Aadith Sukumar
|
ad93bb5e22
|
Merge branch 'swisskyrepo:master' into master
|
2023-10-08 23:51:36 +05:30 |
|
Aadith Sukumar
|
bd42625b32
|
Create Clickjacking.md
Added a directory to discuss clickjacking attacks
|
2023-10-08 23:50:58 +05:30 |
|
Swissky
|
a71a793648
|
Merge pull request #676 from dahalsharad/add-wcd-exploit-description-and-image
added Web Cache Deception exploit, description and demonstrative image
|
2023-10-08 19:10:05 +02:00 |
|
sharad
|
37a4f8c977
|
added wcd exploit description and demonstrative image
|
2023-10-04 22:54:37 +05:45 |
|
Swissky
|
892c68e6e7
|
PEAR_Config example
|
2023-10-02 17:12:36 +02:00 |
|
Swissky
|
837f220264
|
LFI with pearcmd.php
|
2023-10-02 12:52:10 +02:00 |
|
Swissky
|
55edc9fc74
|
Fix MySQL duplicate cheatsheet
|
2023-10-01 12:45:12 +02:00 |
|
Swissky
|
d142587f28
|
Race Condition WIP + AD asreproast/kerberoasting
|
2023-10-01 12:42:20 +02:00 |
|
Swissky
|
a0475a2f45
|
Merge pull request #675 from nuts7/kerberoast-without-preauth
Add Kerberoasting w/o domain account
|
2023-09-30 18:51:19 +02:00 |
|
Swissky
|
485103e9bb
|
IDOR Numeric, Hash, Wildcard and PRNG
|
2023-09-25 14:15:48 +02:00 |
|
Swissky
|
84569e18e4
|
Merge pull request #674 from eltociear/patch-1
Fix typo in README.md
|
2023-09-22 14:50:49 +02:00 |
|
nuts7
|
0cea24cfcb
|
Add Kerberoasting w/o domain account
This commit add a Kerberoasting technique without domain account/credentials just a user without pre-authentication (AS_REP Roastable)
|
2023-09-22 13:38:28 +02:00 |
|
Ikko Eltociear Ashimine
|
2aaeac91f8
|
Fix typo in README.md
appropiate -> appropriate
|
2023-09-22 00:11:33 +09:00 |
|
Swissky
|
83f1af0af0
|
Command injection update
|
2023-09-21 13:09:57 +02:00 |
|
Swissky
|
e9fb4f100c
|
Google Web Toolkit
|
2023-09-19 09:58:22 +02:00 |
|
Swissky
|
59640ba51a
|
MYSQL Wide byte injection (GBK)
|
2023-09-14 10:53:37 +02:00 |
|
Swissky
|
64a6e3eb04
|
Merge pull request #672 from manesec/master
Add MYSQL Wide byte injection
|
2023-09-14 10:25:12 +02:00 |
|
Mane
|
811d71026f
|
Update MySQL Injection.md
fix typo
|
2023-09-13 08:33:03 -07:00 |
|
Mane
|
9574af9dd1
|
Update MySQL Injection.md
Add MYSQL Wide byte injection, it can test in Sqli-labs Less-32
|
2023-09-13 08:13:36 -07:00 |
|
Swissky
|
ed7c3a4e0c
|
Merge pull request #671 from Thy-GoD/patch-1
Add automatic shell upgrade via rustcat.
|
2023-09-09 10:50:33 +02:00 |
|
Thigh_GoD
|
c7549916b8
|
Update Reverse Shell Cheatsheet.md
Added small quality adjustment.
|
2023-09-09 03:51:35 +08:00 |
|
Thigh_GoD
|
cf9b9bf70c
|
Update Reverse Shell Cheatsheet.md
Added in automatic shell upgrade via rustcat.
