Swissky
fe41254fde
XXS Public Example + PHP Filter RCE
2022-10-24 12:05:39 +02:00
Swissky
35ff178624
Merge pull request #587 from abhishekchak52/typo-grammar-fix
...
Typo and grammar fix
2022-10-23 11:20:30 +02:00
Swissky
1e01f83c74
Merge pull request #586 from nzdjb/nzdjb-patch-3
...
feat: Explain ec2:AssociateIamInstanceProfile
2022-10-23 11:19:35 +02:00
Abhishek Chakraborty
37da322136
Typo and grammar fix
2022-10-22 17:47:10 -07:00
nzdjb
c5146f5dc8
feat: Explain ec2:AssociateIamInstanceProfile
...
Add explanation for ec2:AssociateIamInstanceProfile.
Also, fix a typo.
2022-10-23 09:24:08 +13:00
Swissky
a43897a473
Merge pull request #585 from 7RU7H/patch-1
...
Update Windows -Privilege Escalation - Typo Fix
2022-10-22 16:04:23 +02:00
7RU7H
22fe4d16e2
Update Windows -Privilege Escalation - Typo Fix
...
# Line 304 - Typo: `...\CurentControlSet\..` -> `...\CurrentControlSet\..`
2022-10-22 14:27:01 +01:00
Swissky
9f37576173
Merge pull request #583 from nzdjb/nzdjb-patch-2
...
feat: Backgrounding long running commands
2022-10-22 10:29:30 +02:00
Swissky
a33e4006f8
Merge pull request #582 from nzdjb/nzdjb-patch-1
...
feat: Command injection with newlines
2022-10-22 10:20:42 +02:00
nzdjb
5ca6c9a22b
feat: Add entry to page contents.
2022-10-22 20:05:57 +13:00
nzdjb
def7c40830
feat: Backgrounding long running commands
2022-10-22 19:52:36 +13:00
nzdjb
1dc5054c4d
feat: Command injection with newlines
2022-10-22 16:46:29 +13:00
Swissky
8df30de938
Remove deadlink
2022-10-21 12:16:32 +02:00
Swissky
1b037a9c64
Merge pull request #581 from Oggy107/master
...
Fix: Broken Link
2022-10-18 19:22:55 +02:00
Urmalveer Singh
4e5521deae
Fix: Broken Link
...
Changed name in summary links: Django Template > Django Templates
Fixed corresponding link: #django-template > #django-templates
2022-10-18 14:38:10 +05:30
Swissky
2fc3eed8a5
Insecure Randomness
2022-10-17 11:07:33 +02:00
Swissky
8df0f565f3
Sapphire and Diamond Tickets
2022-10-16 20:46:05 +02:00
Swissky
b7043cfedd
Bug Hunting Methodology Update
2022-10-16 00:27:47 +02:00
Swissky
3a815e6201
Merge pull request #578 from ShahneRodgers/http-request-smuggling
...
Adds more details to the HTTP request smuggling topic
2022-10-15 12:31:05 +02:00
Swissky
7bbbbd1d83
Merge pull request #577 from llamasoft/linux-evasion
...
Add Linux evasion to its own article
2022-10-15 12:28:05 +02:00
llamasoft
78ff651643
Add Linux evasion to its own article
...
Linux evasion techniques were previously included as part of persistence,
but the number of techniques are varied enough where it likely should
be its own article.
2022-10-14 17:30:25 -04:00
Swissky
a794c57994
Merge pull request #575 from CoryCline/patch-1
...
Added document.cookie blacklist bypass
2022-10-14 09:57:41 +02:00
Cory Cline
a8d8434756
Shortened payload
...
Make payload shorter.
2022-10-13 19:48:20 -05:00
Cory Cline
fbed4254e5
Fixed an oops
...
Somehow I deleted line 120 in a prior commit. Fixed.
2022-10-13 18:52:07 -05:00
Cory Cline
9ee8f092cd
Changed link for document.cookie blacklist
...
Link was not working due to use of period in title.
2022-10-13 18:46:52 -05:00
Cory Cline
9a42be1113
Replaced console.log with alert
...
It's more common to want alert screenshots vs console screenshots.
2022-10-13 18:45:55 -05:00
Cory Cline
f23f28c4e2
Shortened payload
...
Shortened the document.cookie blacklist bypass payload.
2022-10-13 18:43:54 -05:00
Cory Cline
5d561ea7d6
Added document.cookie blacklist bypass
...
Added an alternative to document.cookie for situations when this text is blacklisted.
2022-10-13 18:23:36 -05:00
Swissky
6479c3a400
Merge pull request #574 from sebch-/patch-5
...
Update Active Directory Attack.md
2022-10-12 21:43:44 +02:00
Swissky
34128314d3
Merge pull request #573 from sebch-/patch-4
...
Update README.md
2022-10-12 21:43:16 +02:00
Swissky
31363e016b
Merge pull request #572 from sebch-/patch-3
...
Update Active Directory Attack.md
2022-10-12 21:42:34 +02:00
Seb
b809e104e6
Update Active Directory Attack.md
2022-10-12 21:24:47 +02:00
Seb
26cc3629ce
Update README.md
2022-10-12 20:35:32 +02:00
Seb
f18d4991ff
Update Active Directory Attack.md
2022-10-12 19:47:40 +02:00
Swissky
aca668fcdd
Merge pull request #571 from sebch-/patch-2
...
Update Hash Cracking.md
2022-10-12 19:30:22 +02:00
Seb
5480c40098
Update Hash Cracking.md
2022-10-12 19:29:15 +02:00
Seb
ad5bbd49f1
Update Hash Cracking.md
2022-10-12 18:06:22 +02:00
Swissky
f7a74feaf7
Azure Tools Update
2022-10-12 18:03:49 +02:00
Swissky
6dd5c18b45
Normalize Titles
2022-10-12 12:13:55 +02:00
Swissky
d88e32aaae
.NET Deserialization
2022-10-11 21:52:46 +02:00
Swissky
3392980207
Merge pull request #570 from gdraperi/patch-1
...
Update README.md
2022-10-11 18:49:41 +02:00
Swissky
4a1ba26326
Update README.md
2022-10-11 18:49:17 +02:00
gdraperi
5e3d1d80c8
Update README.md
...
Adding the WGET command and fixing errors in the summary part.
2022-10-11 17:29:53 +02:00
Swissky
b08600d56d
Merge pull request #526 from nerrorsec/patch-4
...
Boolean - Extract info (order by)
2022-10-11 11:26:40 +02:00
Swissky
3f3736471e
Merge branch 'master' into patch-4
2022-10-11 11:26:28 +02:00
Swissky
77dc5e3ff1
Merge pull request #566 from pop3ret/master
...
Merge AWSome Pentesting into Cloud - AWS Pentest
2022-10-11 11:24:21 +02:00
Swissky
ecca4ec5e4
Merge pull request #569 from fabianchoxD/update-.README-file
...
Update .readme file
2022-10-10 15:06:19 +02:00
pop3ret
0530c19c88
Update Cloud - AWS Pentest.md
2022-10-09 16:03:33 -03:00
pop3ret
4b4a630085
Changed summary and chapters
...
Changed summary to include the cheatsheet and also changed the format of the cheatsheet to be the same as the original file
2022-10-09 16:01:14 -03:00
Fabian S. Varon Valencia
c82ec3a902
update URL 0dayallday is not working, same article found in blackmarble.sh
2022-10-08 23:32:31 -05:00
