gitea-mirror/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2026-07-28 22:51:23 -07:00
Code Issues Packages Projects Releases Wiki Activity
950 Commits 2 Branches 7 Tags
7733d4495e2dcc4180225197ef143c5b3fde2d3d
Commit Graph
67 Commits
Author SHA1 Message Date
marcan2020andGitHub 3cf44386da Remove unnecessary condition to extract columns 
Since we retrieve only the rows with a specific table name `name ='table_name', the table name won't start with `sqlite_` .
Thus, we can remove the unnecessary condition.
 2020-11-17 19:59:11 -05:00
SwisskyandGitHub f9e2512080 Merge pull request #287 from beomsu317/master 
Update SQL-Injection
 2020-11-03 10:38:02 +01:00
Swissky 1137bfca8d Remote Desktop Services Shadowing 2020-10-30 21:10:00 +01:00
Siddharth ReddyandGitHub 2bdd23dc51 Update MySQL Injection.md 2020-10-29 17:03:22 +05:30
Vincent GillesandVincent Gilles 0b90094002 Fix(Docs): Correcting typos on the repo 2020-10-17 22:52:35 +02:00
Siddharth ReddyandGitHub fdc44ce84e Update Cassandra Injection.md 
Broken link [Injection In Apache Cassandra – Part I - Rodolfo - EternalNoobs](https://eternalnoobs.com/injection-in-apache-cassandra-part-i/)
 2020-10-09 18:10:12 +05:30
SwisskyandGitHub a8319b94ff Merge pull request #259 from SiddTim/patch-1 
Update Cassandra Injection.md
 2020-10-09 10:31:58 +02:00
Siddharth ReddyandGitHub f284045ba6 Update MSSQL Injection.md 
Broken link [Sqlinjectionwiki - MSSQL](http://www.sqlinjectionwiki.com/categories/1/mssql-sql-injection-cheat-sheet/) .
 2020-10-09 12:53:21 +05:30
Siddharth ReddyandGitHub f66c53ee25 Update Cassandra Injection.md 
Broken link [https://hack2learn.pw/cassandra/login.php]
 2020-10-09 12:45:28 +05:30
Swissky a478356f43 MySQL Fast Exploitation using json_arrayagg() 2020-09-23 17:19:34 +02:00
Swissky dd40ddd233 XSS summary subentries + GraphTCP 2020-07-12 14:44:33 +02:00
hloverflow 2e7b9db94b Corrected Reference to 2009 paper 2020-07-12 13:21:18 +08:00
HLOverflowandGitHub 37f66cc523 add to table of content 2020-07-12 13:17:43 +08:00
hloverflow baadc6d3e9 contribute PostgreSQL bypass quotes technique 2020-07-12 13:14:26 +08:00
SwisskyandGitHub d3f1bfa1ae Merge pull request #209 from c14dd49h/patch-1 
Update README.md
 2020-07-11 10:50:04 +02:00
Swissky 5b1a79cb56 Docker device file breakout 2020-07-04 19:00:56 +02:00
SwisskyandGitHub f86837ca8c Fix #211 2020-06-24 12:10:41 +02:00
c14dd49handGitHub 5b47fc8ead Update README.md 2020-05-27 18:53:37 +02:00
Swissky 4ca5e71c2f Bind shell cheatsheet (Fix #194) 2020-05-24 14:09:46 +02:00
beomsu317andGitHub 4c3cb6f530 Update SQL-Injection 2020-05-14 15:29:52 +09:00
Swissky 7f1c150edd Mimikatz Summary 2020-05-10 16:17:10 +02:00
DoI 5aad5795d2 minor spelling fix 2020-05-05 15:15:50 +12:00
DoI 53db029d4e Added additional info to the Postgres SQLi page 2020-05-05 15:10:44 +12:00
Swissky da5dc1299e MSSQL Trusted Link 2020-05-01 12:06:18 +02:00
Swissky 04899355ad Magic Hashes + SQL fuzz 2020-04-26 21:43:42 +02:00
Swissky eaac0e748e Fix issue #185 2020-04-21 11:31:18 +02:00
Swissky c8c4a6e8a9 Fix issue #185 2020-04-21 11:26:49 +02:00
fuxsocy.pyandGitHub 009a2f9276 Update SQLite Injection.md 
Added new link location for the pdf.
