gitea-mirror/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2026-07-30 23:50:38 -07:00
Code Issues Packages Projects Releases Wiki Activity
1,030 Commits 2 Branches 7 Tags
bd2166027eaee81ea1a29d009e0e6c02fffb231a
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Swissky bd2166027e GMSA Password + Dart Reverse Shell 2021-03-24 12:44:35 +01:00
SwisskyandGitHub af9f103655 Merge pull request #346 from linoskoczek/master 
Fix links in XSS Injection Summary
 2021-03-18 21:18:28 +01:00
SwisskyandGitHub 5a3427cf9b Merge pull request #345 from Tametomo/patch-1 
Added additional CSV injection cases patterned after in the wild samples
 2021-03-17 09:36:25 +01:00
SwisskyandGitHub 22a1662f60 Merge pull request #341 from cosmin-bianu/master 
Fix Java payload (issue #337)
 2021-03-12 12:36:19 +01:00
SwisskyandGitHub d61f683dc6 Merge pull request #339 from c14dd49h/patch-2 
Update Active Directory Attack.md
 2021-02-26 16:37:41 +01:00
Swissky 8d31b7240b Office Attacks 2021-02-21 20:17:57 +01:00
SwisskyandGitHub e128964dd9 Merge pull request #338 from mpgn/patch-1 
Add mimikatz command to protect a process after removing the protection
 2021-02-17 12:32:23 +01:00
SwisskyandGitHub f6f8ec010a Merge pull request #336 from valenbg1/patch-1 
Update Windows - Privilege Escalation.md
 2021-02-10 16:36:19 +01:00
SwisskyandGitHub 1d08a7e12d Merge pull request #335 from unkn0w/patch-1 
[typo] changed sshs_config to sshd_config
 2021-02-05 14:36:05 +01:00
SwisskyandGitHub 495a1f3ffe Merge pull request #334 from lanjelot/git-dumper 
New tool git-dumper.py
 2021-02-03 15:41:27 +01:00
SwisskyandGitHub 6bcd2e8a6a Update README.md 2021-01-31 21:51:53 +01:00
SwisskyandGitHub b4d8b5939f Merge pull request #332 from kazkansouh/master 
Add a one line postgres file write
 2021-01-30 21:59:01 +01:00
Swissky 092083af5c AD - Printer Bug + Account Lock 2021-01-29 22:10:22 +01:00
SwisskyandGitHub 075721fa9b Merge pull request #331 from PinkDev1/patch-2 
Added EoP - $PATH Interception
 2021-01-28 22:12:51 +01:00
SwisskyandGitHub ec856fec21 Merge pull request #330 from JLLeitschuh/patch-2 
Add XXE via DTD file
 2021-01-25 18:02:38 +01:00
SwisskyandGitHub 4c7dd435a6 Merge pull request #329 from PinkDev1/patch-1 
API Key Leaks: Added commands for testing Mapbox API Tokens
 2021-01-25 10:38:58 +01:00
SwisskyandGitHub 2ac947e46d Merge pull request #327 from ayomawdb/patch-2 
Add PostgreSQL Check if Current User is Supperuser
 2021-01-24 18:44:12 +01:00
SwisskyandGitHub 4e17d6c2b3 Update PostgreSQL Injection.md 2021-01-24 18:43:58 +01:00
SwisskyandGitHub cd6f5493b3 Update PostgreSQL Injection.md 2021-01-24 18:43:28 +01:00
SwisskyandGitHub daebeeadd2 Merge pull request #326 from ayomawdb/patch-1 
Add Kubernetes Pentest Methodology Part 3
 2021-01-20 11:01:42 +01:00
