gitea-mirror/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2026-07-30 23:50:38 -07:00
Code Issues Packages Projects Releases Wiki Activity
1,872 Commits 2 Branches 7 Tags
4684fed4aabea94bc2c639b977743ba87c67b737
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
SwisskyandGitHub d93a228b40 Merge pull request #692 from jlkl/master 
Add two methods about LFI to RCE via PHP PEARCMD
 2023-11-12 18:21:16 +01:00
SwisskyandGitHub 3ba405954a Merge pull request #693 from bountyhacking/patch-1 
Update README.md
 2023-11-12 18:20:38 +01:00
SwisskyandGitHub 711b44c6b0 Merge pull request #695 from hebelsan/patch-1 
latex injection add blacklist bypass
 2023-11-12 13:15:46 +01:00
Swissky d80068cc1b Privileged File Delete 2023-11-04 15:52:29 +01:00
Swissky 46208ca898 Prompt Injection - RCE payloads 2023-11-01 13:56:38 +01:00
Swissky ed081d7f29 Vulnerability Reports 2023-10-31 17:45:24 +01:00
SwisskyandGitHub 156990a2c6 Merge pull request #691 from itsparakh/patch-1 
Update README.md
 2023-10-30 18:17:56 +01:00
SwisskyandGitHub 85871c6c14 Merge pull request #690 from idealphase/master 
Update README.md (XSLT Injection)
 2023-10-28 17:34:14 +02:00
Swissky 07cf2831ca AWS Key ID + UAC + Race Condition 2023-10-28 17:31:59 +02:00
Swissky 3ad350b753 Prompts Examples 2023-10-22 17:17:55 +02:00
SwisskyandGitHub 0f085798c7 Merge pull request #686 from swisskyrepo/prototype-pollution 
Prototype Pollution Update
 2023-10-18 18:47:31 +02:00
Swissky ccccb34c61 Prototype Pollution Update 2023-10-18 18:46:41 +02:00
SwisskyandGitHub c95a0a1a28 Merge pull request #681 from the-pythonist/the-pythonist-patch-1 
Update README.md
 2023-10-15 19:36:33 +02:00
SwisskyandGitHub 6c38c3cdda Merge pull request #682 from 0xblank/master 
Fix typo in GraphQL Injection README.md
 2023-10-15 19:35:32 +02:00
SwisskyandGitHub d052949a6b Merge pull request #683 from swisskyrepo/rmi-update 
Java beanshooter
 2023-10-15 19:34:41 +02:00
Swissky 4b6db7b471 Java beanshooter 2023-10-15 19:31:16 +02:00
SwisskyandGitHub eebea7cb4d Merge pull request #680 from swisskyrepo/books-update 
Update Books References
 2023-10-12 10:23:48 +02:00
Swissky 886b64801d Update Books References 2023-10-12 10:22:37 +02:00
SwisskyandGitHub 46e446a06f Merge pull request #679 from swisskyrepo/msi-installer 
MSI installer
 2023-10-11 21:06:37 +02:00
Swissky e86f221fe8 Fix typo in MSI installer 2023-10-11 21:05:54 +02:00
Swissky 5556f6ff79 MSI Installer - PrivEsc 2023-10-11 21:03:47 +02:00
Swissky 7f1823efbe Fix character matching for '>' and its URL entity encoding from @CaoZnZZ 2023-10-10 13:56:57 +02:00
SwisskyandGitHub dd7525dc8f Merge pull request #630 from mtausig/patch-2 
Add documentation for PDF JS PoC
 2023-10-10 12:57:44 +02:00
SwisskyandGitHub a95f11b32e Merge pull request #662 from Vunnm/master-1 
Add JSON simple with form
 2023-10-10 12:10:59 +02:00
SwisskyandGitHub 103f41898b Merge pull request #663 from cfpadok/develop 
feat: add cognito-scanner tool for AWS pentest
 2023-10-09 23:19:43 +02:00
SwisskyandGitHub 12e56724f1 Merge pull request #678 from aadi1011/master 
Added Clickjacking Technique
 2023-10-09 21:11:54 +02:00
SwisskyandGitHub 19f138d4ad Update README.md 2023-10-09 20:52:28 +02:00
SwisskyandGitHub a71a793648 Merge pull request #676 from dahalsharad/add-wcd-exploit-description-and-image 
added Web Cache Deception exploit, description and demonstrative image
 2023-10-08 19:10:05 +02:00
Swissky 892c68e6e7 PEAR_Config example 2023-10-02 17:12:36 +02:00
Swissky 837f220264 LFI with pearcmd.php 2023-10-02 12:52:10 +02:00
Swissky 55edc9fc74 Fix MySQL duplicate cheatsheet 2023-10-01 12:45:12 +02:00
Swissky d142587f28 Race Condition WIP + AD asreproast/kerberoasting 2023-10-01 12:42:20 +02:00
SwisskyandGitHub a0475a2f45 Merge pull request #675 from nuts7/kerberoast-without-preauth 
Add Kerberoasting w/o domain account
 2023-09-30 18:51:19 +02:00
Swissky 485103e9bb IDOR Numeric, Hash, Wildcard and PRNG 2023-09-25 14:15:48 +02:00
SwisskyandGitHub 84569e18e4 Merge pull request #674 from eltociear/patch-1 
Fix typo in README.md
 2023-09-22 14:50:49 +02:00
Swissky 83f1af0af0 Command injection update 2023-09-21 13:09:57 +02:00
Swissky e9fb4f100c Google Web Toolkit 2023-09-19 09:58:22 +02:00
Swissky 59640ba51a MYSQL Wide byte injection (GBK) 2023-09-14 10:53:37 +02:00
SwisskyandGitHub 64a6e3eb04 Merge pull request #672 from manesec/master 
Add MYSQL Wide byte injection
 2023-09-14 10:25:12 +02:00
SwisskyandGitHub ed7c3a4e0c Merge pull request #671 from Thy-GoD/patch-1 
Add automatic shell upgrade via rustcat.
