 Swissky
|
1f3a94ba88
|
AWS SSM + Shadow copy attack
|
2020-03-06 15:30:38 +01:00 |
|
|
Swissky
|
5d87804f71
|
AWS EC2 Instance Connect + Lambda + SSM
|
2020-03-06 13:33:14 +01:00 |
|
|
SwisskyandGitHub
|
9207e0204c
|
Merge pull request #162 from SecGus/master
Blind SQL Injection payloads missing from the website.
|
2020-03-02 15:22:44 +01:00 |
|
|
Swissky
|
c19e36ad34
|
Azure AD Connect - MSOL Account's password and DCSync
|
2020-03-01 17:06:31 +01:00 |
|
|
Swissky
|
71a307a86b
|
AWS - EC2 copy image
|
2020-02-29 12:56:00 +01:00 |
|
|
Swissky
|
74f2dfccca
|
Kerberos Constrained Delegation
|
2020-02-23 21:20:46 +01:00 |
|
|
Swissky
|
c5ac4e9eff
|
AWS Patterns
|
2020-02-23 20:58:53 +01:00 |
|
|
SwisskyandGitHub
|
0b14b12fb4
|
Merge pull request #159 from noraj/patch-1
LDAPi: add scripts and dorks
|
2020-02-22 01:17:03 +01:00 |
|
|
Swissky
|
915946a343
|
Fix Cloud Training
|
2020-02-21 10:50:43 +01:00 |
|
|
Swissky
|
bda7100a77
|
Fix Cloud references
|
2020-02-21 10:47:16 +01:00 |
|
|
Swissky
|
984078050b
|
Cloud - Pentest with AWS and Azure
|
2020-02-21 10:36:01 +01:00 |
|
|
Swissky
|
7f0650dfc0
|
IIS Raid Persistence
|
2020-02-20 16:51:22 +01:00 |
|
|
SwisskyandGitHub
|
73aa26ba68
|
Merge pull request #158 from 0xdf0xdf/master
Adding second method of chaining PHP filters
|
2020-02-20 13:07:39 +01:00 |
|
|
SwisskyandGitHub
|
c2292145c8
|
Merge pull request #157 from Stoo0rmq/patch-1
Update File Inclusion
|
2020-02-18 12:38:43 +01:00 |
|
|
Swissky
|
ba30618a8b
|
Cobalt Strike - Artifact
|
2020-02-14 17:10:00 +01:00 |
|
|
Swissky
|
7cd49769be
|
WMI + Cobalt Strike
|
2020-02-13 22:53:45 +01:00 |
|
|
SwisskyandGitHub
|
b76a23c77f
|
Merge pull request #156 from bhattsameer/patch-1
Added more TTY Shell using perl and python
|
2020-02-09 12:15:00 +01:00 |
|
|
Swissky
|
aba6874517
|
Maps API + secretsdump enabled user/pw last set + certutil mimikatz
|
2020-02-06 21:41:29 +01:00 |
|
|
SwisskyandGitHub
|
9c4578f083
|
Merge pull request #155 from socketz/master
Updated Java & Groovy Shells
|
2020-02-06 16:42:35 +01:00 |
|
|
SwisskyandGitHub
|
37cfa0826e
|
Merge pull request #154 from antonioCoco/patch-1
Added fully interactive reverse shell for windows
|
2020-02-06 00:36:25 +01:00 |
|
|
Swissky
|
fb76fdc331
|
Windows Firewall + DLL hijacking + Named pipes
|
2020-02-01 22:12:36 +01:00 |
|
|
SwisskyandGitHub
|
8a19532f27
|
Merge pull request #152 from mcgyver5/master
Add Exploit for Telerik CVE-2017-9428
|
2020-01-29 00:06:57 +01:00 |
|
|
SwisskyandGitHub
|
3840683bed
|
Merge pull request #151 from mcgyver5/master
add Telerik CVE-2019-18935
|
2020-01-27 20:13:28 +01:00 |
|
|
Swissky
|
323a012488
|
Race Condition - First Draft
|
2020-01-26 12:43:59 +01:00 |
|
|
SwisskyandGitHub
|
eefa2afab1
|
Merge pull request #150 from austinsonger/master
Added CVE
|
2020-01-23 10:10:23 +01:00 |
|
|
Swissky
|
be0397fa68
|
BloodHound ZIP + Zero Width space tip
|
2020-01-19 22:46:45 +01:00 |
|
|
SwisskyandGitHub
|
590b7681e4
|
