gitea-mirror/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2026-07-28 14:47:32 -07:00
Code Issues Packages Projects Releases Wiki Activity
2,196 Commits 2 Branches 7 Tags
master
Commit Graph
50 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Alexandre ZANNIandGitHub 8847706138 XXE zip recompression tips 2026-03-16 11:49:21 +01:00
Alexandre ZANNIandGitHub 0aaad269e2 csv injection: google sheets formulas 2024-12-04 17:11:36 +01:00
Alexandre ZANNIandGitHub eca0bd1b36 SSTI: engine detection 2024-11-01 22:20:50 +01:00
Alexandre ZANNIandGitHub 6cbf58e5b0 XXE in docx/xlsx: important warning on recompression 2024-10-28 16:18:35 +01:00
Alexandre ZANNIandGitHub 8e05a2dd2a XSS in SVG: more examples + nesting 2024-06-19 14:54:19 +02:00
Alexandre ZANNIandGitHub 3e8a39a87d xxe - go secure workshop 2023-06-08 10:14:35 +02:00
Alexandre ZANNIandGitHub 9bdfa7f8c7 add "GraphQL for Pentesters" ref 2023-02-25 23:09:47 +01:00
Alexandre ZANNIandGitHub 89782643c9 SSTI: add some jinja2 examples 2023-01-28 15:29:54 +01:00
Alexandre ZANNIandGitHub 563a1b2a1d add XXE in Java 2023-01-19 10:23:56 +01:00
Alexandre ZANNIandGitHub 442d253936 fix rawsec url 2023-01-11 23:19:26 +01:00
Alexandre ZANNIandGitHub 7e2fa15462 Blind NoSQL scripts 
- add missing menu item
- use better string interpolation for python script
- add ruby script
 2022-09-23 00:36:41 +02:00
Alexandre ZANNIandGitHub 3e68276fb7 add 3 template engines + add lang in menu 2022-09-21 11:28:57 +02:00
Alexandre ZANNIandGitHub b831175f99 add english version of the article 2022-06-20 20:31:11 +02:00
Alexandre ZANNIandGitHub c274874430 MSSQL: list permissions 2022-04-18 17:21:26 +02:00
Alexandre ZANNIandGitHub 1f73834d5e HQLi in Java apps - HITBSecConf2016 2022-04-14 18:07:35 +02:00
Alexandre ZANNIandGitHub a397a3d643 add revshellgen and merge to tools section 2022-01-22 23:08:25 +01:00
Alexandre ZANNIandGitHub a077ceab7c add tools section 2022-01-22 22:57:37 +01:00
Alexandre ZANNIandGitHub a430cfcc4e update PowerGPOAbuse task command 2021-12-22 16:09:07 +01:00
Alexandre ZANNIandGitHub e0f851e6e9 NoSQLi: add POST with urlencoded body 2021-11-07 17:49:50 +01:00
Alexandre ZANNIandGitHub d19b843111 XXE: OOB via FTP + remote DTD for XSLX files 
better than the HTTP method, must robust approach, easier zip repackaging
 2021-10-17 18:00:00 +02:00
Alexandre ZANNIandGitHub 4791962be5 document.domain, window.origin and console.log usage 2021-08-24 20:29:02 +02:00
Alexandre ZANNIandGitHub e2ff22b136 add CVE-2021-34527 + It Was All A Dream scanner 2021-07-08 10:40:01 +02:00
Alexandre ZANNIandGitHub c469236204 XSS: add quick tips for bXSS 2021-06-16 13:25:46 +02:00
Alexandre ZANNIandGitHub 8547ac7dfc XSS: remove bluelotus 
the project is empty
 2021-06-16 13:18:08 +02:00
Alexandre ZANNIandGitHub 61eed94f18 add RCE via Apache logs in log poisoning 2021-05-10 11:48:14 +02:00
Alexandre ZANNIandGitHub 7733d4495e add another example of XXE in XLSX 2020-12-08 09:50:30 +01:00
Alexandre ZANNIandGitHub 93751d8650 add SSH key authentication via LDAP 2020-09-09 12:15:07 +02:00
Alexandre ZANNIandGitHub 9554aa2ed9 fix AdmYSsion link + add 2 tutorials 2020-09-09 09:57:21 +02:00
Alexandre ZANNIandGitHub 7aef550c39 XXE ref. refactor 
- Add new refs
- Format title with date, author, etc.
- Remove dead hosts:
  - agrawalsmart7.com
  - esoln.net
 2020-06-22 15:53:07 +02:00
Alexandre ZANNIandGitHub cb8bf8ea66 add more refs 2020-05-16 22:58:11 +02:00
Alexandre ZANNIandGitHub 3fad2f364c add ruby script 2020-02-21 23:49:50 +01:00
Alexandre ZANNIandGitHub f28f83bda6 LDAPi: add scripts and dorks 2020-02-21 23:19:48 +01:00
Alexandre ZANNIandGitHub 6a398ca5c3 Ruby: add slim 2019-11-16 17:29:55 +01:00
Alexandre ZANNIandGitHub e3604c01d7 XXE: tools description + more tools 2019-11-04 01:58:15 +01:00
Alexandre ZANNIandGitHub 54c94e0398 add ref for docker SSRF 2019-11-03 23:50:58 +01:00
Alexandre ZANNIandGitHub 64f8f4d869 add ref for docker SSRF 2019-11-03 23:49:36 +01:00
Alexandre ZANNIandGitHub 83f46a22e3 add XXE via SVG rasterization 2019-11-02 00:54:48 +01:00
Alexandre ZANNIandGitHub 52119907f6 add XXEinjector 2019-10-29 00:41:04 +01:00
Alexandre ZANNIandGitHub 525429c0d8 XPATH: add tools 2019-10-26 16:43:36 +02:00
Alexandre ZANNIandGitHub c6b5bbab2b fix TOC links 2019-10-22 20:26:04 +02:00
Alexandre ZANNIandGitHub 9f463d156b little changes 
- fix exploits ToC anchor
- add nosqlilab
 2019-10-09 16:53:34 +02:00
Alexandre ZANNIandGitHub 72c54b5c1b add missing backtick 2019-08-29 09:49:09 +02:00
Alexandre ZANNIandGitHub 66c9d945b7 Update README.md 2019-08-06 17:28:47 +02:00
Alexandre ZANNIandGitHub 0ccccd0fea add JSON headers 2019-04-24 22:59:24 +02:00
Alexandre ZANNIandGitHub e467d6096a add nosqli GET example 2019-04-21 13:00:16 +02:00
Alexandre ZANNIandGitHub 333b9ea85e add XXE OOB with Apache Karaf "hot deploy" (CVE-2018-11788) 2019-03-23 15:51:16 +01:00
Alexandre ZANNIandGitHub c7a292c19d XSS using base64 encoded href data in a link 2019-01-10 18:24:43 +01:00
Alexandre ZANNIandGitHub 3cf806c8ff 2nd unserialize payload 2018-09-26 00:13:19 +02:00
Alexandre ZANNIandGitHub d49e40b1b2 add auth bypass 2018-09-25 23:59:29 +02:00
Alexandre ZANNIandGitHub a1eb693270 routed injection in ToC 2018-09-20 23:52:07 +02:00