215 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Swissky	ddfdc51e68	Credit fix - WAF bypass	2018-11-09 12:43:30 +01:00
Swissky	1b2ee3e67a	Subdomain enumeration - New Aquatone (Go)	2018-11-05 13:45:52 +01:00
Swissky	6bcb43e39c	LDAP fix typo + LDAP attributes + LFI filter chaining	2018-11-02 13:50:56 +01:00
Swissky	86db6b7f6f	Polyglot XSS from @filedescriptor's Polyglot Challenge	2018-10-31 23:41:11 +01:00
Swissky	4b7fe437a5	LDAP userPassword attribute	2018-10-31 22:34:10 +01:00
Swissky	add00c7357	JWT JSON Web Token + SSI files	2018-10-29 22:22:10 +01:00
Swissky	7b919e4492	AWS cp files and grant access with ACL	2018-10-20 17:03:13 +02:00
Swissky	f1eefd2722	Script Docker RCE	2018-10-18 17:32:01 +02:00
Swissky	f8019e2234	Merge pull request #27 from timwis/patch-1 ... Remove gender-specific pronoun for attacker	2018-10-11 09:09:42 +02:00
Tim Wisniewski	4f6841ed17	Remove gender-specific pronoun for attacker ... Wouldn't want anyone to think they can't grow up to be an attacker too! :)	2018-10-10 23:54:18 -04:00
Swissky	ea1c3a7ccb	Merge pull request #26 from Techbrunch/patch-1 ... Add Rancher Metadata Service	2018-10-08 23:02:35 +02:00
Techbrunch	78103d13a1	Add Rancher Metadata Service	2018-10-08 21:46:57 +02:00
Swissky	35d4139373	WebCache param miner file + Reverse shell Python TTY	2018-10-08 13:49:50 +02:00
Swissky	869b29195b	SQLmap --crawl, --form	2018-10-04 19:59:11 +02:00
Swissky	f0a8b6f8b8	Koadic cheatsheet renamed to "Windows - Post Exploitation"	2018-10-04 17:39:55 +02:00
Swissky	9ebf2057c5	Koadic Cheatsheet + Linux persistence in startup .desktop file	2018-10-04 17:35:57 +02:00
Swissky	747f1d172c	Reverse shell python for Windows + Lua + Awk	2018-10-02 17:17:03 +02:00
Swissky	824d8c370b	Bugfix README + Can I take over xyz	2018-10-02 16:57:01 +02:00
Swissky	1c5f8889bd	Network Discovery and Subdomains enumerations	2018-10-02 16:17:16 +02:00
Swissky	b315252c89	LFI - Intruder files (Windows,Linux,Logs...)	2018-10-01 17:11:51 +02:00
Swissky	a3975ab261	SQLmap TOR + Cookie + Proxy	2018-10-01 16:03:07 +02:00
Swissky	7b49f1b13a	PHP Serialization - phpggc	2018-10-01 12:30:14 +02:00
Swissky	6ca5ff1703	PHP Serialization Auth Bypass - Merge pull request #25 from noraj/patch-2 ... add auth bypass	2018-09-26 18:04:08 +02:00
Alexandre ZANNI	3cf806c8ff	2nd unserialize payload	2018-09-26 00:13:19 +02:00
Alexandre ZANNI	d49e40b1b2	add auth bypass	2018-09-25 23:59:29 +02:00
Swissky	1a1a48c725	Web Cache Deception details from SI9INT's blogpost	2018-09-23 20:07:19 +02:00
Swissky	8bef006d7f	MSSQL Comments - Merge pull request #24 from Margular/patch-1 ... add comments	2018-09-22 23:12:23 +02:00
时雨	20c1e5c075	add comments	2018-09-23 02:30:03 +08:00
Swissky	cce0444245	SQL injection - Intruders payloads	2018-09-21 18:44:32 +02:00
Swissky	699d66d701	Merge pull request #23 from noraj/patch-1 ... routed injection in ToC	2018-09-21 18:42:32 +02:00
Alexandre ZANNI	a1eb693270	routed injection in ToC	2018-09-20 23:52:07 +02:00
Swissky	7a80647e63	Raw MD5 SQL injection + SSH Konami Code	2018-09-10 23:12:29 +02:00
Swissky	2a080f82e6	Cassandra SQL + XSS MD + PHP Type Juggling	2018-09-10 20:40:43 +02:00
Swissky	90f4c3634e	PDF JS	2018-09-06 20:28:30 +02:00
Swissky	beb0ce8c54	Linux Persistence + WebLogic RCE	2018-09-03 18:41:05 +02:00
Swissky	011baa7321	Merge pull request #22 from cclauss/patch-1 ... Use octal numbers that work in both Python 2 and 3	2018-09-02 15:57:48 +02:00
cclauss	d642980f8c	Use octal numbers that work in both Python 2 and 3 ... python2 -c "print(0777 << 16L == 0o777 << 16)" # True	2018-09-02 14:09:55 +02:00
Swissky	d847e2e6bb	Merge pull request #21 from cclauss/patch-1 ... import string in uploadlfi.py	2018-09-02 13:54:45 +02:00
cclauss	150110a96c	import string in uploadlfi.py ... __string__ is used twice on line 13 but it is never imported.	2018-09-02 13:24:35 +02:00
Swissky	64e577b650	CSP bypass fix link	2018-09-01 15:38:57 +02:00
Swissky	fe52b32af8	XSS CSP Bypass + PostgreSQL read/write	2018-09-01 15:36:33 +02:00
Swissky	c38adaded3	CVE Apache Struts + XSS in Python Notebook	2018-08-28 18:48:26 +02:00
Swissky	2a54753d11	Merge pull request #20 from developersatyendra/master ... latest Apache struts CVE 2018 exploit added	2018-08-28 18:37:17 +02:00
developersatyendra	e2bd481882	Rename ApacheStrutsV3.py to ApacheStrutsV3-2018.py	2018-08-28 03:15:10 -04:00
developersatyendra	72e73e38c2	Created ApacheStrutsV3.py ... added latest apache struts exploit which is written by @s1kr10s	2018-08-28 03:14:40 -04:00
Swissky	f612a91bb5	LFI via Upload (race condition) + Network Pivot nmap	2018-08-26 15:43:26 +02:00
Swissky	b2faf8c747	SSRF bugfix picture	2018-08-23 19:16:38 +02:00
Swissky	2b7acbc493	SSRF - Bad Parsers	2018-08-23 19:15:15 +02:00
Swissky	0c707c4188	ImageTragick v2 + Angular 1.6+ XSS	2018-08-22 21:42:25 +02:00
Swissky	fe7314444c	Phar Wrapper - "unserialize"	2018-08-19 18:47:32 +02:00