gitea-mirror/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2026-07-30 23:50:38 -07:00
Code Issues Packages Projects Releases Wiki Activity
1,121 Commits 2 Branches 7 Tags
a09254623017d435f107700407a4bb4768fcdba1
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
SwisskyandGitHub 01f2a02c52 Merge pull request #410 from clem9669/patch-7 
Update SSRF
 2021-08-06 19:29:57 +02:00
SwisskyandGitHub ab9e8a2ba2 Merge pull request #409 from Xib3rR4dAr/patch-1 
Update README.md
 2021-08-04 09:39:43 +02:00
SwisskyandGitHub b3f5637103 Merge pull request #397 from c14dd49h/master 
Update README.md
 2021-07-31 11:29:08 +02:00
SwisskyandGitHub 1fd9260d1e Update README.md 2021-07-31 11:28:23 +02:00
SwisskyandGitHub 7ab7664469 Merge pull request #399 from Bort-Millipede/master 
New/Updated Python Linux Reverse Shells
 2021-07-31 11:26:36 +02:00
SwisskyandGitHub 38a209b14d Merge pull request #406 from pang9979/master 
Update Table
 2021-07-31 11:25:45 +02:00
SwisskyandGitHub ce14006be0 Merge pull request #404 from p0dalirius/master 
Added context-free jinja2 payloads
 2021-07-27 19:51:08 +02:00
SwisskyandGitHub 18cd445a5b Merge pull request #400 from PinkDev1/patch-1 
Added gentilkiwi twitter
 2021-07-27 10:37:15 +02:00
Swissky d9d4a54d03 RemotePotato0 + HiveNightmare 2021-07-26 21:25:56 +02:00
SwisskyandGitHub 2d273fd40e Merge pull request #398 from bash-c/patch-1 
add missing header file in Linux - Privilege Escalation.md
 2021-07-26 11:49:01 +02:00
Swissky 3a4bd97762 AD CS - Mimikatz / Rubeus 2021-07-25 11:40:19 +02:00
SwisskyandGitHub 1b244ca690 Merge pull request #388 from jeremybuis/patch-1 
Adds Lessjs injections
 2021-07-16 18:54:48 +02:00
Swissky 3f2f156c12 File Upload Update 2021-07-14 17:10:04 +02:00
Swissky 44735975a5 Active Directory update 2021-07-12 20:45:16 +02:00
Swissky 175c676f1e Tmux PrivEsc + PrintNightmare update 2021-07-12 14:42:18 +02:00
SwisskyandGitHub 975a23ae34 Merge pull request #389 from noraj/patch-1 
add CVE-2021-34527 + It Was All A Dream scanner
 2021-07-08 15:49:27 +02:00
Swissky 2f8fc7bbb9 PrintNightmare - Mimikatz 2021-07-05 21:57:14 +02:00
Swissky 459f4c03fc Dependency Confusion + LDAP 2021-07-04 13:32:32 +02:00
SwisskyandGitHub 043e5a105e Merge pull request #387 from srabraham/patch-1 
Fix typo in Linux - Persistence.md
 2021-07-03 00:55:11 +02:00
SwisskyandGitHub 2148c89452 Merge pull request #386 from bhattsameer/patch-2 
Added Reverse Shell using Telnet
 2021-07-01 19:14:23 +02:00
Swissky 80816aee31 PrintNightmare - #385 2021-07-01 14:40:03 +02:00
Swissky 4e95162dc3 BadPwdCount attribute + DNS 2021-06-28 22:08:06 +02:00
Swissky ab0e487500 Cobalt Strike spunner + pivotnacci 2021-06-27 23:58:13 +02:00
SwisskyandGitHub 628481cd4d Merge pull request #384 from leongross/master 
issue #286
 2021-06-25 10:25:03 +02:00
SwisskyandGitHub 4519df200c Merge pull request #383 from leongross/patch-1 
Update Subdomains Enumeration.md  Issue #369
 2021-06-25 10:24:08 +02:00
Swissky 85a7ac8a76 Shadow Credentials + AD CS Relay + SSSD KCM 2021-06-24 15:26:05 +02:00
