolute": {
         "x": -397.4653099623346,
@@ -7461,7 +7461,7 @@
       "id": "10qbxX8DCrfyH7tgYexxQ",
       "type": "subtopic",
       "position": {
-        "x": -388.85457362646355,
+        "x": -385.24003999212795,
         "y": 2743.5549352589032
       },
       "selected": false,
@@ -7474,14 +7474,14 @@
         }
       },
       "zIndex": 999,
-      "width": 317,
+      "width": 100,
       "height": 49,
       "style": {
-        "width": 317,
+        "width": 100,
         "height": 49
       },
       "positionAbsolute": {
-        "x": -388.85457362646355,
+        "x": -385.24003999212795,
         "y": 2743.5549352589032
       },
       "dragging": false,
@@ -8730,8 +8730,8 @@
         }
       },
       "zIndex": 999,
-      "width": 352,
-      "height": 36,
+      "width": 315,
+      "height": 60,
       "style": {},
       "positionAbsolute": {
         "x": -23.8699925629752,
@@ -11293,8 +11293,8 @@
         }
       },
       "zIndex": 999,
-      "width": 424,
-      "height": 49,
+      "width": 315,
+      "height": 69,
       "style": {},
       "positionAbsolute": {
         "x": -372.36545692599566,
@@ -11586,6 +11586,66 @@
       },
       "selectable": true,
       "focusable": true
+    },
+    {
+      "id": "Jd9t8e9r29dHRsN40dDOk",
+      "type": "subtopic",
+      "position": {
+        "x": -281.24003999212795,
+        "y": 2743.5549352589032
+      },
+      "selected": false,
+      "data": {
+        "label": "GTFOBINS",
+        "style": {
+          "fontSize": 17,
+          "justifyContent": "flex-start",
+          "textAlign": "center"
+        }
+      },
+      "zIndex": 999,
+      "width": 100,
+      "height": 49,
+      "positionAbsolute": {
+        "x": -281.24003999212795,
+        "y": 2743.5549352589032
+      },
+      "dragging": false,
+      "style": {
+        "width": 100,
+        "height": 49
+      },
+      "resizing": false
+    },
+    {
+      "id": "Rnpx7VkhrBkSQTni6UuTR",
+      "type": "subtopic",
+      "position": {
+        "x": -177.24003999212795,
+        "y": 2743.5549352589032
+      },
+      "selected": true,
+      "data": {
+        "label": "WADCOMS",
+        "style": {
+          "fontSize": 17,
+          "justifyContent": "flex-start",
+          "textAlign": "center"
+        }
+      },
+      "zIndex": 999,
+      "width": 100,
+      "height": 49,
+      "positionAbsolute": {
+        "x": -177.24003999212795,
+        "y": 2743.5549352589032
+      },
+      "dragging": false,
+      "style": {
+        "width": 100,
+        "height": 49
+      },
+      "resizing": false
     }
   ],
   "edges": [