Merge pull request #146 from mzfr/patch-1
Update TTY shell command for python
|
2020-01-17 17:11:46 +01:00 |
|
|
SwisskyandGitHub
|
7920b4a124
|
Merge pull request #149 from ksg97031/patch-1
Add escaped double or single quote cases
|
2020-01-17 10:36:34 +01:00 |
|
|
SwisskyandGitHub
|
cfcf955a33
|
Merge pull request #148 from clirimemini/patch-1
Create 0xcela_event_handlers.txt
|
2020-01-15 18:13:41 +01:00 |
|
|
SwisskyandGitHub
|
7ab6750655
|
Merge pull request #145 from ayomawdb/master
Change IP and port to a common value across commands
|
2020-01-09 12:44:19 +01:00 |
|
|
Swissky
|
742c7ee3c2
|
AppLocker rules
|
2020-01-06 23:03:54 +01:00 |
|
|
Swissky
|
71171fa78b
|
SSRF exploiting WSGI
|
2020-01-05 22:11:28 +01:00 |
|
|
Swissky
|
3a9b9529cb
|
Mimikatz - Credential Manager & DPAPI
|
2020-01-05 17:27:02 +01:00 |
|
|
Swissky
|
73abdeed71
|
Kerberos AD GPO
|
2020-01-05 16:28:00 +01:00 |
|
|
Swissky
|
b052f78d95
|
Blacklist3r and Machine Key
|
2020-01-02 23:33:04 +01:00 |
|
|
SwisskyandGitHub
|
97015e4f64
|
Merge pull request #143 from gdemarcsek/patch-1
Added another PHP reverse shell payload
|
2020-01-02 22:37:45 +01:00 |
|
|
SwisskyandGitHub
|
0850839b25
|
Merge pull request #142 from mikesiegel/mike_ssrf
Added anti-SSRF header bypass for GCP
|
2020-01-01 12:44:41 +01:00 |
|
|
Swissky
|
0a6ac284c9
|
AdminSDHolder Abuse
|
2019-12-30 19:55:47 +01:00 |
|
|
Swissky
|
bcb24c9866
|
Abusing Active Directory ACLs/ACEs
|
2019-12-30 14:22:10 +01:00 |
|
|
Swissky
|
4b10c5e302
|
AD mitigations
|
2019-12-26 12:09:23 +01:00 |
|
|
Swissky
|
1535c5f1b3
|
Kubernetes - Privileged Service Account Token
|
2019-12-20 11:33:25 +01:00 |
|
|
Swissky
|
cf5a4b6e97
|
XSLT injection draft
|
2019-12-17 21:13:59 +01:00 |
|
|
SwisskyandGitHub
|
02f714d479
|
Merge pull request #139 from nizam0906/patch-5
Fixed Broken Links in Directory traversal
|
2019-12-17 19:19:35 +01:00 |
|
|
SwisskyandGitHub
|
ada158cd60
|
Merge pull request #138 from nizam0906/patch-4
Fixed Broken Links in Command Injection
|
2019-12-17 19:18:54 +01:00 |
|
|
SwisskyandGitHub
|
4c96a5a6ef
|
Merge pull request #137 from nizam0906/patch-3
Updated Summary and Fixed Broken Links in CSRF
|
2019-12-17 19:18:34 +01:00 |
|
|
SwisskyandGitHub
|
976403034c
|
Merge pull request #136 from nizam0906/patch-2
Added Summary in CRLF
|
2019-12-17 19:18:11 +01:00 |
|
|
SwisskyandGitHub
|
4588cc2eee
|
Merge pull request #135 from nizam0906/patch-1
Fixed Broken Links in API Key Leaks
|
2019-12-17 17:39:55 +01:00 |
|
|
Swissky
|
896e262531
|
Privilege impersonation and GraphQL SQLi
|
2019-12-11 16:59:14 +01:00 |
|
|
SwisskyandGitHub
|
ba9fce83b1
|
Merge pull request #131 from js-kyle/angularjs
clarify AngularJS vs Angular
|
2019-12-07 12:01:08 +01:00 |
|
|
Swissky
|
6f4a28ef66
|
Slim RCE + CAP list
|
2019-12-05 23:06:53 +01:00 |
|
|
SwisskyandGitHub
|
21101ec287
|
Merge pull request #130 from clem9669/patch-3
Bypass XSS filters on alert
|
2019-12-03 15:40:22 +01:00 |
|
|
