 Swissky
|
86cc53244d
|
LOL Drivers
|
2023-04-07 09:22:07 +02:00 |
|
|
Swissky
|
30d17b4924
|
Fix markdown typo ESC1-9
|
2023-04-05 12:47:47 +02:00 |
|
|
Swissky
|
0a70636d28
|
ETW Providers
|
2023-04-03 10:48:53 +02:00 |
|
|
Swissky
|
d040c0e677
|
Web Cache Deception Methodology
|
2023-03-28 21:53:53 +02:00 |
|
|
Swissky
|
fddd094ee1
|
LFI iconv and dechunk + ETW + NTDS Dump Rework
|
2023-03-27 22:38:25 +02:00 |
|
|
Swissky
|
dd0c23f9a2
|
ImageMagick Typo
|
2023-03-19 22:46:56 +01:00 |
|
|
Swissky
|
723b3213b2
|
Windows Information Protection
|
2023-03-18 19:55:43 +01:00 |
|
|
Swissky
|
579207aa8f
|
JWT jku and jwks - manual exploitation
|
2023-03-12 18:02:29 +01:00 |
|
|
Swissky
|
d5729888c3
|
S4U Extension
|
2023-03-11 17:53:16 +01:00 |
|
|
Swissky
|
b88457367b
|
Active Directory Integrated DNS
|
2023-03-11 11:52:52 +01:00 |
|
|
Swissky
|
5e8737485b
|
Fix responsive - rollback - FF was glitching
|
2023-03-11 00:11:27 +01:00 |
|
|
Swissky
|
648f4ad2ca
|
Fix responsive icons
|
2023-03-10 23:45:27 +01:00 |
|
|
Swissky
|
084efe8a6b
|
Fix responsive display on PATT Web
|
2023-03-10 23:20:39 +01:00 |
|
|
Swissky
|
f379b60ef1
|
Web Theme + Credential Guard + PPL
|
2023-03-10 22:14:22 +01:00 |
|
|
Swissky
|
e43f1527c0
|
JWT rework 0.2: jwks + kid + cve
|
2023-03-07 11:39:39 +01:00 |
|
|
Swissky
|
2a3d175620
|
GraphQL and JWT rework v0.1
|
2023-03-05 12:05:43 +01:00 |
|
|
SwisskyandGitHub
|
776b2bd934
|
Merge pull request #629 from maxence-Doyensec/file-upload-uwsgi
add uwsgi configuration file to Upload Insecure File
|
2023-03-01 15:13:07 +01:00 |
|
|
SwisskyandGitHub
|
7ef9babc9f
|
Merge pull request #627 from noraj/patch-1
add "GraphQL for Pentesters" ref
|
2023-02-26 14:14:56 +01:00 |
|
|
SwisskyandGitHub
|
ecc241d17e
|
Merge pull request #626 from mschader/patch-10
Web Sockets: Update README.md
|
2023-02-24 18:08:28 +01:00 |
|
|
Swissky
|
c9d0878817
|
Kerberos Tickets Dump, Convert, Replay
|
2023-02-21 23:21:22 +01:00 |
|
|
Swissky
|
2a65b59c01
|
RODC + PAM Trusts
|
2023-02-20 18:44:44 +01:00 |
|
|
Swissky
|
a38701a7e2
|
MOTD + SpEL injection
|
2023-02-20 17:21:43 +01:00 |
|
|
SwisskyandGitHub
|
d3ccbb5370
|
Merge pull request #610 from somebodyoncetoldme207/patch-1
Typo corrections in PostgreSQL Injection.md
|
2023-02-18 22:23:52 +01:00 |
|
|
Swissky
|
cedf4aa9f6
|
Office Default Passwords + SMBExec
|
2023-02-17 12:01:52 +01:00 |
|
|
Swissky
|
8442b304c9
|
SMBExec + Refresh & Access Token Azure
|
2023-02-15 17:03:49 +01:00 |
|
|
Swissky
|
411f2455a9
|
Merge branch 'master' of https://github.com/swisskyrepo/PayloadsAllTheThings
|
2023-02-15 12:34:26 +01:00 |
|
|
Swissky
|
ae46ac0338
|
WMIExec + SharpSCCM
|
2023-02-15 12:33:20 +01:00 |
|
|
SwisskyandGitHub
|
73996ea52a
|
Merge pull request #624 from Techbrunch/patch-13
Update sponsor link
|
2023-02-14 15:15:04 +01:00 |
|
|
Swissky
|
36e135776f
|
AD Groups + PowerShell Defenses
|
2023-02-14 15:13:41 +01:00 |