 2023-09-09 10:50:33 +02:00
Swissky f9a2880ad5 Recover Public Key From Signed JWTs 2023-09-04 11:37:15 +02:00
SwisskyandGitHub c030379871 Merge pull request #670 from superboy-zjc/master 
Update Lodash SSTI
 2023-09-03 17:30:52 +02:00
Swissky a0c14e5299 SQL injections - WAF bypass 2023-09-03 14:26:03 +02:00
Swissky 7752ff806f ASPNET Cookieless Bypass 2023-09-02 23:01:10 +02:00
SwisskyandGitHub e879ca42a3 Merge pull request #668 from sethsec-bf/patch-1 
Added CloudFox and CloudFoxable
 2023-08-31 10:37:38 +02:00
Swissky 53ec79abd0 Initial Access Cheatsheet 2023-08-26 22:01:45 +02:00
SwisskyandGitHub 930044d7c1 Merge pull request #666 from dwisiswant0/feat/ssrf-add-tool 
feat(SSRF): add tool
 2023-08-26 12:50:56 +02:00
SwisskyandGitHub 9db39952e7 Merge pull request #667 from PakCyberbot/master-1 
Update SQLite Injection.md
 2023-08-26 12:50:06 +02:00
Swissky b0dfcfd438 Hidden Parameters 2023-08-24 22:15:11 +02:00
SwisskyandGitHub e2e2da74ce Merge pull request #664 from ScriptSathi/master 
feat: Add Rust reverse shell for unix
 2023-08-22 18:04:31 +02:00
SwisskyandGitHub d642e97d8d Merge pull request #661 from emmanuel-ferdman/wip 
fix: broken link on AWS Amazon Bucket S3 page
 2023-07-26 14:20:27 +02:00
SwisskyandGitHub e366ef9a13 Merge pull request #660 from yanncam/master 
Added precision on the format, generation and breaking of NetNTLMv1
 2023-07-25 15:28:12 +02:00
Swissky b715364547 Fix typo 2023-07-18 22:19:29 +02:00
Swissky 52ef85a830 WebSocket Tools 2023-07-18 22:17:51 +02:00
Swissky fbc43be79f Merge pull requests 2023-07-18 18:24:14 +02:00
Swissky 87e6f55e16 Error Based XXE - Local DTD 2023-07-18 18:23:34 +02:00
SwisskyandGitHub 359b9b435e Merge pull request #659 from preemptible/patch-1 
Update BOOKS.md
 2023-07-18 10:21:23 +02:00
SwisskyandGitHub 3de6c41823 Merge pull request #658 from NaxnN/patch-2 
Update SQLite Injection.md
 2023-07-18 10:20:20 +02:00
Swissky cd19bb9409 Business Logic Errors + Mass Assignment 2023-07-09 13:01:03 +02:00
Swissky b68ce28c4b Open Redirect + SSI Injection 2023-07-08 10:09:59 +02:00
Swissky 86e246dd03 Prototype Pollution 2023-07-07 23:10:33 +02:00
SwisskyandGitHub 0a75beeccd Merge pull request #652 from clem9669/master 
Update README.md for Latex injection
 2023-06-29 12:27:22 +02:00
SwisskyandGitHub f723ef4878 Merge pull request #651 from JLLeitschuh/patch-3 
Add new AWS IPv6 SSRF Endpoint
 2023-06-29 10:59:10 +02:00
SwisskyandGitHub 9711417161 Update README.md 2023-06-29 10:59:02 +02:00
SwisskyandGitHub a8161ef48c Merge pull request #650 from Xhoenix/master 
update ssrf payloads
 2023-06-29 10:41:31 +02:00
SwisskyandGitHub 70396ec71d Merge pull request #649 from MotiHarmats/patch-1 
Add CI/CD payloads
 2023-06-28 10:26:10 +02:00
SwisskyandGitHub ec11a14e4e Merge pull request #648 from mpgn/master 
Use new offical CME repository
 2023-06-28 10:18:55 +02:00
Swissky 113afae290 AWS EC2 Metadata + SSSD token deobfuscate 2023-06-27 15:45:29 +02:00
Swissky 5ddd8e04da MSSQL - Stacked Queries Delimiters 2023-06-25 00:02:54 +02:00
Swissky e9c1ce1c09 AWS Key Patterns 2023-06-22 19:03:06 +02:00
Swissky fc36b38430 DOM Clobbering 2023-06-10 20:08:23 +02:00
