gitea-mirror/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2026-07-28 14:47:32 -07:00
Code Issues Packages Projects Releases Wiki Activity
2,196 Commits 2 Branches 7 Tags
master
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Swissky 98124178db EoP - Juicy Potato 2019-07-26 15:29:34 +02:00
Swissky 657823a353 PTH Mitigation + Linux Smart Enumeration 2019-07-26 14:24:58 +02:00
Swissky f6c0f226af PXE boot attack 2019-07-25 14:08:32 +02:00
Swissky 859695e2be Update PrivExchange based on chryzsh blog post 2019-07-24 14:10:58 +02:00
Swissky a14b3af934 Active Directory - Resource Based Constrained Delegation 2019-07-22 21:45:50 +02:00
Swissky 0b9d76eb8e HQL references 2019-07-19 19:34:23 +02:00
Swissky 45af613fd9 Active Directory - Unconstrained delegation 2019-07-17 23:17:35 +02:00
Swissky 3cce80cd53 Merge branch 'master' of https://github.com/swisskyrepo/PayloadsAllTheThings 2019-07-14 14:24:00 +02:00
Swissky 382bd9acec Type Juggling - Another SHA 256 2019-07-14 14:23:20 +02:00
SwisskyandGitHub ca331acba8 Merge pull request #79 from LewisArdern/patch-1 
adding reference to blog
 2019-07-13 00:11:10 +02:00
Swissky 504caa3b50 SSTI by calling Popen without guessing the offset 2019-07-10 21:31:44 +02:00
Swissky bdef021a6d Magic Hashes SHA224 and SHA256 2019-07-10 21:26:24 +02:00
Swissky 05054af343 JWT RS256 to HS256 using pubkey to generate a signature 2019-07-10 20:58:50 +02:00
Swissky 6cecb8fa7a GraphQL - Projection + Edges/Nodes 2019-07-05 21:34:04 +02:00
Swissky f6564869f0 Fix typo in PHP Object injection 2019-07-05 18:42:42 +02:00
Swissky 13ba72f124 GraphQL + RDP Bruteforce + PostgreSQL RCE 2019-07-01 23:29:29 +02:00
Swissky 46780de750 PostgreSQL rewrite + LFI SSH 2019-06-29 19:23:34 +02:00
Swissky 144b3827ab MS14-068 + /etc/security/opasswd 2019-06-29 17:55:13 +02:00
Swissky 3b85f1b6fc UTF-8 encoding for File Inclusion 2019-06-29 11:20:17 +02:00
SwisskyandGitHub b148a9c906 Merge pull request #76 from ElonSalfati/master 
Added 2 working sql injection lines
 2019-06-28 17:30:12 +02:00
Swissky 7dda79bfc1 ImageMagik Ghost Script + Typo git summary 2019-06-26 00:07:06 +02:00
SwisskyandGitHub 1cec6e9a35 Merge pull request #75 from scarvell/master 
Added Freemarker SSTI PoC that doesn't require the use of "tags"/spaces
 2019-06-24 14:32:11 +02:00
Swissky 9be62677b6 Add root user + PHP null byte version 2019-06-24 00:21:39 +02:00
Swissky c3f96c6753 GraphQL injection : blind nosqli + sqli 2019-06-21 17:01:43 +02:00
Swissky 9745e67465 HQL Injection + references update 2019-06-16 23:45:52 +02:00
SwisskyandGitHub 6921cde15c Merge pull request #73 from ahhh/patch-1 
Update Windows - Privilege Escalation.md
 2019-06-12 00:14:08 +02:00
Swissky 8cec2e0ca3 Linux PrivEsc - Writable files 2019-06-10 11:09:02 +02:00
Swissky 94a60b43d6 Writable /etc/sudoers + Meterpreter autoroute 2019-06-10 11:00:54 +02:00
Swissky a85fa5af28 Local File Include : rce via mail + kadimus 2019-06-10 00:05:47 +02:00
Swissky 5d4f65720a PrivEsc - Common Exploits 2019-06-09 20:53:41 +02:00
Swissky e8cd11f88f plink + sshuttle : Network Pivoting Techniques 2019-06-09 18:13:15 +02:00
Swissky adcea1a913 Linux PrivEsc + SSH persistency 2019-06-09 16:05:44 +02:00
Swissky f5a8a6b62f Meterpreter shell 2019-06-09 14:26:14 +02:00
Swissky 93f6c03b54 GraphQL + LXD/etc/passwd PrivEsc + Win firewall 2019-06-09 13:46:40 +02:00
