vladko312
abbbf2fc95
SSTI:
...
- Fixed NodeJS payloads
2026-01-03 18:43:24 +03:00
Swissky
d345536ff4
Fix markdown linting
2026-01-03 15:47:05 +01:00
Swissky and GitHub
41f2f96509
Merge pull request #808 from Brum3ns/master
...
Updated SSTI with novel obfuscation payloads
2026-01-03 15:44:38 +01:00
Joshua Rogers
bb325561a1
add gixy-next
2026-01-03 23:34:47 +11:00
vladko312
7fb2ff75d7
SSI:
...
- Added SSTImap to the tools, as it now supports SSI detection and exploitation
SSTI:
- Added description for known detection and exploitation techniques
- Added payloads for universal detection
- Added universal payloads for different languages
- Added Error-Based and Boolean-Based payloads
- Moved SpEL payloads using `T()` to the correct category
- Moved Pug payloads to the correct language and updated info to reflect the actual name
2026-01-03 05:20:04 +03:00
Swissky
bd72827e58
ORM leak lint + crapsecret
2026-01-02 19:46:23 +01:00
RelunSec and GitHub
c975f61fa0
Fix typo in README regarding URL formatting
2025-12-19 07:48:57 -08:00
RelunSec and GitHub
09bdd83685
Update README with URL parsing examples
...
Added examples of URL formats and parser behaviors.
2025-12-18 23:41:37 -08:00
brumens
a957c3f96d
Fixed markdown linting
2025-12-15 11:30:06 +01:00
Swissky
39da0328b8
Indicators for deserialization
2025-12-12 11:32:33 +01:00
Swissky
ba62eed782
SQLite extensions
2025-12-07 19:52:51 +01:00
brumens
5f1a39d272
Added author to research reference
2025-12-03 14:09:02 +01:00
brumens
3cf745b90c
Added Jinja and Mako obf payloads
2025-12-03 14:07:37 +01:00
brumens
e2ce1c96dc
Added Smarty and Twig obf payload
2025-12-03 14:05:41 +01:00
brumens
7ca2ca2a75
Added Groovy and FreeMarker obf payloads
2025-12-03 13:58:49 +01:00
brumens
52daa1d820
Updated SSTI Reference
2025-12-03 13:58:27 +01:00
Swissky
ca50df2336
Fix markdown linting
2025-11-15 17:36:38 +01:00
Swissky and GitHub
80a6b5e1d0
Merge pull request #806 from Reelix/patch-1
...
Fixed missing {FILE} placeholders
2025-11-15 11:34:17 -05:00
Swissky and GitHub
e653e7c67b
Merge pull request #802 from Aaditya-Chunekar/patch-1
...
hacktoberfest - Update YouTube.md with new resources
2025-11-15 11:31:35 -05:00
Swissky and GitHub
24527a5155
Merge pull request #791 from piranhaAD/patch-1
...
Correcting the Payload for xxe ssrf
2025-11-15 11:19:05 -05:00
Swissky
832b54fd95
Syntax Highlighting SSTI
2025-11-15 17:11:42 +01:00
Swissky
5c0ee4c6d9
SQL injection hashed password + MSSQL links
2025-11-02 18:21:19 +01:00
Reelix and GitHub
3359054ecf
Fixed missing {FILE} placeholders
...
The bottom few options were missing the {FILE} placeholders.
This fixes them.
2025-10-31 14:22:13 +02:00
Aaditya and GitHub
9a08798848
hacktoberfest - Update YouTube.md with new resources
...
Added LaurieWired and Tib3rius YouTube channels.
2025-10-22 19:44:31 +05:30
Swissky
d49faf9874
Markdown Fix Lint
2025-10-05 18:54:42 +02:00
Swissky
0dc0978853
Brute Force and Rate Limit
2025-10-05 18:51:11 +02:00
Swissky and GitHub
fc06c0e13b
Merge pull request #797 from mbiesiad/master
...
