gitea-mirror/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2026-07-30 23:50:38 -07:00
Code Issues Packages Projects Releases Wiki Activity
1,269 Commits 2 Branches 7 Tags
5e415caea7420846f0f424ab385011c41b332d8e
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
SwisskyandGitHub d484212de9 Merge pull request #447 from mschader/patch-5 
Update XXE Injection
 2021-10-18 12:39:53 +02:00
SwisskyandGitHub 220e0efef6 Merge pull request #446 from noraj/patch-1 
XXE: OOB via FTP + remote DTD for XSLX files
 2021-10-17 18:52:17 +02:00
SwisskyandGitHub 7e18158c3b Merge pull request #444 from mschader/patch-4 
Update Windows - Persistence.md
 2021-10-14 09:51:35 +02:00
SwisskyandGitHub 45821c00ea Merge pull request #443 from Flower-dev/master 
add links books
 2021-10-12 21:03:23 +02:00
SwisskyandGitHub d2ca8d8016 Merge pull request #442 from Flower-dev/master 
BOOKS.md : new books
 2021-10-12 20:21:34 +02:00
SwisskyandGitHub 9688e6e88e Merge pull request #441 from marcan2020/patch-12 
Update breakout techniques
 2021-10-11 23:13:38 +02:00
SwisskyandGitHub 440b8d825e Merge pull request #440 from mschader/patch-3 
Update Hash Cracking Methodology
 2021-10-11 18:11:48 +02:00
SwisskyandGitHub 6c48d0ae49 Merge pull request #438 from mschader/patch-2 
Update directory traversal wordlist
 2021-10-11 10:13:43 +02:00
SwisskyandGitHub 0a10a4d029 Merge pull request #437 from swisskyrepo/hash-cracking 
Hash Cracking v0.1
 2021-10-10 23:06:18 +02:00
Swissky 883c35a9e5 Hash Cracking v0.1 2021-10-10 23:05:01 +02:00
SwisskyandGitHub c664a0ee09 Merge pull request #436 from stefanman125/patch-1 
Added CVE-2021-41773 payload
 2021-10-06 21:16:19 +02:00
SwisskyandGitHub 382a6d57e2 Merge pull request #435 from p0dalirius/patch-2 
Fixed typos, added links and better formatting in Active Directory Attack.md
 2021-10-06 10:17:38 +02:00
SwisskyandGitHub acca37dc79 Merge pull request #434 from jaxBCD/patch-1 
Update Oracle Sql injection.md add sql error
 2021-10-04 17:54:05 +02:00
SwisskyandGitHub 3b5f23b4ea Merge pull request #433 from stevenfranks/feature/update-books 
Refactor Books Page
 2021-10-04 10:37:12 +02:00
SwisskyandGitHub e240bbe4a3 Merge pull request #432 from p0dalirius/ssti_payloads 
Added ssti payloads to intruder "ssti.fuzz" wordlist.