SwisskyandGitHub 00f50c5f32 Merge pull request #72 from h1-ragnar/patch-1 
Cloudflare XSS Bypasses by Bohdan Korzhynskyi
 2019-06-06 19:03:17 +02:00
SwisskyandGitHub b031115588 Merge pull request #71 from jonasw234/master 
Add nginx log files for LFI log poisoning
 2019-05-30 12:33:24 +02:00
Swissky f88da43e1c SQL informationschema.processlist + UPNP warning + getcap -ep 2019-05-25 18:19:08 +02:00
SwisskyandGitHub b1a05d1aab Create License 
Fix issue #69
 2019-05-25 16:27:35 +02:00
SwisskyandGitHub 72c96ade44 Merge pull request #70 from AlexisVLRT/master 
Some link's markdown was broken
 2019-05-24 17:37:39 +02:00
Swissky 9c2e63818f XSS without parenthesis, semi-colon + Lontara 2019-05-15 21:55:17 +02:00
Swissky cc8c7b3e70 Fix YOUTUBE and BOOKS links 2019-05-12 22:59:22 +02:00
Swissky 698cc52eaa README rewrite : BOOKS and YOUTUBE 2019-05-12 22:43:42 +02:00
Swissky b81df17589 RFI - Windows SMB allow_url_include = "Off" 2019-05-12 22:23:55 +02:00
Swissky bab04f8587 Masscan + AD password in description + ZSH revshell bugfix + Mimikatz lsass.dmp 2019-05-12 21:34:09 +02:00
Swissky 765c615efe XSS injection Summary + MSF web delivery 2019-05-12 14:22:48 +02:00
SwisskyandGitHub 6bc297252a Merge pull request #67 from roman-mueller/master 
Remove http:// prefix for DNS queries
 2019-05-08 01:27:16 +02:00
Swissky 2b3f07236b XSLT in SAML 2019-04-28 13:06:59 +02:00
SwisskyandGitHub d0f14cbfde Merge pull request #66 from cclauss/patch-1 
Use print() function in both Python 2 and Python 3
 2019-04-27 01:02:09 +02:00
SwisskyandGitHub bd861e304f Merge pull request #65 from noraj/patch-1 
add JSON headers
 2019-04-25 01:16:36 +02:00
Swissky 5bb27ee889 SSRF Google Cloud - add ssh key 2019-04-22 11:35:07 +02:00
Swissky 4d3ee90eec Command injection rewritten 2019-04-21 19:50:50 +02:00
Swissky 81f93a19c2 SSRF AWS Elastic Beanstak 2019-04-21 18:51:32 +02:00
SwisskyandGitHub aac5a57932 Merge pull request #64 from noraj/patch-1 
add nosqli GET example
 2019-04-21 14:12:06 +02:00
Swissky 9dfd7835ea mitm6 + ntlmrelayx 2019-04-21 14:08:18 +02:00
Swissky 49b9d0aff7 MSQL UDF sys_exec + SSRF IP: 127.1 and 127.0.1 2019-04-20 20:23:40 +02:00
SwisskyandGitHub 271cc269b6 Merge pull request #63 from BillyNoGoat/patch-1 
Fixed link for google CSP bypass
 2019-04-16 18:55:29 +02:00
Swissky 13864bde04 GoGitDumper + MySQL summary rewrite 2019-04-15 00:49:56 +02:00
Swissky b4633bbb66 sudo_inject + SSTI FreeMarker + Lin PrivEsc passwords 2019-04-14 21:01:14 +02:00
Swissky b8e74fe0ba Merge branch 'master' of https://github.com/swisskyrepo/PayloadsAllTheThings 2019-04-14 19:48:36 +02:00
Swissky c66197903f MYSQL Truncation attack + Windows search where 2019-04-14 19:46:34 +02:00
SwisskyandGitHub ee00dc1803 Merge pull request #62 from PwnFunction/patch-1 
Bypass using IPv6/IPv4 Address Embedding
 2019-04-13 14:03:43 +02:00
SwisskyandGitHub eb045a7d12 Merge pull request #61 from cervoise/patch-1 
Update README.md
 2019-04-08 23:56:45 +02:00
Swissky 546ecd0e36 Linux Privesc - /etc/passwd writable 2019-04-07 23:40:36 +02:00
SwisskyandGitHub aaaeb3f38e Merge pull request #60 from Zeecka/patch-2 
--dc-ip to -dc-ip for psexec cmd
 2019-04-03 13:59:06 +02:00
SwisskyandGitHub 187762fac5 Fix typo in reverse shell 2019-04-02 22:45:08 +02:00
Swissky 3af87ddf98 Reverse shell summary + golang 2019-04-02 22:43:44 +02:00
