1879 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Swissky	af9f103655	Merge pull request #346 from linoskoczek/master ... Fix links in XSS Injection Summary	2021-03-18 21:18:28 +01:00
linoskoczek	825295e465	Update README.md ... Fix broken links in Summary	2021-03-18 19:16:59 +00:00
Swissky	5a3427cf9b	Merge pull request #345 from Tametomo/patch-1 ... Added additional CSV injection cases patterned after in the wild samples	2021-03-17 09:36:25 +01:00
Tametomo	126555e5f9	Update README.md ... Add additional CSV test cases	2021-03-16 19:17:01 -06:00
Swissky	22a1662f60	Merge pull request #341 from cosmin-bianu/master ... Fix Java payload (issue #337)	2021-03-12 12:36:19 +01:00
cosmin-bianu	13d54a5c24	Fixed Java payload ... - Declared variables - Added semicolons at the end of each line - Fixed the bash command	2021-03-12 13:20:15 +02:00
Swissky	d61f683dc6	Merge pull request #339 from c14dd49h/patch-2 ... Update Active Directory Attack.md	2021-02-26 16:37:41 +01:00
c14dd49h	ca28c69e67	Update Active Directory Attack.md	2021-02-26 14:14:10 +01:00
Swissky	8d31b7240b	Office Attacks	2021-02-21 20:17:57 +01:00
Swissky	e128964dd9	Merge pull request #338 from mpgn/patch-1 ... Add mimikatz command to protect a process after removing the protection	2021-02-17 12:32:23 +01:00
mpgn	d1c23c5863	Unload the service mimi	2021-02-17 12:21:16 +01:00
mpgn	9be371d793	add mimikatz command to protect a process again after removing the protection ... fe4e984055/mimikatz/modules/kuhl_m_kernel.c (L99)	2021-02-17 12:15:47 +01:00
Swissky	f6f8ec010a	Merge pull request #336 from valenbg1/patch-1 ... Update Windows - Privilege Escalation.md	2021-02-10 16:36:19 +01:00
Valentín Blanco	73f6ab940c	Update Windows - Privilege Escalation.md ... Adding WES-NG which is a great and updated replacement for Windows-Exploit-Suggester.	2021-02-10 15:52:41 +01:00
Swissky	1d08a7e12d	Merge pull request #335 from unkn0w/patch-1 ... [typo] changed sshs_config to sshd_config	2021-02-05 14:36:05 +01:00
Jakub 'unknow' Mrugalski	9244fe0480	[typo] changed sshs_config to sshd_config	2021-02-05 12:24:49 +01:00
Swissky	495a1f3ffe	Merge pull request #334 from lanjelot/git-dumper ... New tool git-dumper.py	2021-02-03 15:41:27 +01:00
lanjelot	34dff949a2	Fix ToC	2021-02-04 00:47:00 +11:00
lanjelot	fd6d7f360e	New tool git-dumper.py	2021-02-03 21:15:55 +11:00
Swissky	6bcd2e8a6a	Update README.md	2021-01-31 21:51:53 +01:00
Swissky	b4d8b5939f	Merge pull request #332 from kazkansouh/master ... Add a one line postgres file write	2021-01-30 21:59:01 +01:00
Karim Kanso	826130946c	Add a one line postgres file write	2021-01-30 14:17:35 +00:00
Swissky	092083af5c	AD - Printer Bug + Account Lock	2021-01-29 22:10:22 +01:00
Swissky	075721fa9b	Merge pull request #331 from PinkDev1/patch-2 ... Added EoP - $PATH Interception	2021-01-28 22:12:51 +01:00
PinkDev1	93769768e2	Added EoP - $PATH Interception	2021-01-28 19:45:54 +00:00
Swissky	ec856fec21	Merge pull request #330 from JLLeitschuh/patch-2 ... Add XXE via DTD file	2021-01-25 18:02:38 +01:00
