gitea-mirror/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2026-07-30 23:50:38 -07:00
Code Issues Packages Projects Releases Wiki Activity
1,074 Commits 2 Branches 7 Tags
2a16009386733ddc1405ef352f1bdf452f1a5022
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
SwisskyandGitHub a69e911926 Merge pull request #379 from alexlauerman/master 
Adding updated flowchart to CSRF page
 2021-06-19 09:46:49 +02:00
SwisskyandGitHub 18556c2caf Merge pull request #378 from PinkDev1/patch-3 
Fixed typo/wording on "Tips" section in Blind-XSS
 2021-06-17 09:24:06 +02:00
SwisskyandGitHub e9b38b8f43 Merge pull request #377 from ajdumanhug/master 
Add AWS SSRF Bypasses
 2021-06-16 18:41:39 +02:00
SwisskyandGitHub 62b897c936 Merge pull request #376 from noraj/patch-2 
XSS: add quick tips for bXSS
 2021-06-16 13:56:29 +02:00
SwisskyandGitHub 2a4631eb8f Merge pull request #375 from noraj/patch-1 
XSS: remove bluelotus
 2021-06-16 13:56:07 +02:00
SwisskyandGitHub b006551bfe Merge pull request #374 from tex2e/patch-1 
Fix snippets
 2021-06-14 16:10:54 +02:00
SwisskyandGitHub ad9c15b824 Merge pull request #370 from Annihilat0r/master 
add NoSQLi payload
 2021-05-29 22:38:13 +02:00
SwisskyandGitHub e3e3ca6ba2 Merge pull request #366 from mpgn/master 
Update Smarty Template Injection
 2021-05-20 18:08:20 +02:00
SwisskyandGitHub 28f68f47ae Merge pull request #365 from Shrewk/patch-1 
Updates JWT tool
 2021-05-19 12:05:59 +02:00
SwisskyandGitHub 4ae6982f63 Merge pull request #362 from noraj/patch-1 
add RCE via Apache logs in log poisoning
 2021-05-10 13:13:34 +02:00
Swissky a723a34449 PS Transcript + PPLdump.exe 2021-05-06 18:26:00 +02:00
SwisskyandGitHub 28a48bd696 Merge pull request #361 from sokaRepo/master 
Add AWS DynamoDB enumeration
 2021-04-30 22:21:28 +02:00
SwisskyandGitHub 1592756f9c Merge pull request #348 from pswalia2u/patch-1 
Update Reverse Shell Cheatsheet.md
 2021-04-26 10:05:59 +02:00
SwisskyandGitHub 9753f369e3 Merge pull request #358 from gregxsunday/master 
improved XXE SVG payloads to be valid XMLs
 2021-04-24 15:40:01 +02:00
Swissky 08b59f2856 AD update CME+DCOM 2021-04-21 22:27:07 +02:00
SwisskyandGitHub 22340c8fc2 Merge pull request #356 from 0dayCTF/patch-1 
Update Reverse Shell Cheatsheet.md
 2021-04-18 18:34:49 +02:00
SwisskyandGitHub ba2c02cc3e Merge pull request #355 from clem9669/patch-6 
Update Linux - Privilege Escalation.md
 2021-04-15 12:46:15 +02:00
SwisskyandGitHub 2b43fa8bfc Merge pull request #353 from micahvandeusen/master 
Added method to read gMSA
 2021-04-10 18:04:28 +02:00
SwisskyandGitHub 90eefc3b2e Merge pull request #351 from ricxpl/patch-1 
Improve Ruby reverse shell
 2021-04-02 22:39:36 +02:00
SwisskyandGitHub d8d26d8fb3 Merge pull request #350 from secnigma/patch-2 
Added Netcat BusyBox
 2021-04-01 14:31:12 +02:00
SwisskyandGitHub 4f89c0a6d2 Merge pull request #349 from SecGus/master 
Add .ashx shell
 2021-03-30 15:31:53 +02:00
Swissky 0443babe35 Relay + MSSQL Read File 2021-03-25 18:25:02 +01:00
Swissky f6b9d63bf8 DCOM exploitation and MSSQL CLR 2021-03-24 22:26:23 +01:00
Swissky bd2166027e GMSA Password + Dart Reverse Shell 2021-03-24 12:44:35 +01:00