Swissky 0ba120e250 Fix #382 2021-06-23 22:14:55 +02:00
SwisskyandGitHub 9f5cf0357a Merge pull request #381 from hahwul/master 
Added referer header validation check in CSRF
 2021-06-23 14:05:23 +02:00
SwisskyandGitHub a69e911926 Merge pull request #379 from alexlauerman/master 
Adding updated flowchart to CSRF page
 2021-06-19 09:46:49 +02:00
SwisskyandGitHub 18556c2caf Merge pull request #378 from PinkDev1/patch-3 
Fixed typo/wording on "Tips" section in Blind-XSS
 2021-06-17 09:24:06 +02:00
SwisskyandGitHub e9b38b8f43 Merge pull request #377 from ajdumanhug/master 
Add AWS SSRF Bypasses
 2021-06-16 18:41:39 +02:00
SwisskyandGitHub 62b897c936 Merge pull request #376 from noraj/patch-2 
XSS: add quick tips for bXSS
 2021-06-16 13:56:29 +02:00
SwisskyandGitHub 2a4631eb8f Merge pull request #375 from noraj/patch-1 
XSS: remove bluelotus
 2021-06-16 13:56:07 +02:00
SwisskyandGitHub b006551bfe Merge pull request #374 from tex2e/patch-1 
Fix snippets
 2021-06-14 16:10:54 +02:00
SwisskyandGitHub ad9c15b824 Merge pull request #370 from Annihilat0r/master 
add NoSQLi payload
 2021-05-29 22:38:13 +02:00
SwisskyandGitHub e3e3ca6ba2 Merge pull request #366 from mpgn/master 
Update Smarty Template Injection
 2021-05-20 18:08:20 +02:00
SwisskyandGitHub 28f68f47ae Merge pull request #365 from Shrewk/patch-1 
Updates JWT tool
 2021-05-19 12:05:59 +02:00
SwisskyandGitHub 4ae6982f63 Merge pull request #362 from noraj/patch-1 
add RCE via Apache logs in log poisoning
 2021-05-10 13:13:34 +02:00
Swissky a723a34449 PS Transcript + PPLdump.exe 2021-05-06 18:26:00 +02:00
SwisskyandGitHub 28a48bd696 Merge pull request #361 from sokaRepo/master 
Add AWS DynamoDB enumeration
 2021-04-30 22:21:28 +02:00
SwisskyandGitHub 1592756f9c Merge pull request #348 from pswalia2u/patch-1 
Update Reverse Shell Cheatsheet.md
 2021-04-26 10:05:59 +02:00
SwisskyandGitHub 9753f369e3 Merge pull request #358 from gregxsunday/master 
improved XXE SVG payloads to be valid XMLs
 2021-04-24 15:40:01 +02:00
Swissky 08b59f2856 AD update CME+DCOM 2021-04-21 22:27:07 +02:00
SwisskyandGitHub 22340c8fc2 Merge pull request #356 from 0dayCTF/patch-1 
Update Reverse Shell Cheatsheet.md
 2021-04-18 18:34:49 +02:00
SwisskyandGitHub ba2c02cc3e Merge pull request #355 from clem9669/patch-6 
Update Linux - Privilege Escalation.md
 2021-04-15 12:46:15 +02:00
SwisskyandGitHub 2b43fa8bfc Merge pull request #353 from micahvandeusen/master 
Added method to read gMSA
 2021-04-10 18:04:28 +02:00
SwisskyandGitHub 90eefc3b2e Merge pull request #351 from ricxpl/patch-1 
Improve Ruby reverse shell
 2021-04-02 22:39:36 +02:00
SwisskyandGitHub d8d26d8fb3 Merge pull request #350 from secnigma/patch-2 
Added Netcat BusyBox
 2021-04-01 14:31:12 +02:00
SwisskyandGitHub 4f89c0a6d2 Merge pull request #349 from SecGus/master 
Add .ashx shell
 2021-03-30 15:31:53 +02:00
Swissky 0443babe35 Relay + MSSQL Read File 2021-03-25 18:25:02 +01:00
Swissky f6b9d63bf8 DCOM exploitation and MSSQL CLR 2021-03-24 22:26:23 +01:00