 2020-04-03 23:15:05 +00:00
chivato 29fac06023 From https://twitter.com/secgus 
MySQL Blind Queries and Data Exfiltration via the ORDER BY clause.
 2020-03-01 21:15:19 +00:00
SwisskyandGitHub 55d1731897 Merge pull request #116 from nizam0906/master 
Added More Updates in SQL Injection
 2019-10-29 17:11:28 +01:00
nizam0906andGitHub d41e0d33bd Added Summary in Hibernate Query Language Injection 2019-10-29 19:47:42 +05:30
nizam0906andGitHub 4d94e553b9 Added Summary in Cassandra Injection 2019-10-29 19:42:49 +05:30
nizam0906andGitHub fe8c7be2fb Fixed Broken Links in SQL injection README.md 2019-10-29 19:33:09 +05:30
nizam0906andGitHub a69c2acb7d Added Summary in SQLite Injection 2019-10-29 19:22:49 +05:30
nizam0906andGitHub 4b1f7e629d Fixed Broken Links in PostgreSQL Injection 2019-10-29 19:06:41 +05:30
nizam0906andGitHub 20d6599772 Added Summary 2019-10-29 18:57:33 +05:30
nizam0906andGitHub ca59b1d217 Fixed Broken Links in MSSQL Injection 
Fixed Broken Links in MSSQL Injection
 2019-10-29 18:44:28 +05:30
nizam0906andGitHub a33dce0d60 Fixed Broken Links 2019-10-29 18:25:00 +05:30
nizam0906andGitHub 7d6fab92fa Update Detect columns number 
Using SELECT * FROM SOME_EXISTING_TABLE Error Based
 2019-10-29 18:11:58 +05:30
nizam0906andGitHub 614e8a97b9 Updated Detect columns number 
Detect columns number using LIMIT INTO Error Based
 2019-10-29 16:48:11 +05:30
nizam0906andGitHub f81f9440b8 Added More Ways to Detect columns number 
using order by or group by
using order by or group by error based
using UNION SELECT Error Based
 2019-10-29 16:32:22 +05:30
SwisskyandGitHub 377aad4061 Merge pull request #115 from nizam0906/master 
Added List Database Administrator Accounts
 2019-10-29 08:36:01 +01:00
nizam0906andGitHub bb2c247160 Added List Database Administrator Accounts 
SELECT datname FROM pg_database
 2019-10-29 10:32:39 +05:30
SwisskyandGitHub 534d46d0e4 Merge pull request #113 from Q5Ca/patch-1 
Add bypass WAF no equal using BETWEEN
 2019-10-28 18:21:26 +01:00
duongdptandGitHub 135af74acd Update README.md 
Add bypass waf using BETWEEN
 2019-10-28 22:26:28 +07:00
nizam0906andGitHub 3dcd4425a8 Added more PostgreSQL Injection Queries 
* PostgreSQL version
* PostgreSQL Current User
* PostgreSQL List Users
* PostgreSQL List Password Hashes
* PostgreSQL List Privileges
* PostgreSQL database name
* PostgreSQL List databases
* PostgreSQL List tables
* PostgreSQL List columns
* PostgreSQL Stacked query
 2019-10-28 16:26:49 +05:30
nizam0906andGitHub f35ace93cf Update PostgreSQL Injection.md 
Updated PostgreSQL Error Based injections
 2019-10-26 18:07:14 +05:30
nizam0906andGitHub 5b59da70f7 Update MySQL Injection.md 
Added 6 MYSQL DIOS
* Zen
* Zen WAF
* ~tr0jAn WAF
* ~tr0jAn Benchmark
* N1Z4M
* sharik
 2019-10-25 18:11:11 +05:30
Swissky 5455c30ec7 Juicy Potato + XXE update 2019-09-08 19:44:51 +02:00
Swissky 3ca07aeb7a Docker Privesc - Unix socket 2019-08-30 17:25:07 +02:00