Jonathan Leitschuh	92667a12a4	Add XXE via DTD file	2021-01-25 11:50:47 -05:00
Swissky	4c7dd435a6	Merge pull request #329 from PinkDev1/patch-1 ... API Key Leaks: Added commands for testing Mapbox API Tokens	2021-01-25 10:38:58 +01:00
PinkDev1	88aa7c9789	Added commands for testing Mapbox API Tokens	2021-01-25 04:34:40 +00:00
Swissky	2ac947e46d	Merge pull request #327 from ayomawdb/patch-2 ... Add PostgreSQL Check if Current User is Supperuser	2021-01-24 18:44:12 +01:00
Swissky	4e17d6c2b3	Update PostgreSQL Injection.md	2021-01-24 18:43:58 +01:00
Swissky	cd6f5493b3	Update PostgreSQL Injection.md	2021-01-24 18:43:28 +01:00
Ayoma Wijethunga	4b8dab523e	Add PostgreSQL Check if Current User is Supperuser	2021-01-24 23:09:52 +05:30
Swissky	daebeeadd2	Merge pull request #326 from ayomawdb/patch-1 ... Add Kubernetes Pentest Methodology Part 3	2021-01-20 11:01:42 +01:00
Ayoma Wijethunga	b04579aa30	Add Kubernetes Pentest Methodology Part 3 ... $subject and minor correction of a file path	2021-01-20 09:07:23 +05:30
Swissky	0675573d93	Merge pull request #325 from u0pattern/u0pattern-patch-1 ... SSTI Payload in Jinja2 - Arbitrary file read	2021-01-18 10:08:47 +01:00
ムハンマド	89429f9c4f	SSTI Payload in Jinja2 - Arbitrary file read	2021-01-18 11:48:38 +03:00
Swissky	d4d2ba45c2	Merge pull request #323 from lanjelot/protocol-smuggling ... Add PortSwigger http-desync reborn article	2021-01-16 19:04:16 +01:00
lanjelot	c5d8f3fc4f	Add PortSwigger http-desync reborn article	2021-01-17 04:23:38 +11:00
Swissky	7b943d46bc	Merge pull request #322 from lapolis/patch-1 ... Added closing bracket in unicode full width bypass	2021-01-15 17:42:13 +01:00
lapolis_aka_blu	6f758ba6c0	Added closing bracket in unicode full width bypass ... Yeah I know it is logic to use it if you really need the closing tag. But having both brackets in your repo makes it quicker to copy paste :D	2021-01-15 16:38:51 +00:00
Swissky	01aadf3a44	Alternate Data Stream	2021-01-13 10:22:59 +01:00
Swissky	836861c86e	Merge pull request #320 from lanjelot/cloudsplaining ... New cloudsplaining tool to AWS Pentest page	2021-01-12 13:42:36 +01:00
Swissky	964f2cde35	Merge pull request #319 from lanjelot/insecure-scm-cleanup ... Cleaned up Insecure SCM page and added new Yar tool	2021-01-12 13:36:38 +01:00
lanjelot	5cfa93f98b	Add new cloudsplaining tool to AWS Pentest page	2021-01-12 22:59:37 +11:00
lanjelot	4473764c4d	Fix ToC	2021-01-12 22:45:12 +11:00
lanjelot	8c97cec6d8	Clean up Insecure SCM page and add new tool yar	2021-01-12 22:39:37 +11:00
Swissky	3a6ac550b8	DSRM Admin	2021-01-08 23:41:50 +01:00
Swissky	dd80fb899c	Merge pull request #315 from timgates42/bugfix_typo_account ... docs: fix simple typo, accound -> account	2020-12-22 23:53:27 +01:00
Tim Gates	7846225bfd	docs: fix simple typo, accound -> account ... There is a small typo in Methodology and Resources/Active Directory Attack.md. Should read `account` rather than `accound`.	2020-12-23 09:16:40 +11:00