Swissky bd2166027e GMSA Password + Dart Reverse Shell 2021-03-24 12:44:35 +01:00
SwisskyandGitHub af9f103655 Merge pull request #346 from linoskoczek/master 
Fix links in XSS Injection Summary
 2021-03-18 21:18:28 +01:00
SwisskyandGitHub 5a3427cf9b Merge pull request #345 from Tametomo/patch-1 
Added additional CSV injection cases patterned after in the wild samples
 2021-03-17 09:36:25 +01:00
SwisskyandGitHub 22a1662f60 Merge pull request #341 from cosmin-bianu/master 
Fix Java payload (issue #337)
 2021-03-12 12:36:19 +01:00
SwisskyandGitHub d61f683dc6 Merge pull request #339 from c14dd49h/patch-2 
Update Active Directory Attack.md
 2021-02-26 16:37:41 +01:00
Swissky 8d31b7240b Office Attacks 2021-02-21 20:17:57 +01:00
SwisskyandGitHub e128964dd9 Merge pull request #338 from mpgn/patch-1 
Add mimikatz command to protect a process after removing the protection
 2021-02-17 12:32:23 +01:00
SwisskyandGitHub f6f8ec010a Merge pull request #336 from valenbg1/patch-1 
Update Windows - Privilege Escalation.md
 2021-02-10 16:36:19 +01:00
SwisskyandGitHub 1d08a7e12d Merge pull request #335 from unkn0w/patch-1 
[typo] changed sshs_config to sshd_config
 2021-02-05 14:36:05 +01:00
SwisskyandGitHub 495a1f3ffe Merge pull request #334 from lanjelot/git-dumper 
New tool git-dumper.py
 2021-02-03 15:41:27 +01:00
SwisskyandGitHub 6bcd2e8a6a Update README.md 2021-01-31 21:51:53 +01:00
SwisskyandGitHub b4d8b5939f Merge pull request #332 from kazkansouh/master 
Add a one line postgres file write
 2021-01-30 21:59:01 +01:00
Swissky 092083af5c AD - Printer Bug + Account Lock 2021-01-29 22:10:22 +01:00
SwisskyandGitHub 075721fa9b Merge pull request #331 from PinkDev1/patch-2 
Added EoP - $PATH Interception
 2021-01-28 22:12:51 +01:00
SwisskyandGitHub ec856fec21 Merge pull request #330 from JLLeitschuh/patch-2 
Add XXE via DTD file
 2021-01-25 18:02:38 +01:00
SwisskyandGitHub 4c7dd435a6 Merge pull request #329 from PinkDev1/patch-1 
API Key Leaks: Added commands for testing Mapbox API Tokens
 2021-01-25 10:38:58 +01:00
SwisskyandGitHub 2ac947e46d Merge pull request #327 from ayomawdb/patch-2 
Add PostgreSQL Check if Current User is Supperuser
 2021-01-24 18:44:12 +01:00
SwisskyandGitHub 4e17d6c2b3 Update PostgreSQL Injection.md 2021-01-24 18:43:58 +01:00
SwisskyandGitHub cd6f5493b3 Update PostgreSQL Injection.md 2021-01-24 18:43:28 +01:00
SwisskyandGitHub daebeeadd2 Merge pull request #326 from ayomawdb/patch-1 
Add Kubernetes Pentest Methodology Part 3
 2021-01-20 11:01:42 +01:00
SwisskyandGitHub 0675573d93 Merge pull request #325 from u0pattern/u0pattern-patch-1 
SSTI Payload in Jinja2 - Arbitrary file read
 2021-01-18 10:08:47 +01:00
SwisskyandGitHub d4d2ba45c2 Merge pull request #323 from lanjelot/protocol-smuggling 
Add PortSwigger http-desync reborn article
 2021-01-16 19:04:16 +01:00
SwisskyandGitHub 7b943d46bc Merge pull request #322 from lapolis/patch-1 
Added closing bracket in unicode full width bypass
 2021-01-15 17:42:13 +01:00
