Andredreyer1
fb85317a26
Create gem-push.yml
...
Help me please
2024-08-02 23:33:00 +02:00
Swissky
314e4da963
SSRF DNS AXFR + LFI PHAR payloads + LFI iconv
2024-06-16 21:17:42 +02:00
Swissky
7e4a38a1a5
Merge pull request #725 from masquerad3r/master
...
Create port_swigger_xss_cheatsheet_event_handlers.txt
2024-06-06 17:52:33 +02:00
masquerad3r
eca067dd7e
Create port_swigger_xss_cheatsheet_event_handlers.txt
...
Updated list of event handlers taken from https://portswigger.net/web-security/cross-site-scripting/cheat-sheet#event-handlers .
Useful when the context of reflection is an HTML attribute and one quickly wants to check which attributes are reflected unfiltered by the target application.
2024-06-06 10:46:13 +02:00
Swissky
c34a2bac15
WAF bypass moved to a separate page
2024-06-03 09:55:29 +02:00
Swissky
2e73069238
XSS Tel URI
2024-06-03 09:37:24 +02:00
Swissky
6d3fef0df3
Merge pull request #723 from cydave/master
...
Add additional XSS payload in email addresses RFC5322
2024-06-02 11:25:45 +02:00
Swissky
cb69cecd11
Merge pull request #721 from MarkCyber/master
...
DBMS Identification Via Error
2024-06-02 11:23:13 +02:00
Swissky
25c94f809a
Uniqid + reset-tolkien and sandwich attack
2024-05-31 16:31:23 +02:00
dave
fcf69f8226
Add additional XSS payload in email addresses RFC5322
2024-05-31 13:27:32 +02:00
Swissky
b5251a673f
XSLT payloads + Headless Browser
2024-05-31 00:07:21 +02:00
Swissky
ded1d95735
ASP Cookieless + ReDOS backtrack
2024-05-29 23:23:51 +02:00
Swissky
67adf75bc2
CSP updates + Indirect Prompt Injection
2024-05-29 15:32:58 +02:00
Mark
c3af630e1d
Update README.md
2024-05-26 10:40:54 -04:00
Mark
867f243100
Update README.md
2024-05-26 10:32:01 -04:00
Swissky
f723bcbf8a
Merge pull request #718 from idealphase/master
...
Update Ruby.md
2024-05-05 13:08:50 +02:00
Swissky
670b301b1c
Merge pull request #717 from nojanath/master
...
Fix link to SecLists/content-type.txt
2024-05-05 13:07:57 +02:00
idealphase
33d9e24bed
Update Ruby.md
...
Change from the invalid 404 URL to the valid one. (https://pentesterlab.com/exercises/ruby_ugadget/course )
2024-05-05 16:16:36 +07:00
Jonathan Thompson
7a68102a3c
Fix link to SecLists/content-type.txt
2024-05-04 11:12:54 -07:00
Swissky
53d9014b2b
Regular Expression ReDoS
2024-04-25 17:37:16 +02:00
Swissky
43a8c6a037
Adding socials buttons
2024-04-24 22:02:04 +02:00
Swissky
b245d3cbdd
Mkdocs accessibility and search improvement
2024-04-15 21:20:02 +02:00
Swissky
293723d49d
Merge pull request #712 from bsysop/patch-4
...
Adding "Hetzner Cloud" to the Summary
2024-04-05 18:55:52 +02:00
bsysop
dc461f170e
Adding "Hetzner Cloud" to the Summary
2024-04-05 11:55:54 -03:00
Swissky
9571306b9f
Merge pull request #711 from bsysop/patch-3
...
Adding Hetzner Cloud Metadata URL
2024-04-05 15:53:05 +02:00
bsysop
3c9fdec3da
Adding Hetzner Cloud Metadata URL
...
https://docs.hetzner.cloud/#server-metadata
2024-04-04 23:43:34 -03:00
Swissky
80dda8beeb
Merge pull request #710 from mohnad-0b/patch-1
...
Update SQLite Injection.md
2024-04-03 18:15:31 +02:00
Swissky
8ef458db2a
Merge pull request #708 from xplo1t-sec/master
...
bypass techniques added
2024-04-03 18:15:03 +02:00
mohnad banat
d834abe43c
Update SQLite Injection.md
...
Since sqlite version 3.33.0, sqlite_schema has been replaced by sqlite_master.
2024-04-01 20:46:09 +03:00
Swissky
b19dc0626a
CICD - Mkdocs fixed the fonts problem
2024-03-31 16:03:48 +02:00
Swissky
55afcb12fb
Removing social plugins from Mkdocs
2024-03-30 13:20:56 +01:00
Swissky
9cabd995fb
Merge pull request #709 from mpgn/master
...
switch to nxc as cme is archived
2024-03-29 22:36:26 +01:00
mpgn
0d98284034
switch to nxc as cme is archived
2024-03-29 21:22:18 +00:00
xplo1t-sec
033982dc30
bypass techniques added
2024-03-09 21:46:33 +05:30
Swissky
dd2b68b70e
PHP Deserialization + API keys table typo
2024-02-18 15:29:21 +01:00
Swissky
97cfeee270
Tools Update
2024-01-21 21:39:23 +01:00
Swissky
12c6531ad2
README - Update links to Internal All The Things
2024-01-12 16:18:36 +01:00
Swissky
c852118ec8
Web Cache Deception + phpt file format
2024-01-11 12:20:25 +01:00
Swissky
4b77292aeb
Merge pull request #704 from therealtoastycat/patch-1
...
Adding reverse shell payload for OGNL
2024-01-05 15:45:19 +01:00
ToastyCat
05f441accf
Update Reverse Shell Cheatsheet.md
...
adding details
2024-01-05 10:25:39 +01:00
Swissky
c6f96f7b2a
Merge pull request #703 from Aftab700/JSON-Prototype-Pollution
...
adding the payload for Polluting the prototype via the `constructor` property in JSON input
2024-01-05 10:24:16 +01:00
Swissky
f96c1e4356
Merge pull request #701 from Vunnm/patch-1
...
specify condition to perform Angular JS Injection
2024-01-05 10:23:50 +01:00
ToastyCat
3d9363fdc9
Adding reverse shell payload for OGNL
2024-01-05 09:50:43 +01:00
Aftab Sama
08063f0830
adding the payload for Polluting the prototype via the constructor property in JSON input
...
Somtimes `__proto__` property may not work, so adding the payload for Polluting the prototype via the `constructor` property in JSON input
2024-01-03 17:24:28 +05:30
Vunnm
27d19813f8
specify condition to perform Angular JS Injection
...
Indicate that ng-app in a root element is needed to inject Angular JS template. Injecting below payload without a root element with ng-app will not result in a successful injection
2023-12-28 13:30:49 +01:00
Swissky
cbc6e78d2a
SOCIAL - site url
2023-12-25 22:11:52 +01:00
Swissky
845fa52f8b
SOCIAL - Cards
2023-12-24 14:05:50 +01:00
Swissky
5c42373a25
PHP filter prefix and suffix
2023-12-21 20:12:04 +01:00
Swissky
9fc0acc7e0
Merge pull request #700 from mschader/fix/ad-smbmap-fix-1
...
Update Active Directory Attack.md
2023-12-14 14:44:28 +01:00
Swissky
c579e6d043
Argument Injection
2023-12-14 14:38:39 +01:00
