gitea-mirror/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2026-08-01 08:31:04 -07:00
Code Issues Packages Projects Releases Wiki Activity
1,585 Commits 2 Branches 7 Tags
b7043cfedde98e92ab158e2240bfbc2d34a3f9e1
Commit Graph
82 Commits
Author SHA1 Message Date
Cory ClineandGitHub a8d8434756 Shortened payload 
Make payload shorter.
 2022-10-13 19:48:20 -05:00
Cory ClineandGitHub fbed4254e5 Fixed an oops 
Somehow I deleted line 120 in a prior commit. Fixed.
 2022-10-13 18:52:07 -05:00
Cory ClineandGitHub 9ee8f092cd Changed link for document.cookie blacklist 
Link was not working due to use of period in title.
 2022-10-13 18:46:52 -05:00
Cory ClineandGitHub 9a42be1113 Replaced console.log with alert 
It's more common to want alert screenshots vs console screenshots.
 2022-10-13 18:45:55 -05:00
Cory ClineandGitHub f23f28c4e2 Shortened payload 
Shortened the document.cookie blacklist bypass payload.
 2022-10-13 18:43:54 -05:00
Cory ClineandGitHub 5d561ea7d6 Added document.cookie blacklist bypass 
Added an alternative to document.cookie for situations when this text is blacklisted.
 2022-10-13 18:23:36 -05:00
clem9669andGitHub 2aa353a5b9 Update XSS_Polyglots.txt 
Adding the latest BruteLogic polyglot
 2022-10-05 09:45:15 +00:00
Deep Dhakate a670a26eea Update 2022-10-02 06:13:01 +00:00
clem9669andGitHub 88134256c8 Adding brutelogic polyglot 
Adding brutelogic polyglot from blog post.
 2022-09-13 11:58:10 +00:00
SwisskyandGitHub d24e3f2d61 Merge pull request #497 from kz-cyber/xss/angular-xss-2 
[update] Angular XSS payload
 2022-09-07 00:34:29 +02:00
its0x08 31b213227e fix: Fix more spelling 2022-08-09 11:05:40 +02:00
its0x08 fc1f3b25a7 fix: Fix spelling 2022-08-09 11:02:21 +02:00
khiemtq-cyber 507c493db2 Update Angular XSS 2022-05-07 12:55:15 +07:00
idealphaseandGitHub 6738f878f3 Updated README.md 
Added References: Bypassing Signature-Based XSS Filters: Modifying Script Code
 2022-04-19 10:45:32 +07:00
idealphaseandGitHub de532030df Merge branch 'swisskyrepo:master' into master 2022-04-19 10:43:04 +07:00
SwisskyandGitHub 85a50869f2 Merge pull request #482 from khiemtq-cyber/xss/angular-xss-1 
[update] Angular XSS payload
 2022-04-18 21:01:44 +02:00
OoggleandGitHub 39d1c6e7d8 Add document blacklist bypass 2022-04-09 12:55:21 +02:00
ktq-cyber 5d898e004f [update] Angular XSS payload 2022-02-23 22:26:16 +07:00
idealphaseandGitHub e9eac5ca59 Update README.md 2021-11-10 22:40:40 +07:00
idealphaseandGitHub 6c7df7dc4e Update README.md 
Add Bypass dot filter
 2021-11-10 22:38:02 +07:00
Philippe ArteauandGitHub 9d30f792d4 Remove filename with special characters. 
The filename are already covered in `XSS Injection/README.md`
 2021-10-29 12:56:55 -04:00
Philippe ArteauandGitHub 16986febde Remove filename with special characters. 
The filename are already covered in `XSS Injection/README.md`
 2021-10-29 12:56:41 -04:00
Philippe ArteauandGitHub 7443da045a Remove filename with special characters. 