 2021-10-04 10:35:06 +02:00
SwisskyandGitHub b0d96cb657 Merge pull request #429 from mschader/patch-1 
XSS: Remove unnecessary complexity from CSP bypass payload
 2021-10-01 17:00:09 +02:00
SwisskyandGitHub 0024e2a3a9 Merge pull request #427 from PiyushThePal/master 
Update README.md
 2021-10-01 11:13:45 +02:00
SwisskyandGitHub 000d1f9260 Merge pull request #426 from CravateRouge/patch-2 
Add python check for ZeroLogon
 2021-10-01 00:58:58 +02:00
SwisskyandGitHub 31667c91b6 Merge pull request #425 from CravateRouge/patch-1 
Add Linux alternatives for GenericWrite abuse
 2021-10-01 00:58:09 +02:00
SwisskyandGitHub df7172dca1 Merge pull request #424 from p0dalirius/master 
Added missing descriptions and fixed color formatting for LaTeX
 2021-09-29 09:39:35 +02:00
SwisskyandGitHub 71988cfb40 Merge pull request #423 from p0dalirius/master 
Alphabetical sort of the technologies + official websites
 2021-09-26 22:17:13 +02:00
SwisskyandGitHub e68dc99749 Merge pull request #422 from A1vinSmith/master 
Update MySQL Injection.md
 2021-09-25 18:17:10 +02:00
SwisskyandGitHub b3d31e45e5 Merge pull request #421 from p0dalirius/master 
Added shorter payloads for Server Side Template injections in jinja2
 2021-09-19 00:03:02 +02:00
Swissky d2f63406cd IIS + Certi + NetNTLMv1 2021-09-16 17:45:29 +02:00
SwisskyandGitHub c957271453 SSRF PDF PhantomJS 2021-09-08 12:49:32 +02:00
Swissky 3af70155e2 DCOM Exec Impacket 2021-09-07 14:48:57 +02:00
Swissky 780d8ba313 Merge branch 'master' of https://github.com/swisskyrepo/PayloadsAllTheThings 2021-09-07 10:23:12 +02:00
Swissky 23438cc68e Mitigation NTLMv1 2021-09-07 10:22:39 +02:00
SwisskyandGitHub 90f37e57ec Merge pull request #420 from looCiprian/master 
Added XSS <object> payload
 2021-09-06 21:05:30 +02:00
Swissky c8076e99c9 Net-NTLMv1 + DriverPrinter 2021-09-06 20:58:44 +02:00
Swissky 0f94adafe5 ESC2 + Windows Search Connectors - Windows Library Files 2021-09-01 14:10:53 +02:00
SwisskyandGitHub 88321a332f Merge pull request #418 from p0dalirius/patch-1 
54 context-free payloads for SSTI in Mako templates
 2021-08-26 22:21:16 +02:00
SwisskyandGitHub 1e85308ae2 Merge pull request #395 from daffainfo/patch-1 
Adding Cloudflare XSS payload
 2021-08-25 22:21:54 +02:00
SwisskyandGitHub bef56844aa Merge pull request #411 from lollipophacker1337/master 
Added a resources to the Dependency Confusion repo.
 2021-08-25 22:21:26 +02:00
SwisskyandGitHub 46cd766d0f Merge pull request #414 from nomothane/master 
Backwards compatibility for Python 2
 2021-08-25 22:20:17 +02:00
SwisskyandGitHub f89597725a Merge pull request #416 from Bort-Millipede/master 
Expression Language Injection One-Liners; XSS Payload; Fixed Linux Py…
 2021-08-25 22:17:53 +02:00
SwisskyandGitHub 7c06c9025e Update README.md 2021-08-25 22:17:34 +02:00
Swissky 69b99826d2 AD CS Attacks 2021-08-25 22:14:44 +02:00
SwisskyandGitHub 8a6220c1a2 Merge pull request #417 from noraj/patch-1 
XSS: document.domain, window.origin and console.log usage
 2021-08-24 21:03:45 +02:00
Swissky fde99044c5 CS NTLM Relay 2021-08-22 23:03:02 +02:00
SwisskyandGitHub 6cba7ceda9 Merge pull request #413 from sudoutopia/master 
GROUP_CONCAT equivelent for MSSQL
 2021-08-11 17:54:46 +02:00
Swissky 87be30d3b2 DB2 Injection + ADCS 2021-08-10 23:00:19 +02:00