SwisskyandGitHub af9f103655 Merge pull request #346 from linoskoczek/master 
Fix links in XSS Injection Summary
 2021-03-18 21:18:28 +01:00
SwisskyandGitHub 5a3427cf9b Merge pull request #345 from Tametomo/patch-1 
Added additional CSV injection cases patterned after in the wild samples
 2021-03-17 09:36:25 +01:00
SwisskyandGitHub 22a1662f60 Merge pull request #341 from cosmin-bianu/master 
Fix Java payload (issue #337)
 2021-03-12 12:36:19 +01:00
SwisskyandGitHub d61f683dc6 Merge pull request #339 from c14dd49h/patch-2 
Update Active Directory Attack.md
 2021-02-26 16:37:41 +01:00
Swissky 8d31b7240b Office Attacks 2021-02-21 20:17:57 +01:00
SwisskyandGitHub e128964dd9 Merge pull request #338 from mpgn/patch-1 
Add mimikatz command to protect a process after removing the protection
 2021-02-17 12:32:23 +01:00
SwisskyandGitHub f6f8ec010a Merge pull request #336 from valenbg1/patch-1 
Update Windows - Privilege Escalation.md
 2021-02-10 16:36:19 +01:00
SwisskyandGitHub 1d08a7e12d Merge pull request #335 from unkn0w/patch-1 
[typo] changed sshs_config to sshd_config
 2021-02-05 14:36:05 +01:00
SwisskyandGitHub 495a1f3ffe Merge pull request #334 from lanjelot/git-dumper 
New tool git-dumper.py
 2021-02-03 15:41:27 +01:00
SwisskyandGitHub 6bcd2e8a6a Update README.md 2021-01-31 21:51:53 +01:00
SwisskyandGitHub b4d8b5939f Merge pull request #332 from kazkansouh/master 
Add a one line postgres file write
 2021-01-30 21:59:01 +01:00
Swissky 092083af5c AD - Printer Bug + Account Lock 2021-01-29 22:10:22 +01:00
SwisskyandGitHub 075721fa9b Merge pull request #331 from PinkDev1/patch-2 
Added EoP - $PATH Interception
 2021-01-28 22:12:51 +01:00
SwisskyandGitHub ec856fec21 Merge pull request #330 from JLLeitschuh/patch-2 
Add XXE via DTD file
 2021-01-25 18:02:38 +01:00
SwisskyandGitHub 4c7dd435a6 Merge pull request #329 from PinkDev1/patch-1 
API Key Leaks: Added commands for testing Mapbox API Tokens
 2021-01-25 10:38:58 +01:00
SwisskyandGitHub 2ac947e46d Merge pull request #327 from ayomawdb/patch-2 
Add PostgreSQL Check if Current User is Supperuser
 2021-01-24 18:44:12 +01:00
SwisskyandGitHub 4e17d6c2b3 Update PostgreSQL Injection.md 2021-01-24 18:43:58 +01:00
SwisskyandGitHub cd6f5493b3 Update PostgreSQL Injection.md 2021-01-24 18:43:28 +01:00
SwisskyandGitHub daebeeadd2 Merge pull request #326 from ayomawdb/patch-1 
Add Kubernetes Pentest Methodology Part 3
 2021-01-20 11:01:42 +01:00
SwisskyandGitHub 0675573d93 Merge pull request #325 from u0pattern/u0pattern-patch-1 
SSTI Payload in Jinja2 - Arbitrary file read
 2021-01-18 10:08:47 +01:00
SwisskyandGitHub d4d2ba45c2 Merge pull request #323 from lanjelot/protocol-smuggling 
Add PortSwigger http-desync reborn article
 2021-01-16 19:04:16 +01:00
SwisskyandGitHub 7b943d46bc Merge pull request #322 from lapolis/patch-1 
Added closing bracket in unicode full width bypass
 2021-01-15 17:42:13 +01:00
Swissky 01aadf3a44 Alternate Data Stream 2021-01-13 10:22:59 +01:00
SwisskyandGitHub 836861c86e Merge pull request #320 from lanjelot/cloudsplaining 
New cloudsplaining tool to AWS Pentest page
