2016-10-18 11:13:23 +00:00
|
|
|
# Payloads All The Things
|
2016-10-18 11:36:18 +00:00
|
|
|
A list of usefull payloads and bypasses for Web Application Security
|
2016-10-18 07:06:10 +00:00
|
|
|
|
|
|
|
|
TODO:
|
2016-10-19 16:39:07 +00:00
|
|
|
* PHP Include
|
2016-10-18 07:06:10 +00:00
|
|
|
* PHP Serialization
|
|
|
|
|
* CSV Injection
|
|
|
|
|
|
|
|
|
|
To improve:
|
|
|
|
|
* RCE
|
|
|
|
|
* SQL injection
|
|
|
|
|
* XXE
|
2016-10-18 11:13:23 +00:00
|
|
|
* SSRF
|
2016-10-18 11:36:18 +00:00
|
|
|
* Upload
|
|
|
|
|
* Tar command exec
|
2016-10-19 16:39:07 +00:00
|
|
|
* Traversal Directory
|
|
|
|
|
* XSS
|
|
|
|
|
|
|
|
|
|
TODO v2:
|
|
|
|
|
* Remove "_" in dir name
|
2016-10-18 07:06:10 +00:00
|
|
|
|
2016-10-19 16:39:07 +00:00
|
|
|
# /!\ Work in Progress : 40%
|
