Karim Kanso
|
826130946c
|
Add a one line postgres file write
|
2021-01-30 14:17:35 +00:00 |
Swissky
|
092083af5c
|
AD - Printer Bug + Account Lock
|
2021-01-29 22:10:22 +01:00 |
|
Swissky
|
075721fa9b
|
Merge pull request #331 from PinkDev1/patch-2
Added EoP - $PATH Interception
|
2021-01-28 22:12:51 +01:00 |
PinkDev1
|
93769768e2
|
Added EoP - $PATH Interception
|
2021-01-28 19:45:54 +00:00 |
|
Swissky
|
ec856fec21
|
Merge pull request #330 from JLLeitschuh/patch-2
Add XXE via DTD file
|
2021-01-25 18:02:38 +01:00 |
Jonathan Leitschuh
|
92667a12a4
|
Add XXE via DTD file
|
2021-01-25 11:50:47 -05:00 |
|
Swissky
|
4c7dd435a6
|
Merge pull request #329 from PinkDev1/patch-1
API Key Leaks: Added commands for testing Mapbox API Tokens
|
2021-01-25 10:38:58 +01:00 |
|
PinkDev1
|
88aa7c9789
|
Added commands for testing Mapbox API Tokens
|
2021-01-25 04:34:40 +00:00 |
|
Swissky
|
2ac947e46d
|
Merge pull request #327 from ayomawdb/patch-2
Add PostgreSQL Check if Current User is Supperuser
|
2021-01-24 18:44:12 +01:00 |
|
Swissky
|
4e17d6c2b3
|
Update PostgreSQL Injection.md
|
2021-01-24 18:43:58 +01:00 |
|
Swissky
|
cd6f5493b3
|
Update PostgreSQL Injection.md
|
2021-01-24 18:43:28 +01:00 |
Ayoma Wijethunga
|
4b8dab523e
|
Add PostgreSQL Check if Current User is Supperuser
|
2021-01-24 23:09:52 +05:30 |
|
Swissky
|
daebeeadd2
|
Merge pull request #326 from ayomawdb/patch-1
Add Kubernetes Pentest Methodology Part 3
|
2021-01-20 11:01:42 +01:00 |
|
Ayoma Wijethunga
|
b04579aa30
|
Add Kubernetes Pentest Methodology Part 3
$subject and minor correction of a file path
|
2021-01-20 09:07:23 +05:30 |
|
Swissky
|
0675573d93
|
Merge pull request #325 from u0pattern/u0pattern-patch-1
SSTI Payload in Jinja2 - Arbitrary file read
|
2021-01-18 10:08:47 +01:00 |
ムハンマド
|
89429f9c4f
|
SSTI Payload in Jinja2 - Arbitrary file read
|
2021-01-18 11:48:38 +03:00 |
|
Swissky
|
d4d2ba45c2
|
Merge pull request #323 from lanjelot/protocol-smuggling
Add PortSwigger http-desync reborn article
|
2021-01-16 19:04:16 +01:00 |
lanjelot
|
c5d8f3fc4f
|
Add PortSwigger http-desync reborn article
|
2021-01-17 04:23:38 +11:00 |
|
Swissky
|
7b943d46bc
|
Merge pull request #322 from lapolis/patch-1
Added closing bracket in unicode full width bypass
|
2021-01-15 17:42:13 +01:00 |
lapolis_aka_blu
|
6f758ba6c0
|
Added closing bracket in unicode full width bypass
Yeah I know it is logic to use it if you really need the closing tag. But having both brackets in your repo makes it quicker to copy paste :D
|
2021-01-15 16:38:51 +00:00 |
|
Swissky
|
01aadf3a44
|
Alternate Data Stream
|
2021-01-13 10:22:59 +01:00 |
|
Swissky
|
836861c86e
|
Merge pull request #320 from lanjelot/cloudsplaining
New cloudsplaining tool to AWS Pentest page
|
2021-01-12 13:42:36 +01:00 |
|
Swissky
|
964f2cde35
|
Merge pull request #319 from lanjelot/insecure-scm-cleanup
Cleaned up Insecure SCM page and added new Yar tool
|
2021-01-12 13:36:38 +01:00 |
|
lanjelot
|
5cfa93f98b
|
Add new cloudsplaining tool to AWS Pentest page
|
2021-01-12 22:59:37 +11:00 |
|
lanjelot
|
4473764c4d
|
Fix ToC
|
2021-01-12 22:45:12 +11:00 |
|
lanjelot
|
8c97cec6d8
|
Clean up Insecure SCM page and add new tool yar
|
2021-01-12 22:39:37 +11:00 |
|
Swissky
|
3a6ac550b8
|
DSRM Admin
|
2021-01-08 23:41:50 +01:00 |
|
Swissky
|
dd80fb899c
|
Merge pull request #315 from timgates42/bugfix_typo_account
docs: fix simple typo, accound -> account
|
2020-12-22 23:53:27 +01:00 |
Tim Gates
|
7846225bfd
|
docs: fix simple typo, accound -> account
There is a small typo in Methodology and Resources/Active Directory Attack.md.