|
|
Swissky
|
f1a85f22b9
|
Windows Defenses
|
2023-02-12 18:17:09 +01:00 |
|
|
Swissky
|
5cd5de6803
|
Workflow cleanup
|
2023-02-11 20:32:36 +01:00 |
|
|
Swissky
|
9a511046ae
|
GPO update timing
|
2023-02-11 20:29:32 +01:00 |
|
|
Swissky
|
c08949fdc2
|
Github Pages Trigger
|
2023-02-11 20:22:28 +01:00 |
|
|
Swissky
|
2089c5efb1
|
Github Pages
|
2023-02-11 20:11:33 +01:00 |
|
|
Swissky
|
14cc88371d
|
WSL + RDP Passwords + MSPaint Escape
|
2023-02-11 17:49:55 +01:00 |
|
|
Swissky
|
ccae5a6e09
|
Credentials Rework
|
2023-02-11 12:07:25 +01:00 |
|
|
SwisskyandGitHub
|
8c88590d7c
|
Merge pull request #621 from SSKale1/master
Add AWSGoat and Azure Training, AzureGoat
|
2023-02-01 09:54:34 +01:00 |
|
|
SwisskyandGitHub
|
4451d4919a
|
Merge pull request #620 from noraj/patch-1
SSTI: add some jinja2 examples
|
2023-01-28 16:31:51 +01:00 |
|
|
SwisskyandGitHub
|
d0067e13d5
|
Merge pull request #619 from CravateRouge/patch-2
Add PrintNightmare exploit using WebDAV
|
2023-01-24 09:53:54 +01:00 |
|
|
SwisskyandGitHub
|
b75913ca8f
|
Merge pull request #616 from noraj/patch-1
add XXE in Java
|
2023-01-19 17:14:19 +01:00 |
|
|
SwisskyandGitHub
|
d23794be0f
|
Merge pull request #617 from CravateRouge/patch-1
Add SSL MITM using OpenSSL
|
2023-01-19 17:13:44 +01:00 |
|
|
SwisskyandGitHub
|
99ff1f94b3
|
Merge pull request #615 from noraj/patch-url
[chore] fix rawsec url
|
2023-01-12 09:57:27 +01:00 |
|
|
SwisskyandGitHub
|
1a9bfdd86f
|
Merge pull request #614 from Darktortue/patch-zerologon
Added zerologon authentication relay technique
|
2023-01-10 21:11:43 +01:00 |
|
|
SwisskyandGitHub
|
b27ba26af9
|
Merge pull request #609 from m3dsec/patch-1
Update bloodyAD.py when enabling DONT_REQ_PREAUTH for ASREPRoast attack.
|
2023-01-10 11:06:07 +01:00 |
|
|
SwisskyandGitHub
|
8e0ce56e5d
|
Merge pull request #613 from JeremyLARDENOIS/fix-docker-metasploit-install
fix: remove docker metasploit installation
|
2023-01-10 11:05:09 +01:00 |
|
|
Swissky
|
d4742a9688
|
SOCKS Compatibility Table + CORS
|
2023-01-05 01:50:11 +01:00 |
|
|
SwisskyandGitHub
|
095024f960
|
Merge pull request #611 from DotDotSlashRepo/master
Updated Account takeover due to unicode normalization issue
|
2023-01-04 17:21:55 +01:00 |
|
|
Swissky
|
5190829ab4
|
RustHound Examples
|
2022-12-30 11:01:31 +01:00 |
|
|
SwisskyandGitHub
|
ec7c363aba
|
Merge pull request #592 from oddrabbit/patch-1
Added in Spring Framework SSTI Detection & Exploitation
|
2022-12-28 10:55:13 +01:00 |
|
|
SwisskyandGitHub
|
996c83bb4b
|
Update README.md
|
2022-12-28 10:54:48 +01:00 |
|
|
SwisskyandGitHub
|
4888188ce4
|
Merge pull request #608 from Aur0ra-m/master
Update README.md
|
2022-12-27 18:26:52 +01:00 |
|
|
SwisskyandGitHub
|
f318f8bcc0
|
Update README.md
|
2022-12-27 18:26:13 +01:00 |
|
|
Swissky
|
514ac98dac
|
SSRF + XSS details + XXE BOM
|
2022-12-13 22:29:20 +01:00 |
|
|
SwisskyandGitHub
|
a1c5926f31
|