Update Web Attack Surface.md
2025-10-02 10:40:26 -04:00
Michal Biesiada and GitHub
ff57c499cc
Update Web Attack Surface.md
...
Missing path added /blob/main/docs/
2025-10-02 10:50:07 +02:00
Swissky and GitHub
8cf79275a6
Merge pull request #795 from cclauss/patch-1
...
Upgrade GitHub Actions
2025-10-01 12:47:14 -04:00
Christian Clauss and GitHub
6409004743
Update GitHub Actions
2025-10-01 14:52:10 +02:00
Christian Clauss and GitHub
707c06272f
Upgrade GitHub Actions
...
* https://github.com/actions/checkout/releases
* https://github.com/actions/setup-python/releases
2025-10-01 14:49:34 +02:00
Swissky and GitHub
bd5b09a85b
Merge pull request #793 from DivInstance/chore/mkdocs-edit-link-and-readme-polish
...
chore(docs): fix MkDocs edit link and polish README grammar
2025-09-19 08:48:05 -04:00
Divyaranjan Sahoo
3be0e164ab
chore(docs): fix MkDocs edit link and polish README grammar
...
- Use edit/master so 'Edit this page' opens the editor
- Standardize punctuation and YouTube casing
2025-09-19 15:13:54 +05:30
Swissky and GitHub
ebf2b0d912
Merge pull request #792 from pranjalpokharel7/master
...
Remove broken link for SQLite
2025-09-13 08:15:02 -04:00
pranjalpokharel7
27e6c2aa8d
Replace broken link for SQLite with archive link
2025-09-13 07:51:58 +05:45
piranha and GitHub
aa85b80ace
correction of xxe ssrf payload
...
remove the % from the payload as it's not a parametrized entity
2025-09-09 19:16:45 +01:00
Swissky
b391de2117
Lint fix
2025-08-14 11:09:47 +02:00
Swissky and GitHub
72df15e2e8
Merge pull request #786 from n3rada/master
...
Add Velocity SSTI payloads with base64 command support
2025-08-13 20:39:34 +02:00
n3rada and GitHub
f3cdd4ff0c
fix(markdown): add blank lines around fenced code blocks to satisfy MD031
2025-08-13 18:29:00 +00:00
n3rada and GitHub
d04a38a67c
refactor(template): rename Velocity payload variables for clarity
2025-08-13 18:14:47 +00:00
Swissky and GitHub
2f9f87bfae
Merge pull request #777 from youknowwho-98/patch-1
...
Update NoSQL.txt
2025-08-13 16:07:06 +02:00
Swissky and GitHub
0c5b7c3953
Merge pull request #774 from 1PingSun/master
...
2025-04-04 Add Detecting Web Cache Deception Content
2025-08-13 16:04:43 +02:00
Swissky and GitHub
ad79082eb4
Merge pull request #784 from HackingRepo/patch-2
...
Update README.md
2025-08-13 12:54:25 +02:00
Swissky
cc670aa544
SQL injection - Fix linting errors
2025-08-13 12:07:35 +02:00
Swissky and GitHub
b10a11041c
Merge pull request #790 from KadirArslan/master
...
Improved Prompt Injection Section with Missing Content
2025-08-13 12:07:13 +02:00
Swissky and GitHub
81b3f85dc4
Merge pull request #776 from m14r41/patch-1
...
enhancement: clarified and expanded details on Second-Order SQL Injec…
2025-08-13 11:52:43 +02:00
Swissky and GitHub
6cb0048e22
Update README.md
2025-08-13 11:52:26 +02:00
Swissky
5e0b097983
Virtual Hosts + Encoding and Transformations
2025-08-12 20:59:36 +02:00
Kadir Arslan
cc96a3566d
Update README.md
2025-08-06 22:30:25 +03:00
Kadir Arslan
415bdac2c2
Update README.md
2025-08-06 21:50:33 +03:00
vladko312