 2021-01-12 13:42:36 +01:00
SwisskyandGitHub 964f2cde35 Merge pull request #319 from lanjelot/insecure-scm-cleanup 
Cleaned up Insecure SCM page and added new Yar tool
 2021-01-12 13:36:38 +01:00
Swissky 3a6ac550b8 DSRM Admin 2021-01-08 23:41:50 +01:00
SwisskyandGitHub dd80fb899c Merge pull request #315 from timgates42/bugfix_typo_account 
docs: fix simple typo, accound -> account
 2020-12-22 23:53:27 +01:00
SwisskyandGitHub 609c38bde5 Merge pull request #314 from ahboon/HTTP-Parameter-Pollution 
Added Golang param information
 2020-12-22 20:02:56 +01:00
SwisskyandGitHub 0929d5596c Merge pull request #313 from ahboon/HTTP-Parameter-Pollution 
Created HTTP Parameter Pollution
 2020-12-22 11:27:07 +01:00
Swissky 16b207eb0b LAPS Password 2020-12-20 21:45:41 +01:00
Swissky 67752de6e9 Bronze Bit Attack 2020-12-18 22:38:30 +01:00
SwisskyandGitHub 66a0fd1cbe Merge pull request #311 from lanjelot/deser 
Add tool gadgetprobe
 2020-12-18 15:25:26 +01:00
SwisskyandGitHub 1e69ec63a8 Merge pull request #312 from lanjelot/ebs 
Update Cloud AWS Methodology
 2020-12-18 15:24:41 +01:00
SwisskyandGitHub 35a86f81d7 Merge pull request #310 from lanjelot/smuggler 
Add tools kube-hunter and smuggler
 2020-12-18 15:22:20 +01:00
Swissky f7e8f515a5 Application Escape and Breakout 2020-12-17 08:56:58 +01:00
SwisskyandGitHub 973f091d1b Merge pull request #308 from lanjelot/fix-web-methodology 
Fix links and duplicated nmap and massscan examples
 2020-12-12 19:43:34 +01:00
SwisskyandGitHub 3e50b711b7 Merge pull request #307 from lanjelot/fix-typos 
Fix typos
 2020-12-12 19:42:46 +01:00
SwisskyandGitHub aab4f3e14b Merge pull request #306 from lanjelot/master 
Add reference to panoptic and rip-hg tools
 2020-12-11 19:04:53 +01:00
SwisskyandGitHub b5a758dada Merge pull request #305 from lanjelot/master 
Add missing url
 2020-12-11 18:39:38 +01:00
SwisskyandGitHub e58bfe8310 Merge pull request #304 from lanjelot/master 
Add tool GitTools
 2020-12-11 18:25:58 +01:00
Swissky 73fdd6e218 Mimikatz - Elevate token with LSA protection 2020-12-09 23:33:40 +01:00
Swissky 12aab45018 Merge branch 'master' of https://github.com/swisskyrepo/PayloadsAllTheThings 2020-12-08 14:31:47 +01:00
Swissky 19a2950b8d AMSI + Trust 2020-12-08 14:31:01 +01:00
SwisskyandGitHub 2f83ee56f4 Merge pull request #302 from noraj/patch-1 
add another example of XXE in XLSX
 2020-12-08 11:36:26 +01:00
SwisskyandGitHub 78cc68674b Merge pull request #296 from brnhrd/patch-1 
Fix table of contents
 2020-12-07 17:21:02 +01:00
Swissky f48ee0bca5 Deepce - Docker Enumeration, Escalation of Privileges and Container Escapes 2020-12-06 18:59:43 +01:00
Swissky 27050f6dd8 MSSQL Server Cheatsheet 2020-12-05 11:37:34 +01:00
SwisskyandGitHub e9390d1572 Merge pull request #297 from u0pattern/u0pattern-patch-1 
XXE WAF Bypass Added
 2020-12-04 10:21:17 +01:00
Swissky e13f152b74 AD - Recon 2020-12-02 18:43:13 +01:00
SwisskyandGitHub 3314f8bd99 Merge pull request #294 from lanjelot/add-s3-objects-check 
Add tool nccgroup/s3_objects_check
 2020-11-29 19:25:07 +01:00
SwisskyandGitHub 7cd34d4ffa Merge pull request #293 from cervoise/patch-1 
