gitea-mirror/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2026-07-30 23:50:38 -07:00
Code Issues Packages Projects Releases Wiki Activity
1,705 Commits 2 Branches 7 Tags
5f8b3f8a142d6620c40059fe345c396c31d6347e
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
SwisskyandGitHub 7ef9babc9f Merge pull request #627 from noraj/patch-1 
add "GraphQL for Pentesters" ref
 2023-02-26 14:14:56 +01:00
SwisskyandGitHub ecc241d17e Merge pull request #626 from mschader/patch-10 
Web Sockets: Update README.md
 2023-02-24 18:08:28 +01:00
Swissky c9d0878817 Kerberos Tickets Dump, Convert, Replay 2023-02-21 23:21:22 +01:00
Swissky 2a65b59c01 RODC + PAM Trusts 2023-02-20 18:44:44 +01:00
Swissky a38701a7e2 MOTD + SpEL injection 2023-02-20 17:21:43 +01:00
SwisskyandGitHub d3ccbb5370 Merge pull request #610 from somebodyoncetoldme207/patch-1 
Typo corrections in PostgreSQL Injection.md
 2023-02-18 22:23:52 +01:00
Swissky cedf4aa9f6 Office Default Passwords + SMBExec 2023-02-17 12:01:52 +01:00
Swissky 8442b304c9 SMBExec + Refresh & Access Token Azure 2023-02-15 17:03:49 +01:00
Swissky 411f2455a9 Merge branch 'master' of https://github.com/swisskyrepo/PayloadsAllTheThings 2023-02-15 12:34:26 +01:00
Swissky ae46ac0338 WMIExec + SharpSCCM 2023-02-15 12:33:20 +01:00
SwisskyandGitHub 73996ea52a Merge pull request #624 from Techbrunch/patch-13 
Update sponsor link
 2023-02-14 15:15:04 +01:00
Swissky 36e135776f AD Groups + PowerShell Defenses 2023-02-14 15:13:41 +01:00
Swissky f1a85f22b9 Windows Defenses 2023-02-12 18:17:09 +01:00
Swissky 5cd5de6803 Workflow cleanup 2023-02-11 20:32:36 +01:00
Swissky 9a511046ae GPO update timing 2023-02-11 20:29:32 +01:00
Swissky c08949fdc2 Github Pages Trigger 2023-02-11 20:22:28 +01:00
Swissky 2089c5efb1 Github Pages 2023-02-11 20:11:33 +01:00
Swissky 14cc88371d WSL + RDP Passwords + MSPaint Escape 2023-02-11 17:49:55 +01:00
Swissky ccae5a6e09 Credentials Rework 2023-02-11 12:07:25 +01:00
SwisskyandGitHub 8c88590d7c Merge pull request #621 from SSKale1/master 
Add AWSGoat and Azure Training, AzureGoat
 2023-02-01 09:54:34 +01:00
SwisskyandGitHub 4451d4919a Merge pull request #620 from noraj/patch-1 
SSTI: add some jinja2 examples
 2023-01-28 16:31:51 +01:00
SwisskyandGitHub d0067e13d5 Merge pull request #619 from CravateRouge/patch-2 
Add PrintNightmare exploit using WebDAV
 2023-01-24 09:53:54 +01:00
SwisskyandGitHub b75913ca8f Merge pull request #616 from noraj/patch-1 
add XXE in Java
 2023-01-19 17:14:19 +01:00
SwisskyandGitHub d23794be0f Merge pull request #617 from CravateRouge/patch-1 
Add SSL MITM using OpenSSL
 2023-01-19 17:13:44 +01:00
SwisskyandGitHub 99ff1f94b3 Merge pull request #615 from noraj/patch-url 
[chore] fix rawsec url
 2023-01-12 09:57:27 +01:00
SwisskyandGitHub 1a9bfdd86f Merge pull request #614 from Darktortue/patch-zerologon 
Added zerologon authentication relay technique
 2023-01-10 21:11:43 +01:00
SwisskyandGitHub b27ba26af9 Merge pull request #609 from m3dsec/patch-1 
Update bloodyAD.py when enabling DONT_REQ_PREAUTH for ASREPRoast attack.