Merge pull request #606 from hackprogrammatic/patch-1
Update Cloud - AWS Pentest.md
|
2022-12-08 08:46:05 +01:00 |
|
|
SwisskyandGitHub
|
6709d543f4
|
Merge pull request #605 from Techbrunch/patch-12
Add GraphQL Threat Matrix
|
2022-12-06 16:49:42 +01:00 |
|
|
Swissky
|
d67ec2469c
|
SCCM Shares
|
2022-12-04 11:38:19 +01:00 |
|
|
SwisskyandGitHub
|
183876f660
|
Merge pull request #603 from romisfrag/patch-1
Update PHP.md
|
2022-11-26 17:01:40 +01:00 |
|
|
Swissky
|
cbb2137f3b
|
ESC11 - Relay NTLM to ICPR
|
2022-11-21 10:48:27 +01:00 |
|
|
Swissky
|
2ed3c03e78
|
Kubernetes Pentest
|
2022-11-18 13:00:11 +01:00 |
|
|
Swissky
|
5966c3a21b
|
NTDS Reversible Encryption
|
2022-11-11 14:52:56 +01:00 |
|
|
SwisskyandGitHub
|
4ca065f8ed
|
Merge pull request #602 from Kawsay/master
Add RubyOnRails HTTP Parameter Pollution
|
2022-11-08 19:33:10 +01:00 |
|
|
SwisskyandGitHub
|
b7f6f72d09
|
Merge pull request #600 from CravateRouge/patch-6
Add application endpoint enumeration
|
2022-11-07 12:28:04 +01:00 |
|
|
Swissky
|
e5ea12a3ca
|
Active Directory Federation Services
|
2022-11-07 10:10:33 +01:00 |
|
|
Swissky
|
3e9ef2efbe
|
ADFS Golden SAML
|
2022-11-07 10:10:21 +01:00 |
|
|
SwisskyandGitHub
|
0212830fb4
|
Merge pull request #599 from CravateRouge/patch-5
Fix broken link not compatible with MkDocs
|
2022-11-06 12:34:56 +01:00 |
|
|
SwisskyandGitHub
|
eea32c0d15
|
Merge pull request #597 from xplo1t-sec/master
command injection with backslash newline
|
2022-11-06 12:28:38 +01:00 |
|
|
SwisskyandGitHub
|
47254d0244
|
Update README.md
|
2022-11-06 12:28:26 +01:00 |
|
|
SwisskyandGitHub
|
2d67b675aa
|
Merge pull request #598 from CravateRouge/patch-4
findstr ignore error and print results in file
|
2022-11-06 12:19:22 +01:00 |
|
|
SwisskyandGitHub
|
c17ae602fc
|
Merge pull request #596 from CravateRouge/patch-2
Add AzureHound examples
|
2022-11-04 16:42:49 +01:00 |
|
|
SwisskyandGitHub
|
030ba1f196
|
Merge pull request #595 from CravateRouge/patch-3
Redirect duplicate
|
2022-11-04 15:15:55 +01:00 |
|
|
SwisskyandGitHub
|
2d3f02a795
|
Merge pull request #594 from CravateRouge/patch-2
Add Snaffpoint usage example
|
2022-11-04 14:38:17 +01:00 |
|
|
SwisskyandGitHub
|
d46b436d6c
|
PHP Deserialization - Fix Broken Link
|
2022-11-04 09:44:37 +01:00 |
|
|
SwisskyandGitHub
|
e556e9ad40
|
Merge pull request #589 from jaxBCD/patch-2
Update Subdomain enumeration
|
2022-11-03 21:34:48 +01:00 |
|
|
SwisskyandGitHub
|
3dd7f46717
|
Update Subdomains Enumeration.md
|
2022-11-03 21:34:34 +01:00 |
|
|
Swissky
|
2227472e1c
|
.NET formatters and POP gadgets
|
2022-11-03 21:31:50 +01:00 |
|
|
SwisskyandGitHub
|
0af790ad5b
|
Merge pull request #593 from llamasoft/patch-2
Add git persistence techniques
|
2022-10-30 10:14:49 +01:00 |
|
|
SwisskyandGitHub
|
0381fd34f9
|
Merge pull request #591 from fabianchoxD/review-and-update-documentation
Review and update documentation
|
2022-10-27 10:18:49 +02:00 |
|
|