The filename are already covered in `XSS Injection/README.md`
 2021-10-29 12:56:25 -04:00
MarkusandGitHub 7996b4f905 Update XSS README.md 
Remove unnecessary complexity from CSP bypass payload
 2021-10-01 16:10:23 +02:00
Lorenzo GrazianandGitHub 7369ee28b3 Added XSS <object> payload 2021-09-02 15:14:29 +02:00
SwisskyandGitHub 1e85308ae2 Merge pull request #395 from daffainfo/patch-1 
Adding Cloudflare XSS payload
 2021-08-25 22:21:54 +02:00
SwisskyandGitHub f89597725a Merge pull request #416 from Bort-Millipede/master 
Expression Language Injection One-Liners; XSS Payload; Fixed Linux Py…
 2021-08-25 22:17:53 +02:00
Alexandre ZANNIandGitHub 4791962be5 document.domain, window.origin and console.log usage 2021-08-24 20:29:02 +02:00
Jeffrey Cap 9bde75b32d Expression Language Injection One-Liners; XSS Payload; Fixed Linux Python IPv6 Reverse Shell Payload 2021-08-23 14:41:40 -05:00
Swissky 87be30d3b2 DB2 Injection + ADCS 2021-08-10 23:00:19 +02:00
Xib3rR4dArandGitHub ae98d629f0 Update README.md 
Removed duplicates.
 2021-08-04 09:29:24 +05:00
SwisskyandGitHub 1fd9260d1e Update README.md 2021-07-31 11:28:23 +02:00
c14dd49handGitHub ee12f8e480 Update README.md 2021-07-22 16:55:03 +02:00
c14dd49handGitHub eddc716d8c Update README.md 2021-07-22 14:47:36 +02:00
Muhammad DaffaandGitHub 2b6c3cb360 Adding Cloudflare XSS payload 2021-07-15 12:48:02 +07:00
PinkDev1andGitHub 21c1690adf Fixed typo on "Tips" section 2021-06-16 19:24:17 +00:00
SwisskyandGitHub 62b897c936 Merge pull request #376 from noraj/patch-2 
XSS: add quick tips for bXSS
 2021-06-16 13:56:29 +02:00
Alexandre ZANNIandGitHub c469236204 XSS: add quick tips for bXSS 2021-06-16 13:25:46 +02:00
Alexandre ZANNIandGitHub 8547ac7dfc XSS: remove bluelotus 
the project is empty
 2021-06-16 13:18:08 +02:00
Swissky 08b59f2856 AD update CME+DCOM 2021-04-21 22:27:07 +02:00
linoskoczekandGitHub 825295e465 Update README.md 
Fix broken links in Summary
 2021-03-18 19:16:59 +00:00
lapolis_aka_bluandGitHub 6f758ba6c0 Added closing bracket in unicode full width bypass 
Yeah I know it is logic to use it if you really need the closing tag. But having both brackets in your repo makes it quicker to copy paste :D
 2021-01-15 16:38:51 +00:00
Swissky f7e8f515a5 Application Escape and Breakout 2020-12-17 08:56:58 +01:00
Max Boll 2a65064d15 little update 2020-10-27 14:10:35 +01:00
Max Boll 350c55a1ac XSS Tools added 2020-10-27 13:31:37 +01:00
Vincent GillesandVincent Gilles 0b90094002 Fix(Docs): Correcting typos on the repo 2020-10-17 22:52:35 +02:00
Max Rodrigo 2f40961990 Fix PHP XSS data collector line breaks 2020-09-05 10:36:58 +02:00
Viren PawarandGitHub 0266a7dd67 [Update] Added 1 payload 
Added one payload which executes without any usage of single or double quotes. Helpful when you have AngularJS injection but quotes are blocked by application.
Working proof of payload here: 

https://portswigger-labs.net/xss/angularjs.php?type=reflected&csp=0&version=1.6.0&x={{x=valueOf.name.constructor.fromCharCode;constructor.constructor(x(97,108,101,114,116,40,49,41))()}}
 2020-08-15 16:29:13 +05:30
Swissky c7e3ea005e Powershell Remoting 2020-08-09 12:15:56 +02:00
Swissky dd40ddd233 XSS summary subentries + GraphTCP 2020-07-12 14:44:33 +02:00