Update README.md
 2020-11-26 18:45:16 +01:00
Swissky b918095775 AzureHound 2020-11-24 12:41:34 +01:00
SwisskyandGitHub 13ed9c8628 Merge pull request #292 from paupaulaz/master 
Puts the H1 reports at the right place
 2020-11-22 12:57:27 +01:00
SwisskyandGitHub a639121b21 Merge pull request #291 from marcan2020/patch-11 
Remove unnecessary condition to extract columns
 2020-11-18 10:12:53 +01:00
SwisskyandGitHub 8863292545 Merge pull request #290 from bascoe10/patch-1 
Sorted the list of revshell options
 2020-11-14 22:28:53 +01:00
SwisskyandGitHub a60caaefef Merge pull request #289 from samsbp/master 
Update ssrf payloads specific to java
 2020-11-08 12:47:15 +01:00
Swissky bd184487e5 NTLM Hashcat 2020-11-06 16:20:03 +01:00
SwisskyandGitHub 6a82f47f32 Merge pull request #288 from bolli95/master 
TWITTER.md added
 2020-11-03 12:57:53 +01:00
SwisskyandGitHub 0492545960 Update TWITTER.md 2020-11-03 12:57:33 +01:00
SwisskyandGitHub f9e2512080 Merge pull request #287 from beomsu317/master 
Update SQL-Injection
 2020-11-03 10:38:02 +01:00
SwisskyandGitHub 464fbeb8f4 Merge pull request #285 from random-robbie/patch-1 
Update README.md
 2020-10-31 22:47:09 +01:00
SwisskyandGitHub 7f36bf58a4 Merge pull request #284 from akoul02/patch-1 
Improved Jade payload
 2020-10-31 16:47:10 +01:00
Swissky 1137bfca8d Remote Desktop Services Shadowing 2020-10-30 21:10:00 +01:00
SwisskyandGitHub 4fe1d71ad8 Merge pull request #283 from d4rkc0nd0r/patch-9 
Update MySQL Injection.md
 2020-10-29 16:44:14 +01:00
SwisskyandGitHub c7be142d62 Merge pull request #282 from Gorgamite/patch-3 
Added winPEAS to windows privilege escalation tool
 2020-10-29 12:20:55 +01:00
SwisskyandGitHub db533aabd4 Merge pull request #280 from Gorgamite/master 
Added LinPEAS to Linux Privesc.
 2020-10-29 11:56:44 +01:00
SwisskyandGitHub 2746451408 Merge pull request #279 from Gorgamite/patch-1 
Added more information on kernel exploits
 2020-10-29 11:55:25 +01:00
SwisskyandGitHub 9eb84bcfb7 Merge pull request #278 from marcan2020/patch-10 
Add Springboot Actuator RCE
 2020-10-28 18:37:38 +01:00
SwisskyandGitHub ae3a4d4336 Merge pull request #277 from bolli95/master 
XSS detection tools added
 2020-10-27 15:08:56 +01:00
SwisskyandGitHub 99f53ae9b4 Merge pull request #276 from clem9669/patch-5 
Adding marshalsec tool & references
 2020-10-26 16:35:02 +01:00
SwisskyandGitHub c52cfb1200 Merge pull request #275 from c-nagy/master 
Added a brief overview for type juggling
 2020-10-26 14:57:06 +01:00
SwisskyandGitHub fa497c2149 Merge pull request #274 from bolli95/master 
CORS and CRLF documentation updated
 2020-10-25 14:02:02 +01:00
SwisskyandGitHub 9992990e40 Update README.md 2020-10-25 14:01:53 +01:00
SwisskyandGitHub 9e61eb91be Merge pull request #273 from Gorgamite/master 
Specifying alternative access method through SSH
 2020-10-25 11:50:01 +01:00
SwisskyandGitHub 955557d175 Merge pull request #272 from op01/master 
add type juggling example
 2020-10-23 18:30:32 +02:00
SwisskyandGitHub e9c0581fa6 Merge pull request #270 from bolli95/master 
Tabnabbing explanation added
 2020-10-20 11:34:13 +02:00