Should read `account` rather than `accound`.
|
2020-12-23 09:16:40 +11:00 |
|
Swissky
|
609c38bde5
|
Merge pull request #314 from ahboon/HTTP-Parameter-Pollution
Added Golang param information
|
2020-12-22 20:02:56 +01:00 |
Cher Boon
|
70d8db7de4
|
Updated to include modules used for golang
|
2020-12-23 01:30:23 +08:00 |
|
Cher Boon
|
a6727e8305
|
Added Golang information
|
2020-12-23 01:28:32 +08:00 |
|
Swissky
|
0929d5596c
|
Merge pull request #313 from ahboon/HTTP-Parameter-Pollution
Created HTTP Parameter Pollution
|
2020-12-22 11:27:07 +01:00 |
|
Cher Boon
|
20da830ac1
|
Create README.md
|
2020-12-22 17:49:45 +08:00 |
|
Swissky
|
16b207eb0b
|
LAPS Password
|
2020-12-20 21:45:41 +01:00 |
|
Swissky
|
67752de6e9
|
Bronze Bit Attack
|
2020-12-18 22:38:30 +01:00 |
|
Swissky
|
66a0fd1cbe
|
Merge pull request #311 from lanjelot/deser
Add tool gadgetprobe
|
2020-12-18 15:25:26 +01:00 |
|
Swissky
|
1e69ec63a8
|
Merge pull request #312 from lanjelot/ebs
Update Cloud AWS Methodology
|
2020-12-18 15:24:41 +01:00 |
|
Swissky
|
35a86f81d7
|
Merge pull request #310 from lanjelot/smuggler
Add tools kube-hunter and smuggler
|
2020-12-18 15:22:20 +01:00 |
|
lanjelot
|
4dc5777c33
|
Add gadgetprobe tool
|
2020-12-18 23:03:25 +11:00 |
|
lanjelot
|
e0c745cbf4
|
Fix AWS duplicated tool enumerate-iam
|
2020-12-18 22:52:21 +11:00 |
|
lanjelot
|
d2d1a2d913
|
Add tools
|
2020-12-18 22:46:28 +11:00 |
|
lanjelot
|
4b9baf37d3
|
Add dufflebag tool and cleanup
|
2020-12-18 22:45:07 +11:00 |
|
Swissky
|
f7e8f515a5
|
Application Escape and Breakout
|
2020-12-17 08:56:58 +01:00 |
|
Swissky
|
973f091d1b
|
Merge pull request #308 from lanjelot/fix-web-methodology
Fix links and duplicated nmap and massscan examples
|
2020-12-12 19:43:34 +01:00 |
|
Swissky
|
3e50b711b7
|
Merge pull request #307 from lanjelot/fix-typos
Fix typos
|
2020-12-12 19:42:46 +01:00 |
|
lanjelot
|
4c18e29a6b
|
Fix links and duplicated nmap and massscan examples
|
2020-12-13 04:50:59 +11:00 |
|
lanjelot
|
7e3db3a3f4
|
Fix typos
|
2020-12-13 04:34:10 +11:00 |
|
Swissky
|
aab4f3e14b
|
Merge pull request #306 from lanjelot/master
Add reference to panoptic and rip-hg tools
|
2020-12-11 19:04:53 +01:00 |
|
lanjelot
|
c6d0ba29e7
|
Add reference to panoptic and rip-hg tools
|
2020-12-12 04:52:21 +11:00 |