SwisskyandGitHub
|
e92126a16c
|
Merge pull request #129 from noraj/patch-2
SSFR: add ref for docker
|
2019-12-02 22:38:28 +01:00 |
|
|
SwisskyandGitHub
|
ac0239d332
|
Merge pull request #128 from noraj/patch-1
XXE: add XXE via SVG rasterization
|
2019-12-02 22:38:08 +01:00 |
|
|
SwisskyandGitHub
|
c125b35f98
|
Merge pull request #127 from trietptm/master
Copy this -> Cut this
|
2019-12-02 10:52:19 +01:00 |
|
|
Swissky
|
c60f264664
|
RDP backdoor + RDP session takeover
|
2019-11-26 23:39:14 +01:00 |
|
|
Swissky
|
06864b0ff8
|
Password spraying rewrite + Summary fix
|
2019-11-25 23:35:20 +01:00 |
|
|
Swissky
|
3abaa3e23d
|
Linux AD - Keyring, Keytab, CCACHE
|
2019-11-25 23:12:06 +01:00 |
|
|
SwisskyandGitHub
|
886a0b9426
|
Merge pull request #125 from noraj/patch-3
Ruby: add slim
|
2019-11-16 23:49:11 +01:00 |
|
|
Swissky
|
00684a10cd
|
IIS asp shell with .asa, .cer, .xamlx
|
2019-11-16 14:53:42 +01:00 |
|
|
Swissky
|
639dc9faec
|
.url file in writeable share
|
2019-11-14 23:54:57 +01:00 |
|
|
Swissky
|
3a384c34aa
|
Password spray + AD summary re-org
|
2019-11-14 23:37:51 +01:00 |
|
|
Swissky
|
7f266bfda8
|
mitm ipv6 + macOS kerberoasting
|
2019-11-14 23:26:13 +01:00 |
|
|
SwisskyandGitHub
|
255a8c3660
|
Merge pull request #124 from yehgdotnet/patch-1
Added new payloads from hahwul.com
|
2019-11-14 14:21:31 +01:00 |
|
|
SwisskyandGitHub
|
6ca8aa8acc
|
Merge pull request #123 from bash-c/patch-1
fix invalid link
|
2019-11-14 10:25:54 +01:00 |
|
|
Swissky
|
43f185d289
|
CVE-2019-1322 UsoSvc
|
2019-11-11 20:31:07 +01:00 |
|
|
Swissky
|
f6d5221a85
|
SID history break trust + Powershell history + SCF files
|
2019-11-07 23:21:00 +01:00 |
|
|
Swissky
|
6fecedd880
|
MXSS - Mutated XSS - Google POC
|
2019-11-06 18:32:29 +01:00 |
|
|
Swissky
|
24516ca7a1
|
Kubernetes attacks update + ref to securityboulevard
|
2019-11-05 11:05:59 +01:00 |
|
|
Swissky
|
60050219b7
|
Impersonating Office 365 Users on Azure AD Connect
|
2019-11-04 21:43:44 +01:00 |
|
|
SwisskyandGitHub
|
4eae23a43d
|
Merge pull request #122 from noraj/patch-4
XXE: tools description + more tools
|
2019-11-04 09:11:26 +01:00 |
|
|
SwisskyandGitHub
|
adaa93b4b8
|
Merge pull request #121 from noraj/patch-3
add ref for docker SSRF
|
2019-11-04 09:10:46 +01:00 |
|
|
SwisskyandGitHub
|
3585b1f00f
|
Merge pull request #120 from cydave/patch-1
Fix awk snippet
|
2019-11-03 17:54:52 +01:00 |
|
|
SwisskyandGitHub
|
952b3c0369
|
Merge pull request #119 from Hi15358/master
Updated Insecure Deserialization/Java.md and Created Zip Slip in Upload Insecure Files
|
2019-10-30 09:05:22 +01:00 |
|
|
SwisskyandGitHub
|
069463fe14
|
Merge pull request #117 from Reelix/patch-1
Added an alternate possible Found condition to POST
|
2019-10-29 21:06:35 +01:00 |
|
|
SwisskyandGitHub
|
535ad5baaa
|
Merge pull request #118 from cydave/cydave-patch-1
Fix lua reverse shell quote issue
|
2019-10-29 21:06:07 +01:00 |
|
|
SwisskyandGitHub
|
55d1731897
|
Merge pull request #116 from nizam0906/master