SwisskyandGitHub 0675573d93 Merge pull request #325 from u0pattern/u0pattern-patch-1 
SSTI Payload in Jinja2 - Arbitrary file read
 2021-01-18 10:08:47 +01:00
SwisskyandGitHub d4d2ba45c2 Merge pull request #323 from lanjelot/protocol-smuggling 
Add PortSwigger http-desync reborn article
 2021-01-16 19:04:16 +01:00
SwisskyandGitHub 7b943d46bc Merge pull request #322 from lapolis/patch-1 
Added closing bracket in unicode full width bypass
 2021-01-15 17:42:13 +01:00
Swissky 01aadf3a44 Alternate Data Stream 2021-01-13 10:22:59 +01:00
SwisskyandGitHub 836861c86e Merge pull request #320 from lanjelot/cloudsplaining 
New cloudsplaining tool to AWS Pentest page
 2021-01-12 13:42:36 +01:00
SwisskyandGitHub 964f2cde35 Merge pull request #319 from lanjelot/insecure-scm-cleanup 
Cleaned up Insecure SCM page and added new Yar tool
 2021-01-12 13:36:38 +01:00
Swissky 3a6ac550b8 DSRM Admin 2021-01-08 23:41:50 +01:00
SwisskyandGitHub dd80fb899c Merge pull request #315 from timgates42/bugfix_typo_account 
docs: fix simple typo, accound -> account
 2020-12-22 23:53:27 +01:00
SwisskyandGitHub 609c38bde5 Merge pull request #314 from ahboon/HTTP-Parameter-Pollution 
Added Golang param information
 2020-12-22 20:02:56 +01:00
SwisskyandGitHub 0929d5596c Merge pull request #313 from ahboon/HTTP-Parameter-Pollution 
Created HTTP Parameter Pollution
 2020-12-22 11:27:07 +01:00
Swissky 16b207eb0b LAPS Password 2020-12-20 21:45:41 +01:00
Swissky 67752de6e9 Bronze Bit Attack 2020-12-18 22:38:30 +01:00
SwisskyandGitHub 66a0fd1cbe Merge pull request #311 from lanjelot/deser 
Add tool gadgetprobe
 2020-12-18 15:25:26 +01:00
SwisskyandGitHub 1e69ec63a8 Merge pull request #312 from lanjelot/ebs 
Update Cloud AWS Methodology
 2020-12-18 15:24:41 +01:00
SwisskyandGitHub 35a86f81d7 Merge pull request #310 from lanjelot/smuggler 
Add tools kube-hunter and smuggler
 2020-12-18 15:22:20 +01:00
Swissky f7e8f515a5 Application Escape and Breakout 2020-12-17 08:56:58 +01:00
SwisskyandGitHub 973f091d1b Merge pull request #308 from lanjelot/fix-web-methodology 
Fix links and duplicated nmap and massscan examples
 2020-12-12 19:43:34 +01:00
SwisskyandGitHub 3e50b711b7 Merge pull request #307 from lanjelot/fix-typos 
Fix typos
 2020-12-12 19:42:46 +01:00
SwisskyandGitHub aab4f3e14b Merge pull request #306 from lanjelot/master 
Add reference to panoptic and rip-hg tools
 2020-12-11 19:04:53 +01:00
SwisskyandGitHub b5a758dada Merge pull request #305 from lanjelot/master 
Add missing url
 2020-12-11 18:39:38 +01:00
SwisskyandGitHub e58bfe8310 Merge pull request #304 from lanjelot/master 
Add tool GitTools
 2020-12-11 18:25:58 +01:00
Swissky 73fdd6e218 Mimikatz - Elevate token with LSA protection 2020-12-09 23:33:40 +01:00