 2023-01-10 11:06:07 +01:00
SwisskyandGitHub 8e0ce56e5d Merge pull request #613 from JeremyLARDENOIS/fix-docker-metasploit-install 
fix: remove docker metasploit installation
 2023-01-10 11:05:09 +01:00
Swissky d4742a9688 SOCKS Compatibility Table + CORS 2023-01-05 01:50:11 +01:00
SwisskyandGitHub 095024f960 Merge pull request #611 from DotDotSlashRepo/master 
Updated Account takeover due to unicode normalization issue
 2023-01-04 17:21:55 +01:00
Swissky 5190829ab4 RustHound Examples 2022-12-30 11:01:31 +01:00
SwisskyandGitHub ec7c363aba Merge pull request #592 from oddrabbit/patch-1 
Added in Spring Framework SSTI Detection & Exploitation
 2022-12-28 10:55:13 +01:00
SwisskyandGitHub 996c83bb4b Update README.md 2022-12-28 10:54:48 +01:00
SwisskyandGitHub 4888188ce4 Merge pull request #608 from Aur0ra-m/master 
Update README.md
 2022-12-27 18:26:52 +01:00
SwisskyandGitHub f318f8bcc0 Update README.md 2022-12-27 18:26:13 +01:00
Swissky 514ac98dac SSRF + XSS details + XXE BOM 2022-12-13 22:29:20 +01:00
SwisskyandGitHub a1c5926f31 Merge pull request #606 from hackprogrammatic/patch-1 
Update Cloud - AWS Pentest.md
 2022-12-08 08:46:05 +01:00
SwisskyandGitHub 6709d543f4 Merge pull request #605 from Techbrunch/patch-12 
Add  GraphQL Threat Matrix
 2022-12-06 16:49:42 +01:00
Swissky d67ec2469c SCCM Shares 2022-12-04 11:38:19 +01:00
SwisskyandGitHub 183876f660 Merge pull request #603 from romisfrag/patch-1 
Update PHP.md
 2022-11-26 17:01:40 +01:00
Swissky cbb2137f3b ESC11 - Relay NTLM to ICPR 2022-11-21 10:48:27 +01:00
Swissky 2ed3c03e78 Kubernetes Pentest 2022-11-18 13:00:11 +01:00
Swissky 5966c3a21b NTDS Reversible Encryption 2022-11-11 14:52:56 +01:00
SwisskyandGitHub 4ca065f8ed Merge pull request #602 from Kawsay/master 
Add RubyOnRails HTTP Parameter Pollution
 2022-11-08 19:33:10 +01:00
SwisskyandGitHub b7f6f72d09 Merge pull request #600 from CravateRouge/patch-6 
Add application endpoint enumeration
 2022-11-07 12:28:04 +01:00
Swissky e5ea12a3ca Active Directory Federation Services 2022-11-07 10:10:33 +01:00
Swissky 3e9ef2efbe ADFS Golden SAML 2022-11-07 10:10:21 +01:00
SwisskyandGitHub 0212830fb4 Merge pull request #599 from CravateRouge/patch-5 
Fix broken link not compatible with MkDocs
 2022-11-06 12:34:56 +01:00
SwisskyandGitHub eea32c0d15 Merge pull request #597 from xplo1t-sec/master 
command injection with backslash newline
 2022-11-06 12:28:38 +01:00
SwisskyandGitHub 47254d0244 Update README.md 2022-11-06 12:28:26 +01:00
SwisskyandGitHub 2d67b675aa Merge pull request #598 from CravateRouge/patch-4 
findstr ignore error and print results in file
 2022-11-06 12:19:22 +01:00
SwisskyandGitHub c17ae602fc Merge pull request #596 from CravateRouge/patch-2 
Add AzureHound examples
 2022-11-04 16:42:49 +01:00