Added More Updates in SQL Injection
|
2019-10-29 17:11:28 +01:00 |
|
|
SwisskyandGitHub
|
b7fdf8aa3f
|
Merge pull request #106 from Hi15358/master
Update Reverse Shell Cheatsheet.md and Directory Traversal
|
2019-10-29 10:14:07 +01:00 |
|
|
SwisskyandGitHub
|
377aad4061
|
Merge pull request #115 from nizam0906/master
Added List Database Administrator Accounts
|
2019-10-29 08:36:01 +01:00 |
|
|
SwisskyandGitHub
|
b25694239b
|
Merge pull request #114 from noraj/patch-1
XXE: add XXEinjector
|
2019-10-29 08:35:31 +01:00 |
|
|
Swissky
|
5094ef8b10
|
XXE in XLSX
|
2019-10-28 20:46:19 +01:00 |
|
|
SwisskyandGitHub
|
534d46d0e4
|
Merge pull request #113 from Q5Ca/patch-1
Add bypass WAF no equal using BETWEEN
|
2019-10-28 18:21:26 +01:00 |
|
|
SwisskyandGitHub
|
be3ef08d19
|
Merge pull request #112 from nizam0906/master
Added More PostgreSQL Injection Queries And Blind XSS endpoint
|
2019-10-28 18:20:54 +01:00 |
|
|
SwisskyandGitHub
|
56ec623412
|
Merge pull request #111 from noraj/patch-1
XPATH: add tools
|
2019-10-26 21:46:18 +02:00 |
|
|
SwisskyandGitHub
|
68f1a17b57
|
Merge pull request #110 from nizam0906/master
Update PostgreSQL Injection.md
|
2019-10-26 21:44:25 +02:00 |
|
|
SwisskyandGitHub
|
882eec0566
|
Merge pull request #109 from nizam0906/master
Added 3 yahoo jsonp endpoints
|
2019-10-26 11:39:57 +02:00 |
|
|
SwisskyandGitHub
|
32c18fdf56
|
Merge pull request #108 from nizam0906/master
Added 6 MYSQL DIOS
|
2019-10-25 17:04:57 +02:00 |
|
|
Swissky
|
88f020381d
|
Out of band XPATH
|
2019-10-22 23:06:35 +02:00 |
|
|
SwisskyandGitHub
|
3464611c00
|
Merge pull request #107 from noraj/patch-1
fix TOC links
|
2019-10-22 21:41:28 +02:00 |
|
|
Swissky
|
727eb5cabd
|
Drop the MIC
|
2019-10-21 23:00:27 +02:00 |
|
|
Swissky
|
11fc6e4bc5
|
NTLM relay + MS08-068
|
2019-10-20 22:09:36 +02:00 |
|
|
Swissky
|
ed252df92e
|
krb5.keytab + credential use summary
|
2019-10-20 13:25:06 +02:00 |
|
|
Swissky
|
7159a3ded3
|
RODC dcsync note + Dumping AD Domain summary
|
2019-10-18 00:07:09 +02:00 |
|
|
Swissky
|
8eae039a28
|
netdoc:// wrapper for Java SSRF
|
2019-10-17 21:13:04 +02:00 |
|
|
SwisskyandGitHub
|
67a68d7eac
|
Merge pull request #105 from Zeecka/patch-3
Add filter iconv utf16 LFI bypass tricks
|
2019-10-17 19:39:00 +02:00 |
|
|
SwisskyandGitHub
|
b22742ba9e
|
Merge pull request #103 from Ali-Yazdani/patch-1
Update readme.md
|
2019-10-16 23:35:04 +02:00 |
|
|
SwisskyandGitHub
|
6a81a130cc
|
Merge pull request #102 from op01/master
Update Silver Ticket
|
2019-10-15 19:17:03 +02:00 |
|
|
Swissky
|
05b3e13098
|
SSRF for ECS
|
2019-10-12 13:30:52 +02:00 |
|
|
SwisskyandGitHub
|
57628ffd18
|
Merge pull request #101 from Ali-Yazdani/patch-1
Add Kubernetes file
|
2019-10-11 14:36:54 +02:00 |
|
|
SwisskyandGitHub
|
320a9fad31
|
Merge pull request #100 from noraj/patch-1
little changes
|
2019-10-09 20:49:20 +02:00 |
|
|
Swissky
|
357658371f
|
SSRF URL for Google Cloud
|
2019-10-06 20:59:58 +02:00 |
|