SwisskyandGitHub 01f2a02c52 Merge pull request #410 from clem9669/patch-7 
Update SSRF
 2021-08-06 19:29:57 +02:00
SwisskyandGitHub ab9e8a2ba2 Merge pull request #409 from Xib3rR4dAr/patch-1 
Update README.md
 2021-08-04 09:39:43 +02:00
SwisskyandGitHub b3f5637103 Merge pull request #397 from c14dd49h/master 
Update README.md
 2021-07-31 11:29:08 +02:00
SwisskyandGitHub 1fd9260d1e Update README.md 2021-07-31 11:28:23 +02:00
SwisskyandGitHub 7ab7664469 Merge pull request #399 from Bort-Millipede/master 
New/Updated Python Linux Reverse Shells
 2021-07-31 11:26:36 +02:00
SwisskyandGitHub 38a209b14d Merge pull request #406 from pang9979/master 
Update Table
 2021-07-31 11:25:45 +02:00
SwisskyandGitHub ce14006be0 Merge pull request #404 from p0dalirius/master 
Added context-free jinja2 payloads
 2021-07-27 19:51:08 +02:00
SwisskyandGitHub 18cd445a5b Merge pull request #400 from PinkDev1/patch-1 
Added gentilkiwi twitter
 2021-07-27 10:37:15 +02:00
Swissky d9d4a54d03 RemotePotato0 + HiveNightmare 2021-07-26 21:25:56 +02:00
SwisskyandGitHub 2d273fd40e Merge pull request #398 from bash-c/patch-1 
add missing header file in Linux - Privilege Escalation.md
 2021-07-26 11:49:01 +02:00
Swissky 3a4bd97762 AD CS - Mimikatz / Rubeus 2021-07-25 11:40:19 +02:00
SwisskyandGitHub 1b244ca690 Merge pull request #388 from jeremybuis/patch-1 
Adds Lessjs injections
 2021-07-16 18:54:48 +02:00
Swissky 3f2f156c12 File Upload Update 2021-07-14 17:10:04 +02:00
Swissky 44735975a5 Active Directory update 2021-07-12 20:45:16 +02:00
Swissky 175c676f1e Tmux PrivEsc + PrintNightmare update 2021-07-12 14:42:18 +02:00
SwisskyandGitHub 975a23ae34 Merge pull request #389 from noraj/patch-1 
add CVE-2021-34527 + It Was All A Dream scanner
 2021-07-08 15:49:27 +02:00
Swissky 2f8fc7bbb9 PrintNightmare - Mimikatz 2021-07-05 21:57:14 +02:00
Swissky 459f4c03fc Dependency Confusion + LDAP 2021-07-04 13:32:32 +02:00
SwisskyandGitHub 043e5a105e Merge pull request #387 from srabraham/patch-1 
Fix typo in Linux - Persistence.md
 2021-07-03 00:55:11 +02:00
SwisskyandGitHub 2148c89452 Merge pull request #386 from bhattsameer/patch-2 
Added Reverse Shell using Telnet
 2021-07-01 19:14:23 +02:00
Swissky 80816aee31 PrintNightmare - #385 2021-07-01 14:40:03 +02:00
Swissky 4e95162dc3 BadPwdCount attribute + DNS 2021-06-28 22:08:06 +02:00
Swissky ab0e487500 Cobalt Strike spunner + pivotnacci 2021-06-27 23:58:13 +02:00
SwisskyandGitHub 628481cd4d Merge pull request #384 from leongross/master 
issue #286
 2021-06-25 10:25:03 +02:00
SwisskyandGitHub 4519df200c Merge pull request #383 from leongross/patch-1 
Update Subdomains Enumeration.md  Issue #369
 2021-06-25 10:24:08 +02:00
Swissky 85a7ac8a76 Shadow Credentials + AD CS Relay + SSSD KCM 2021-06-24 15:26:05 +02:00
Swissky 0ba120e250 Fix #382 2021-06-23 22:14:55 +02:00
SwisskyandGitHub 9f5cf0357a Merge pull request #381 from hahwul/master 
Added referer header validation check in CSRF
 2021-06-23 14:05:23 +02:00
SwisskyandGitHub a69e911926 Merge pull request #379 from alexlauerman/master 
Adding updated flowchart to CSRF page
 2021-06-19 09:46:49 +02:00
SwisskyandGitHub 18556c2caf Merge pull request #378 from PinkDev1/patch-3 
Fixed typo/wording on "Tips" section in Blind-XSS
 2021-06-17 09:24:06 +02:00
SwisskyandGitHub e9b38b8f43 Merge pull request #377 from ajdumanhug/master 