Swissky 01aadf3a44 Alternate Data Stream 2021-01-13 10:22:59 +01:00
SwisskyandGitHub 836861c86e Merge pull request #320 from lanjelot/cloudsplaining 
New cloudsplaining tool to AWS Pentest page
 2021-01-12 13:42:36 +01:00
SwisskyandGitHub 964f2cde35 Merge pull request #319 from lanjelot/insecure-scm-cleanup 
Cleaned up Insecure SCM page and added new Yar tool
 2021-01-12 13:36:38 +01:00
Swissky 3a6ac550b8 DSRM Admin 2021-01-08 23:41:50 +01:00
SwisskyandGitHub dd80fb899c Merge pull request #315 from timgates42/bugfix_typo_account 
docs: fix simple typo, accound -> account
 2020-12-22 23:53:27 +01:00
SwisskyandGitHub 609c38bde5 Merge pull request #314 from ahboon/HTTP-Parameter-Pollution 
Added Golang param information
 2020-12-22 20:02:56 +01:00
SwisskyandGitHub 0929d5596c Merge pull request #313 from ahboon/HTTP-Parameter-Pollution 
Created HTTP Parameter Pollution
 2020-12-22 11:27:07 +01:00
Swissky 16b207eb0b LAPS Password 2020-12-20 21:45:41 +01:00
Swissky 67752de6e9 Bronze Bit Attack 2020-12-18 22:38:30 +01:00
SwisskyandGitHub 66a0fd1cbe Merge pull request #311 from lanjelot/deser 
Add tool gadgetprobe
 2020-12-18 15:25:26 +01:00
SwisskyandGitHub 1e69ec63a8 Merge pull request #312 from lanjelot/ebs 
Update Cloud AWS Methodology
 2020-12-18 15:24:41 +01:00
SwisskyandGitHub 35a86f81d7 Merge pull request #310 from lanjelot/smuggler 
Add tools kube-hunter and smuggler
 2020-12-18 15:22:20 +01:00
Swissky f7e8f515a5 Application Escape and Breakout 2020-12-17 08:56:58 +01:00
SwisskyandGitHub 973f091d1b Merge pull request #308 from lanjelot/fix-web-methodology 
Fix links and duplicated nmap and massscan examples
 2020-12-12 19:43:34 +01:00
SwisskyandGitHub 3e50b711b7 Merge pull request #307 from lanjelot/fix-typos 
Fix typos
 2020-12-12 19:42:46 +01:00
SwisskyandGitHub aab4f3e14b Merge pull request #306 from lanjelot/master 
Add reference to panoptic and rip-hg tools
 2020-12-11 19:04:53 +01:00
SwisskyandGitHub b5a758dada Merge pull request #305 from lanjelot/master 
Add missing url
 2020-12-11 18:39:38 +01:00
SwisskyandGitHub e58bfe8310 Merge pull request #304 from lanjelot/master 
Add tool GitTools
 2020-12-11 18:25:58 +01:00
Swissky 73fdd6e218 Mimikatz - Elevate token with LSA protection 2020-12-09 23:33:40 +01:00
Swissky 12aab45018 Merge branch 'master' of https://github.com/swisskyrepo/PayloadsAllTheThings 2020-12-08 14:31:47 +01:00
Swissky 19a2950b8d AMSI + Trust 2020-12-08 14:31:01 +01:00
SwisskyandGitHub 2f83ee56f4 Merge pull request #302 from noraj/patch-1 
add another example of XXE in XLSX
 2020-12-08 11:36:26 +01:00
SwisskyandGitHub 78cc68674b Merge pull request #296 from brnhrd/patch-1 
Fix table of contents
 2020-12-07 17:21:02 +01:00
Swissky f48ee0bca5 Deepce - Docker Enumeration, Escalation of Privileges and Container Escapes 2020-12-06 18:59:43 +01:00
Swissky 27050f6dd8 MSSQL Server Cheatsheet 2020-12-05 11:37:34 +01:00
SwisskyandGitHub e9390d1572 Merge pull request #297 from u0pattern/u0pattern-patch-1 
XXE WAF Bypass Added
 2020-12-04 10:21:17 +01:00