SwisskyandGitHub 030ba1f196 Merge pull request #595 from CravateRouge/patch-3 
Redirect duplicate
 2022-11-04 15:15:55 +01:00
SwisskyandGitHub 2d3f02a795 Merge pull request #594 from CravateRouge/patch-2 
Add Snaffpoint usage example
 2022-11-04 14:38:17 +01:00
SwisskyandGitHub d46b436d6c PHP Deserialization - Fix Broken Link 2022-11-04 09:44:37 +01:00
SwisskyandGitHub e556e9ad40 Merge pull request #589 from jaxBCD/patch-2 
Update Subdomain enumeration
 2022-11-03 21:34:48 +01:00
SwisskyandGitHub 3dd7f46717 Update Subdomains Enumeration.md 2022-11-03 21:34:34 +01:00
Swissky 2227472e1c .NET formatters and POP gadgets 2022-11-03 21:31:50 +01:00
SwisskyandGitHub 0af790ad5b Merge pull request #593 from llamasoft/patch-2 
Add git persistence techniques
 2022-10-30 10:14:49 +01:00
SwisskyandGitHub 0381fd34f9 Merge pull request #591 from fabianchoxD/review-and-update-documentation 
Review and update documentation
 2022-10-27 10:18:49 +02:00
SwisskyandGitHub a7d774cd15 Merge pull request #590 from llamasoft/patch-1 
Add timestomping to Linux evasion techniques
 2022-10-26 22:51:06 +02:00
SwisskyandGitHub 5754ed82ee Merge pull request #588 from fabianchoxD/update-old-links 
Update old links
 2022-10-25 09:32:14 +02:00
Swissky fe41254fde XXS Public Example + PHP Filter RCE 2022-10-24 12:05:39 +02:00
SwisskyandGitHub 35ff178624 Merge pull request #587 from abhishekchak52/typo-grammar-fix 
Typo and grammar fix
 2022-10-23 11:20:30 +02:00
SwisskyandGitHub 1e01f83c74 Merge pull request #586 from nzdjb/nzdjb-patch-3 
feat: Explain ec2:AssociateIamInstanceProfile
 2022-10-23 11:19:35 +02:00
SwisskyandGitHub a43897a473 Merge pull request #585 from 7RU7H/patch-1 
Update Windows -Privilege Escalation - Typo Fix
 2022-10-22 16:04:23 +02:00
SwisskyandGitHub 9f37576173 Merge pull request #583 from nzdjb/nzdjb-patch-2 
feat: Backgrounding long running commands
 2022-10-22 10:29:30 +02:00
SwisskyandGitHub a33e4006f8 Merge pull request #582 from nzdjb/nzdjb-patch-1 
feat: Command injection with newlines
 2022-10-22 10:20:42 +02:00
Swissky 8df30de938 Remove deadlink 2022-10-21 12:16:32 +02:00
SwisskyandGitHub 1b037a9c64 Merge pull request #581 from Oggy107/master 
Fix: Broken Link
 2022-10-18 19:22:55 +02:00
Swissky 2fc3eed8a5 Insecure Randomness 2022-10-17 11:07:33 +02:00
Swissky 8df0f565f3 Sapphire and Diamond Tickets 2022-10-16 20:46:05 +02:00
Swissky b7043cfedd Bug Hunting Methodology Update 2022-10-16 00:27:47 +02:00
SwisskyandGitHub 3a815e6201 Merge pull request #578 from ShahneRodgers/http-request-smuggling 
Adds more details to the HTTP request smuggling topic
 2022-10-15 12:31:05 +02:00
SwisskyandGitHub 7bbbbd1d83 Merge pull request #577 from llamasoft/linux-evasion 
Add Linux evasion to its own article
 2022-10-15 12:28:05 +02:00
SwisskyandGitHub a794c57994 Merge pull request #575 from CoryCline/patch-1 