Swissky 12aab45018 Merge branch 'master' of https://github.com/swisskyrepo/PayloadsAllTheThings 2020-12-08 14:31:47 +01:00
Swissky 19a2950b8d AMSI + Trust 2020-12-08 14:31:01 +01:00
SwisskyandGitHub 2f83ee56f4 Merge pull request #302 from noraj/patch-1 
add another example of XXE in XLSX
 2020-12-08 11:36:26 +01:00
SwisskyandGitHub 78cc68674b Merge pull request #296 from brnhrd/patch-1 
Fix table of contents
 2020-12-07 17:21:02 +01:00
Swissky f48ee0bca5 Deepce - Docker Enumeration, Escalation of Privileges and Container Escapes 2020-12-06 18:59:43 +01:00
Swissky 27050f6dd8 MSSQL Server Cheatsheet 2020-12-05 11:37:34 +01:00
SwisskyandGitHub e9390d1572 Merge pull request #297 from u0pattern/u0pattern-patch-1 
XXE WAF Bypass Added
 2020-12-04 10:21:17 +01:00
Swissky e13f152b74 AD - Recon 2020-12-02 18:43:13 +01:00
SwisskyandGitHub 3314f8bd99 Merge pull request #294 from lanjelot/add-s3-objects-check 
Add tool nccgroup/s3_objects_check
 2020-11-29 19:25:07 +01:00
SwisskyandGitHub 7cd34d4ffa Merge pull request #293 from cervoise/patch-1 
Update README.md
 2020-11-26 18:45:16 +01:00
Swissky b918095775 AzureHound 2020-11-24 12:41:34 +01:00
SwisskyandGitHub 13ed9c8628 Merge pull request #292 from paupaulaz/master 
Puts the H1 reports at the right place
 2020-11-22 12:57:27 +01:00
SwisskyandGitHub a639121b21 Merge pull request #291 from marcan2020/patch-11 
Remove unnecessary condition to extract columns
 2020-11-18 10:12:53 +01:00
SwisskyandGitHub 8863292545 Merge pull request #290 from bascoe10/patch-1 
Sorted the list of revshell options
 2020-11-14 22:28:53 +01:00
SwisskyandGitHub a60caaefef Merge pull request #289 from samsbp/master 
Update ssrf payloads specific to java
 2020-11-08 12:47:15 +01:00
Swissky bd184487e5 NTLM Hashcat 2020-11-06 16:20:03 +01:00
SwisskyandGitHub 6a82f47f32 Merge pull request #288 from bolli95/master 
TWITTER.md added
 2020-11-03 12:57:53 +01:00
SwisskyandGitHub 0492545960 Update TWITTER.md 2020-11-03 12:57:33 +01:00
SwisskyandGitHub f9e2512080 Merge pull request #287 from beomsu317/master 
Update SQL-Injection
 2020-11-03 10:38:02 +01:00
SwisskyandGitHub 464fbeb8f4 Merge pull request #285 from random-robbie/patch-1 
Update README.md
 2020-10-31 22:47:09 +01:00
SwisskyandGitHub 7f36bf58a4 Merge pull request #284 from akoul02/patch-1 
Improved Jade payload
 2020-10-31 16:47:10 +01:00
Swissky 1137bfca8d Remote Desktop Services Shadowing 2020-10-30 21:10:00 +01:00
SwisskyandGitHub 4fe1d71ad8 Merge pull request #283 from d4rkc0nd0r/patch-9 
Update MySQL Injection.md
 2020-10-29 16:44:14 +01:00
SwisskyandGitHub c7be142d62 Merge pull request #282 from Gorgamite/patch-3 
Added winPEAS to windows privilege escalation tool
 2020-10-29 12:20:55 +01:00
SwisskyandGitHub db533aabd4 Merge pull request #280 from Gorgamite/master 
Added LinPEAS to Linux Privesc.