Add AWS SSRF Bypasses
 2021-06-16 18:41:39 +02:00
SwisskyandGitHub 62b897c936 Merge pull request #376 from noraj/patch-2 
XSS: add quick tips for bXSS
 2021-06-16 13:56:29 +02:00
SwisskyandGitHub 2a4631eb8f Merge pull request #375 from noraj/patch-1 
XSS: remove bluelotus
 2021-06-16 13:56:07 +02:00
SwisskyandGitHub b006551bfe Merge pull request #374 from tex2e/patch-1 
Fix snippets
 2021-06-14 16:10:54 +02:00
SwisskyandGitHub ad9c15b824 Merge pull request #370 from Annihilat0r/master 
add NoSQLi payload
 2021-05-29 22:38:13 +02:00
SwisskyandGitHub e3e3ca6ba2 Merge pull request #366 from mpgn/master 
Update Smarty Template Injection
 2021-05-20 18:08:20 +02:00
SwisskyandGitHub 28f68f47ae Merge pull request #365 from Shrewk/patch-1 
Updates JWT tool
 2021-05-19 12:05:59 +02:00
SwisskyandGitHub 4ae6982f63 Merge pull request #362 from noraj/patch-1 
add RCE via Apache logs in log poisoning
 2021-05-10 13:13:34 +02:00
Swissky a723a34449 PS Transcript + PPLdump.exe 2021-05-06 18:26:00 +02:00
SwisskyandGitHub 28a48bd696 Merge pull request #361 from sokaRepo/master 
Add AWS DynamoDB enumeration
 2021-04-30 22:21:28 +02:00
SwisskyandGitHub 1592756f9c Merge pull request #348 from pswalia2u/patch-1 
Update Reverse Shell Cheatsheet.md
 2021-04-26 10:05:59 +02:00
SwisskyandGitHub 9753f369e3 Merge pull request #358 from gregxsunday/master 
improved XXE SVG payloads to be valid XMLs
 2021-04-24 15:40:01 +02:00
Swissky 08b59f2856 AD update CME+DCOM 2021-04-21 22:27:07 +02:00
SwisskyandGitHub 22340c8fc2 Merge pull request #356 from 0dayCTF/patch-1 
Update Reverse Shell Cheatsheet.md
 2021-04-18 18:34:49 +02:00
SwisskyandGitHub ba2c02cc3e Merge pull request #355 from clem9669/patch-6 
Update Linux - Privilege Escalation.md
 2021-04-15 12:46:15 +02:00
SwisskyandGitHub 2b43fa8bfc Merge pull request #353 from micahvandeusen/master 
Added method to read gMSA
 2021-04-10 18:04:28 +02:00
SwisskyandGitHub 90eefc3b2e Merge pull request #351 from ricxpl/patch-1 
Improve Ruby reverse shell
 2021-04-02 22:39:36 +02:00
SwisskyandGitHub d8d26d8fb3 Merge pull request #350 from secnigma/patch-2 
Added Netcat BusyBox
 2021-04-01 14:31:12 +02:00
SwisskyandGitHub 4f89c0a6d2 Merge pull request #349 from SecGus/master 
Add .ashx shell
 2021-03-30 15:31:53 +02:00
Swissky 0443babe35 Relay + MSSQL Read File 2021-03-25 18:25:02 +01:00
Swissky f6b9d63bf8 DCOM exploitation and MSSQL CLR 2021-03-24 22:26:23 +01:00
Swissky bd2166027e GMSA Password + Dart Reverse Shell 2021-03-24 12:44:35 +01:00
SwisskyandGitHub af9f103655 Merge pull request #346 from linoskoczek/master 
Fix links in XSS Injection Summary
 2021-03-18 21:18:28 +01:00
SwisskyandGitHub 5a3427cf9b Merge pull request #345 from Tametomo/patch-1 
Added additional CSV injection cases patterned after in the wild samples
 2021-03-17 09:36:25 +01:00
SwisskyandGitHub 22a1662f60 Merge pull request #341 from cosmin-bianu/master 
Fix Java payload (issue #337)
 2021-03-12 12:36:19 +01:00
SwisskyandGitHub d61f683dc6 Merge pull request #339 from c14dd49h/patch-2 
Update Active Directory Attack.md
 2021-02-26 16:37:41 +01:00
Swissky 8d31b7240b Office Attacks 2021-02-21 20:17:57 +01:00
SwisskyandGitHub e128964dd9 Merge pull request #338 from mpgn/patch-1 
Add mimikatz command to protect a process after removing the protection
 2021-02-17 12:32:23 +01:00