Added document.cookie blacklist bypass
 2022-10-14 09:57:41 +02:00
SwisskyandGitHub 6479c3a400 Merge pull request #574 from sebch-/patch-5 
Update Active Directory Attack.md
 2022-10-12 21:43:44 +02:00
SwisskyandGitHub 34128314d3 Merge pull request #573 from sebch-/patch-4 
Update README.md
 2022-10-12 21:43:16 +02:00
SwisskyandGitHub 31363e016b Merge pull request #572 from sebch-/patch-3 
Update Active Directory Attack.md
 2022-10-12 21:42:34 +02:00
SwisskyandGitHub aca668fcdd Merge pull request #571 from sebch-/patch-2 
Update Hash Cracking.md
 2022-10-12 19:30:22 +02:00
Swissky f7a74feaf7 Azure Tools Update 2022-10-12 18:03:49 +02:00
Swissky 6dd5c18b45 Normalize Titles 2022-10-12 12:13:55 +02:00
Swissky d88e32aaae .NET Deserialization 2022-10-11 21:52:46 +02:00
SwisskyandGitHub 3392980207 Merge pull request #570 from gdraperi/patch-1 
Update README.md
 2022-10-11 18:49:41 +02:00
SwisskyandGitHub 4a1ba26326 Update README.md 2022-10-11 18:49:17 +02:00
SwisskyandGitHub b08600d56d Merge pull request #526 from nerrorsec/patch-4 
Boolean - Extract info (order by)
 2022-10-11 11:26:40 +02:00
SwisskyandGitHub 3f3736471e Merge branch 'master' into patch-4 2022-10-11 11:26:28 +02:00
SwisskyandGitHub 77dc5e3ff1 Merge pull request #566 from pop3ret/master 
Merge AWSome Pentesting into Cloud - AWS Pentest
 2022-10-11 11:24:21 +02:00
SwisskyandGitHub ecca4ec5e4 Merge pull request #569 from fabianchoxD/update-.README-file 
Update .readme file
 2022-10-10 15:06:19 +02:00
SwisskyandGitHub 522b55eec5 Update Cloud - AWS Pentest.md 2022-10-07 10:50:59 +02:00
SwisskyandGitHub c06dfbec95 Merge pull request #560 from clem9669/master 
Update XSS_Polyglots.txt
 2022-10-07 00:14:29 +02:00
SwisskyandGitHub 347381d6dc Merge pull request #565 from gdraperi/master 
Argument Injection technique
 2022-10-06 17:55:58 +02:00
SwisskyandGitHub ba9eb30940 Fix links 2022-10-06 17:55:16 +02:00
SwisskyandGitHub 655cec1f1a Merge pull request #562 from nayeems3c/master 
Added 2FA bypass via Force Browsing on Account Takeover branch
 2022-10-05 18:46:52 +02:00
SwisskyandGitHub 2c10b28976 Merge pull request #561 from gdraperi/patch-2 
Update YAML.md
 2022-10-05 14:55:34 +02:00
SwisskyandGitHub a766679356 Merge pull request #559 from gdraperi/patch-1 
Update README.md
 2022-10-05 10:20:58 +02:00
SwisskyandGitHub 643374e1d7 Add reference 2022-10-05 10:20:05 +02:00
SwisskyandGitHub 44d761eb2c Merge pull request #558 from CyberVarun/master 
Added portswigger labs and reference in Command injection
 2022-10-05 09:58:40 +02:00
SwisskyandGitHub c420ed6bf7 Merge pull request #553 from ndsvw/Linkfix 
Fixed invalid hyperlink
 2022-10-04 11:08:59 +02:00
SwisskyandGitHub a1c783d8d2 Merge pull request #555 from mschader/patch-8 
CVE Exploit: Add trickest CVE repo
 2022-10-04 09:42:05 +02:00