SwisskyandGitHub cbc57c7330 Merge pull request #58 from kisec/master 
Reverse shell Golang
 2019-04-01 08:29:46 +02:00
Swissky 289fa8c22b PrivEsc - Linux Task 2019-03-31 15:05:13 +02:00
Swissky bbc9029dd6 XSS in several filetype based on @__Mn1__ blogpost 2019-03-26 21:49:03 +01:00
Swissky 90b182f10f AD references - Blog Post + SSTI basic config item 2019-03-24 16:26:00 +01:00
Swissky a509909561 PostgreSQL RCE CVE-2019–9193 + ADAPE + WinPrivEsc Resources 2019-03-24 16:00:27 +01:00
Swissky 5d1b8bca79 SAML exploitation + ASREP roasting + Kerbrute 2019-03-24 13:16:23 +01:00
SwisskyandGitHub 9d3eccef48 Merge pull request #57 from ajdumanhug/master 
Add XXE inside SVG
 2019-03-23 23:02:31 +01:00
SwisskyandGitHub 3b70783450 Merge pull request #56 from noraj/patch-1 
add XXE OOB with Apache Karaf "hot deploy" (CVE-2018-11788)
 2019-03-23 16:35:23 +01:00
SwisskyandGitHub 594e35a358 Merge pull request #55 from rakeshmane/patch-1 
Update README.md
 2019-03-22 11:45:42 +01:00
SwisskyandGitHub bd9378cab7 Merge pull request #54 from clem9669/patch-2 
Add authentification bypass
 2019-03-21 23:33:30 +01:00
SwisskyandGitHub 09d52cded0 Merge pull request #53 from jaimingohel/patch-1 
Added CTF writeup in reference section
 2019-03-20 08:27:53 +01:00
SwisskyandGitHub 06ec486aa5 Merge pull request #52 from tkmikan/master 
Fix changed urls
 2019-03-19 23:57:31 +01:00
SwisskyandGitHub 2d4b98b9c2 Merge pull request #50 from clem9669/patch-1 
MarkDown typo
 2019-03-19 08:37:13 +01:00
Swissky e9489f0768 Linux Priv Esc - minor update 2019-03-18 23:19:36 +01:00
Swissky e5090f2797 Bazaar - version control system 2019-03-15 23:27:14 +01:00
SwisskyandGitHub 47490c1624 Merge pull request #49 from BitTheByte/master 
Fixed a typing mistake
 2019-03-15 16:07:18 +01:00
Swissky 9d1ebbacdb JSON Web Token - jwt_tool example 2019-03-10 13:33:50 +01:00
Swissky ec61e99334 Linux - PrivEsc typo 2019-03-08 20:09:01 +01:00
Swissky b22fd26800 Linux PrivEsc - LXD Group 2019-03-07 15:27:54 +01:00
Swissky 68df152fd3 Linux PrivEsc - Wildcard/NFS/Sudo 2019-03-07 15:09:06 +01:00
Swissky 404afd1d71 Fix name's capitalization 2019-03-07 00:07:55 +01:00
Swissky 21d1fe7eee Fix name - Part 1 2019-03-07 00:07:14 +01:00
Swissky ee334f981e Web socket + title capitalization 2019-03-07 00:03:25 +01:00
SwisskyandGitHub ef65f36902 Merge pull request #48 from dee-see/patch-1 
Fix anchors in README.md
 2019-03-06 16:16:08 +01:00
SwisskyandGitHub f67be6ef0b Merge pull request #47 from naliferopoulos/master 
Added GraphQL injection notes
 2019-03-06 13:53:13 +01:00
Swissky 450de2c90f Typo fix 2019-03-04 19:40:34 +01:00
Swissky e36b15a6d7 Windows PrivEsc - Table of content update 2019-03-03 20:05:27 +01:00
Swissky ecadcf3d0f Windows PrivEsc - Full rewrite 2019-03-03 20:01:25 +01:00
Swissky 2d5b4f2193 Meterpreter generate + LaTeK XSS + Ruby Yaml 2019-03-03 16:31:17 +01:00
Swissky 6d2cd684fa Web cache deception resources update 2019-03-01 17:49:19 +01:00
Swissky 70225232c9 Polyglot Command Injection + XSS HTML file 2019-02-28 00:36:53 +01:00
Swissky a58a8113d1 Linux capabilities - setuid + read / Docker group privesc 2019-02-26 17:24:10 +01:00
SwisskyandGitHub abb81aba7e Merge pull request #46 from 0xInfection/patch-2 
Added a new bypass variant + fixed a payload
 2019-02-20 08:14:27 +01:00
Swissky 79f2c52ef5 EICAR file 2019-02-19 21:06:23 +01:00