89 Commits

Author	SHA1	Message	Date
PinkDraconian	5cc8e698c9	Single quotes are messing with the command.	2022-05-15 13:53:50 +02:00
Alexandre ZANNI	c274874430	MSSQL: list permissions	2022-04-18 17:21:26 +02:00
Alexandre ZANNI	1f73834d5e	HQLi in Java apps - HITBSecConf2016	2022-04-14 18:07:35 +02:00
Swissky	4abd52697f	MSSQL Agent Command Execution	2022-03-10 11:05:17 +01:00
Swissky	71dcfd5ca7	ADCS ESC7 Shell + Big Query SQL	2022-02-18 14:50:38 +01:00
Swissky	0b5c5acb87	ESC7 - Vulnerable Certificate Authority Access Control	2022-01-30 23:41:31 +01:00
astroicers	119ae90db6	Update MySQL Injection.md ... fix line 426	2022-01-04 14:28:17 +08:00
Alex G	a568270b15	Add NAME_CONST for MySQL Error based injection	2021-12-16 12:11:25 +01:00
malet	4ab2649317	Fixing "RCE - Attach Database" Payload ... The old payload doesn't work for many cases as the `php` in `<?php` is missing.	2021-12-14 19:54:41 +01:00
Brian Stadnicki	03427da534	SQLite Injection add extract database structure	2021-12-07 06:51:27 +00:00
Philippe Arteau	4169e5d603	informa4on_schema => information_schema ... (Copy-paste error)	2021-10-31 23:33:58 -04:00
Philippe Arteau	6c5e790234	SQLi: Whitespace alternatives + WAF Bypass	2021-10-31 23:25:08 -04:00
jaxBCD	11dc7bc2c2	Update Oracle Sql injection.md add sql error ... Add some error point oracle sql injection	2021-10-04 22:52:48 +07:00
Alvin Smith	335a5c42fb	Update MySQL Injection.md	2021-09-25 22:53:25 +12:00
sudoutopia	f18cb9b569	GROUP_CONCAT equivelent for MSSQL	2021-08-11 17:07:55 +02:00
Swissky	87be30d3b2	DB2 Injection + ADCS	2021-08-10 23:00:19 +02:00
Swissky	0443babe35	Relay + MSSQL Read File	2021-03-25 18:25:02 +01:00
Swissky	f6b9d63bf8	DCOM exploitation and MSSQL CLR	2021-03-24 22:26:23 +01:00
Karim Kanso	826130946c	Add a one line postgres file write	2021-01-30 14:17:35 +00:00
Swissky	4e17d6c2b3	Update PostgreSQL Injection.md	2021-01-24 18:43:58 +01:00
Swissky	cd6f5493b3	Update PostgreSQL Injection.md	2021-01-24 18:43:28 +01:00
Ayoma Wijethunga	4b8dab523e	Add PostgreSQL Check if Current User is Supperuser	2021-01-24 23:09:52 +05:30
marcan2020	3cf44386da	Remove unnecessary condition to extract columns ... Since we retrieve only the rows with a specific table name `name ='table_name', the table name won't start with `sqlite_` . Thus, we can remove the unnecessary condition.	2020-11-17 19:59:11 -05:00
Swissky	f9e2512080	Merge pull request #287 from beomsu317/master ... Update SQL-Injection	2020-11-03 10:38:02 +01:00
Swissky	1137bfca8d	Remote Desktop Services Shadowing	2020-10-30 21:10:00 +01:00
Siddharth Reddy	2bdd23dc51	Update MySQL Injection.md	2020-10-29 17:03:22 +05:30
Vincent Gilles	0b90094002	Fix(Docs): Correcting typos on the repo	2020-10-17 22:52:35 +02:00
Siddharth Reddy	fdc44ce84e	Update Cassandra Injection.md ... Broken link [Injection In Apache Cassandra – Part I - Rodolfo - EternalNoobs](https://eternalnoobs.com/injection-in-apache-cassandra-part-i/)	2020-10-09 18:10:12 +05:30
Swissky	a8319b94ff	Merge pull request #259 from SiddTim/patch-1 ... Update Cassandra Injection.md	2020-10-09 10:31:58 +02:00
Siddharth Reddy	f284045ba6	Update MSSQL Injection.md ... Broken link [Sqlinjectionwiki - MSSQL](http://www.sqlinjectionwiki.com/categories/1/mssql-sql-injection-cheat-sheet/) .	2020-10-09 12:53:21 +05:30
Siddharth Reddy	f66c53ee25	Update Cassandra Injection.md ... Broken link [https://hack2learn.pw/cassandra/login.php]	2020-10-09 12:45:28 +05:30
Swissky	a478356f43	MySQL Fast Exploitation using json_arrayagg()	2020-09-23 17:19:34 +02:00
Swissky	dd40ddd233	XSS summary subentries + GraphTCP	2020-07-12 14:44:33 +02:00
hloverflow	2e7b9db94b	Corrected Reference to 2009 paper	2020-07-12 13:21:18 +08:00
HLOverflow	37f66cc523	add to table of content	2020-07-12 13:17:43 +08:00
hloverflow	baadc6d3e9	contribute PostgreSQL bypass quotes technique	2020-07-12 13:14:26 +08:00
Swissky	d3f1bfa1ae	Merge pull request #209 from c14dd49h/patch-1 ... Update README.md	2020-07-11 10:50:04 +02:00
Swissky	5b1a79cb56	Docker device file breakout	2020-07-04 19:00:56 +02:00
Swissky	f86837ca8c	Fix #211	2020-06-24 12:10:41 +02:00
c14dd49h	5b47fc8ead	Update README.md	2020-05-27 18:53:37 +02:00
Swissky	4ca5e71c2f	Bind shell cheatsheet (Fix #194)	2020-05-24 14:09:46 +02:00
beomsu317	4c3cb6f530	Update SQL-Injection	2020-05-14 15:29:52 +09:00
Swissky	7f1c150edd	Mimikatz Summary	2020-05-10 16:17:10 +02:00
DoI	5aad5795d2	minor spelling fix	2020-05-05 15:15:50 +12:00
DoI	53db029d4e	Added additional info to the Postgres SQLi page	2020-05-05 15:10:44 +12:00
Swissky	da5dc1299e	MSSQL Trusted Link	2020-05-01 12:06:18 +02:00
Swissky	04899355ad	Magic Hashes + SQL fuzz	2020-04-26 21:43:42 +02:00
Swissky	eaac0e748e	Fix issue #185	2020-04-21 11:31:18 +02:00
Swissky	c8c4a6e8a9	Fix issue #185	2020-04-21 11:26:49 +02:00
fuxsocy.py	009a2f9276	Update SQLite Injection.md ... Added new link location for the pdf.	2020-04-03 23:15:05 +00:00