|
2023-09-08 21:15:54 +08:00 |
|
Swissky
|
f9a2880ad5
|
Recover Public Key From Signed JWTs
|
2023-09-04 11:37:15 +02:00 |
|
Swissky
|
c030379871
|
Merge pull request #670 from superboy-zjc/master
Update Lodash SSTI
|
2023-09-03 17:30:52 +02:00 |
|
Swissky
|
a0c14e5299
|
SQL injections - WAF bypass
|
2023-09-03 14:26:03 +02:00 |
|
2h0ng
|
34da0e2708
|
Update Lodash SSTI
Update Lodash SSTI
|
2023-09-02 21:24:59 -04:00 |
|
Swissky
|
7752ff806f
|
ASPNET Cookieless Bypass
|
2023-09-02 23:01:10 +02:00 |
|
Swissky
|
e879ca42a3
|
Merge pull request #668 from sethsec-bf/patch-1
Added CloudFox and CloudFoxable
|
2023-08-31 10:37:38 +02:00 |
|
Seth Art
|
339a51cd0d
|
Added CloudFox and CloudFoxable
|
2023-08-30 14:11:11 -04:00 |
|
Swissky
|
53ec79abd0
|
Initial Access Cheatsheet
|
2023-08-26 22:01:45 +02:00 |
|
Swissky
|
930044d7c1
|
Merge pull request #666 from dwisiswant0/feat/ssrf-add-tool
feat(SSRF): add tool
|
2023-08-26 12:50:56 +02:00 |
|
Swissky
|
9db39952e7
|
Merge pull request #667 from PakCyberbot/master-1
Update SQLite Injection.md
|
2023-08-26 12:50:06 +02:00 |
|
Pak Cyberbot
|
d5922f421c
|
Update SQLite Injection.md
Column names of the specified table can be more easily extracted in a better output.
Tested during the CTF
|
2023-08-25 15:24:52 +05:00 |
|
Dwi Siswanto
|
63379b9291
|
feat(SSRF): add tool
|
2023-08-25 16:34:45 +07:00 |
|
Swissky
|
b0dfcfd438
|
Hidden Parameters
|
2023-08-24 22:15:11 +02:00 |
|
Swissky
|
e2e2da74ce
|
Merge pull request #664 from ScriptSathi/master
feat: Add Rust reverse shell for unix
|
2023-08-22 18:04:31 +02:00 |
|
Tristan D'audibert
|
aea130a1ac
|
Add Rust reverse shell for unix
|
2023-08-21 17:50:11 +02:00 |
|
Swissky
|
d642e97d8d
|
Merge pull request #661 from emmanuel-ferdman/wip
fix: broken link on AWS Amazon Bucket S3 page
|
2023-07-26 14:20:27 +02:00 |
|
Emmanuel Ferdman
|
20b8870123
|
fix: broken link on AWS Amazon Bucket S3 page
Signed-off-by: Emmanuel Ferdman <emmanuelferdman@gmail.com>
|
2023-07-26 15:09:56 +03:00 |
|
Swissky
|
e366ef9a13
|
Merge pull request #660 from yanncam/master
Added precision on the format, generation and breaking of NetNTLMv1
|
2023-07-25 15:28:12 +02:00 |
|
Yann CAM (ycam)
|
e80702d599
|
More details on NetNTLMv1 + typos
More details on NetNTLMv1 + typos
|
2023-07-25 11:31:35 +02:00 |
|
Yann CAM (ycam)
|
4336cb1fd5
|
Update NetNTLMv1 breaking methodology
Add SHuck.Sh/ShuckNT process and details.
|
2023-07-25 11:11:36 +02:00 |
|
Swissky
|
b715364547
|
Fix typo
|
2023-07-18 22:19:29 +02:00 |
|
Swissky
|
52ef85a830
|
WebSocket Tools
|
2023-07-18 22:17:51 +02:00 |
|
Swissky
|
fbc43be79f
|
Merge pull requests
|
2023-07-18 18:24:14 +02:00 |
|
Swissky
|
87e6f55e16
|
Error Based XXE - Local DTD
|
2023-07-18 18:23:34 +02:00 |
|
Swissky
|
359b9b435e
|
Merge pull request #659 from preemptible/patch-1
Update BOOKS.md
|
2023-07-18 10:21:23 +02:00 |
|
Swissky
|
3de6c41823
|
Merge pull request #658 from NaxnN/patch-2
Update SQLite Injection.md
|
2023-07-18 10:20:20 +02:00 |
|
preemptible
|
6d12abb4ec
|
Update BOOKS.md
I added 'black hat Rust', a great book in my humble opinion.
|
2023-07-18 11:16:36 +03:00 |
|
KeoOp
|
d5f85f13d5
|
Update SQLite Injection.md
add "group_concat" so that all tables can be extracted once when the query only returns the first item
|
2023-07-16 23:44:00 +08:00 |
|