SwisskyandGitHub 726de9e9b2 Merge pull request #645 from azurit/ssrflocalhost 
SSRF: bypass using IPv6/IPv4 Address Embedding
 2023-06-09 10:48:54 +02:00
Swissky 10df57a531 Type Juggling 2023-06-09 10:46:54 +02:00
Swissky de6e91657d Type Juggling - Loose Comparison and Exploit 2023-06-09 10:45:45 +02:00
SwisskyandGitHub f0d02d2414 Merge pull request #647 from noraj/patch-1 
xxe - go secure workshop
 2023-06-08 11:09:10 +02:00
Swissky aba6f1e731 Merge branch 'master' of https://github.com/swisskyrepo/PayloadsAllTheThings 2023-06-08 11:07:39 +02:00
Swissky 93fa4df7cd Prompt Injection 2023-06-08 11:06:37 +02:00
SwisskyandGitHub e17b6e1ac4 Merge pull request #646 from NaxnN/patch-1 
Update SSTI README.md
 2023-06-07 09:46:59 +02:00
Swissky b8c803717a WDAC Policy Removal + SSRF domains 2023-05-31 14:18:25 +02:00
SwisskyandGitHub f85f2cb4c6 Merge pull request #644 from rdbo/patch-1 
Fixed typos on README.md
 2023-05-18 13:32:58 +02:00
Swissky 0a07e07d00 Merge branch 'master' of https://github.com/swisskyrepo/PayloadsAllTheThings 2023-05-15 19:23:58 +02:00
Swissky 6adfe5d865 GraphQL Batching Attacks 2023-05-15 19:23:07 +02:00
SwisskyandGitHub af4ade2a44 Merge pull request #643 from p0dalirius/patch-2 
SSTI / jinja2 : Removed dot in lipsum.__globals__.["os"]
 2023-05-09 20:16:05 +02:00
SwisskyandGitHub 8d2c30e969 Merge pull request #642 from p0dalirius/patch-1 
Adding Jinja2 RCE through lipsum in Templates
 2023-05-09 18:58:57 +02:00
Swissky 5af6a23a2e DPAPI LocalMachine + BitLocker 2023-05-08 17:08:25 +02:00
SwisskyandGitHub 0dd92aa89d Merge pull request #640 from m3dsec/patch-2 
Add Kerberos CVE-2022-33679 (RC4 Is Still Considered Harmful)
 2023-05-08 16:22:30 +02:00
SwisskyandGitHub 55df53105e Merge pull request #639 from TomWilford/master 
Added Twig 'passthru' filter exploits
 2023-04-28 16:24:20 +02:00
SwisskyandGitHub 1e66a42bba Merge pull request #638 from ZkClown/master 
Add some stuff on Office exec, Network Recon and Active Directory methodo
 2023-04-20 21:31:23 +02:00
SwisskyandGitHub b0445a7250 Merge pull request #637 from ZkClown/master 
Add Powerhsell Reflection through Delegate Type and Basic HTML Smuggling
 2023-04-19 21:51:04 +02:00
SwisskyandGitHub e717839fda Merge pull request #635 from MatteoPaier/fix-param-pollution-golang 
Fixed Golang net/http param pollution outcome
 2023-04-14 17:48:01 +02:00
Swissky 6861c46fcd MySQL MSSQL Oracle SQL Update 2023-04-14 17:45:45 +02:00
Swissky 25d2be529f BadSecrets Tool 2023-04-12 13:12:33 +02:00
SwisskyandGitHub ff6c22b86e Merge pull request #634 from mpgn/master 
Fix path with sessionS with an S for php
 2023-04-12 11:27:26 +02:00
SwisskyandGitHub 14c6c9642d Merge pull request #633 from harunoz/patch-1 
Update README.md
 2023-04-09 18:41:00 +02:00
Swissky 86cc53244d LOL Drivers 2023-04-07 09:22:07 +02:00
Swissky 30d17b4924 Fix markdown typo ESC1-9 2023-04-05 12:47:47 +02:00
Swissky 0a70636d28 ETW Providers 2023-04-03 10:48:53 +02:00
Swissky d040c0e677 Web Cache Deception Methodology 2023-03-28 21:53:53 +02:00
Swissky fddd094ee1 LFI iconv and dechunk + ETW + NTDS Dump Rework 2023-03-27 22:38:25 +02:00
Swissky dd0c23f9a2 ImageMagick Typo 2023-03-19 22:46:56 +01:00