SwisskyandGitHub
|
a7d774cd15
|
Merge pull request #590 from llamasoft/patch-1
Add timestomping to Linux evasion techniques
|
2022-10-26 22:51:06 +02:00 |
|
|
SwisskyandGitHub
|
5754ed82ee
|
Merge pull request #588 from fabianchoxD/update-old-links
Update old links
|
2022-10-25 09:32:14 +02:00 |
|
|
Swissky
|
fe41254fde
|
XXS Public Example + PHP Filter RCE
|
2022-10-24 12:05:39 +02:00 |
|
|
SwisskyandGitHub
|
35ff178624
|
Merge pull request #587 from abhishekchak52/typo-grammar-fix
Typo and grammar fix
|
2022-10-23 11:20:30 +02:00 |
|
|
SwisskyandGitHub
|
1e01f83c74
|
Merge pull request #586 from nzdjb/nzdjb-patch-3
feat: Explain ec2:AssociateIamInstanceProfile
|
2022-10-23 11:19:35 +02:00 |
|
|
SwisskyandGitHub
|
a43897a473
|
Merge pull request #585 from 7RU7H/patch-1
Update Windows -Privilege Escalation - Typo Fix
|
2022-10-22 16:04:23 +02:00 |
|
|
SwisskyandGitHub
|
9f37576173
|
Merge pull request #583 from nzdjb/nzdjb-patch-2
feat: Backgrounding long running commands
|
2022-10-22 10:29:30 +02:00 |
|
|
SwisskyandGitHub
|
a33e4006f8
|
Merge pull request #582 from nzdjb/nzdjb-patch-1
feat: Command injection with newlines
|
2022-10-22 10:20:42 +02:00 |
|
|
Swissky
|
8df30de938
|
Remove deadlink
|
2022-10-21 12:16:32 +02:00 |
|
|
SwisskyandGitHub
|
1b037a9c64
|
Merge pull request #581 from Oggy107/master
Fix: Broken Link
|
2022-10-18 19:22:55 +02:00 |
|
|
Swissky
|
2fc3eed8a5
|
Insecure Randomness
|
2022-10-17 11:07:33 +02:00 |
|
|
Swissky
|
8df0f565f3
|
Sapphire and Diamond Tickets
|
2022-10-16 20:46:05 +02:00 |
|
|
Swissky
|
b7043cfedd
|
Bug Hunting Methodology Update
|
2022-10-16 00:27:47 +02:00 |
|
|
SwisskyandGitHub
|
3a815e6201
|
Merge pull request #578 from ShahneRodgers/http-request-smuggling
Adds more details to the HTTP request smuggling topic
|
2022-10-15 12:31:05 +02:00 |
|
|
SwisskyandGitHub
|
7bbbbd1d83
|
Merge pull request #577 from llamasoft/linux-evasion
Add Linux evasion to its own article
|
2022-10-15 12:28:05 +02:00 |
|
|
SwisskyandGitHub
|
a794c57994
|
Merge pull request #575 from CoryCline/patch-1
Added document.cookie blacklist bypass
|
2022-10-14 09:57:41 +02:00 |
|
|
SwisskyandGitHub
|
6479c3a400
|
Merge pull request #574 from sebch-/patch-5
Update Active Directory Attack.md
|
2022-10-12 21:43:44 +02:00 |
|
|
SwisskyandGitHub
|
34128314d3
|
Merge pull request #573 from sebch-/patch-4
Update README.md
|
2022-10-12 21:43:16 +02:00 |
|
|
SwisskyandGitHub
|
31363e016b
|
Merge pull request #572 from sebch-/patch-3
Update Active Directory Attack.md
|
2022-10-12 21:42:34 +02:00 |
|
|
SwisskyandGitHub
|
aca668fcdd
|
Merge pull request #571 from sebch-/patch-2
Update Hash Cracking.md
|
2022-10-12 19:30:22 +02:00 |
|
|
Swissky
|
f7a74feaf7
|
Azure Tools Update
|
2022-10-12 18:03:49 +02:00 |
|
|
Swissky
|
6dd5c18b45
|
Normalize Titles
|
2022-10-12 12:13:55 +02:00 |
|
|
Swissky
|
d88e32aaae
|
.NET Deserialization
|
2022-10-11 21:52:46 +02:00 |
|