 2020-10-29 11:56:44 +01:00
SwisskyandGitHub 2746451408 Merge pull request #279 from Gorgamite/patch-1 
Added more information on kernel exploits
 2020-10-29 11:55:25 +01:00
SwisskyandGitHub 9eb84bcfb7 Merge pull request #278 from marcan2020/patch-10 
Add Springboot Actuator RCE
 2020-10-28 18:37:38 +01:00
SwisskyandGitHub ae3a4d4336 Merge pull request #277 from bolli95/master 
XSS detection tools added
 2020-10-27 15:08:56 +01:00
SwisskyandGitHub 99f53ae9b4 Merge pull request #276 from clem9669/patch-5 
Adding marshalsec tool & references
 2020-10-26 16:35:02 +01:00
SwisskyandGitHub c52cfb1200 Merge pull request #275 from c-nagy/master 
Added a brief overview for type juggling
 2020-10-26 14:57:06 +01:00
SwisskyandGitHub fa497c2149 Merge pull request #274 from bolli95/master 
CORS and CRLF documentation updated
 2020-10-25 14:02:02 +01:00
SwisskyandGitHub 9992990e40 Update README.md 2020-10-25 14:01:53 +01:00
SwisskyandGitHub 9e61eb91be Merge pull request #273 from Gorgamite/master 
Specifying alternative access method through SSH
 2020-10-25 11:50:01 +01:00
SwisskyandGitHub 955557d175 Merge pull request #272 from op01/master 
add type juggling example
 2020-10-23 18:30:32 +02:00
SwisskyandGitHub e9c0581fa6 Merge pull request #270 from bolli95/master 
Tabnabbing explanation added
 2020-10-20 11:34:13 +02:00
SwisskyandGitHub 0f125243ab Update README.md 2020-10-20 11:34:02 +02:00
SwisskyandGitHub 7f90601372 Merge pull request #269 from marcan2020/patch-9 
Add Password Reset Via Username Collision
 2020-10-19 00:18:57 +02:00
SwisskyandGitHub 7510307a59 Merge pull request #264 from d4rkc0nd0r/patch-5 
Update README.md
 2020-10-18 22:30:56 +02:00
SwisskyandGitHub bf7fc8939b Merge pull request #268 from marcan2020/patch-8 
Update big CVEs list
 2020-10-18 22:30:21 +02:00
SwisskyandGitHub 8a59b22a64 Merge pull request #267 from Rude-Monkey/master 
Fix(Docs): Correcting typos on the repo
 2020-10-17 23:06:44 +02:00
SwisskyandGitHub 4a4df791ed Merge pull request #266 from marcan2020/patch-6 
Add Python bind shell
 2020-10-17 20:58:21 +02:00
Swissky b641131f27 SSTI - Pebble update 2020-10-17 12:25:50 +02:00
Swissky 5a1ae58a59 Sticky Notes Windows + Cobalt SMB 2020-10-16 11:35:15 +02:00
Swissky 3368084b2d CS Beacon - SMB Error Code 2020-10-15 17:22:00 +02:00
Swissky b32f4754d7 Keytab + schtasks 2020-10-15 12:35:05 +02:00
SwisskyandGitHub 2ab1c58dac Merge pull request #261 from SiddTim/patch-3 
Update README.md
 2020-10-09 14:45:50 +02:00
SwisskyandGitHub 3e159534b8 Merge pull request #262 from SiddTim/patch-4 
Update Cassandra Injection.md
 2020-10-09 14:44:45 +02:00
SwisskyandGitHub 913f2d2381 Merge pull request #253 from yoavbls/add-cloudflared 
Use cloudflared to expose internal services
 2020-10-09 10:34:26 +02:00
SwisskyandGitHub 0f098c8a2c Merge pull request #251 from ritiksahni/patch-1 
Removed broken link
 2020-10-09 10:33:43 +02:00
SwisskyandGitHub a8319b94ff Merge pull request #259 from SiddTim/patch-1 
Update Cassandra Injection.md
 2020-10-09 10:31:58 +02:00
SwisskyandGitHub f03da2a53e Merge pull request #260 from SiddTim/patch-2 
Update MSSQL Injection.md
 2020-10-09 10:31:48 +02:00
Swissky c9be68f0a1 Privilege File Write - Update 2020-10-08 16:51:11 +02:00
Swissky 0df0cc9cf8 Privileged File Write 2020-10-08 16:39:25 +02:00
Swissky 52b0cd6030 Ligolo Reverse Tunneling 2020-10-08 11:23:12 +02:00
SwisskyandGitHub 7014cb37d2 Merge pull request #258 from Shad0wMazt3r/master 
Added YouTube Channels
 2020-10-08 10:04:59 +02:00
SwisskyandGitHub 5c810b0e62 Update YOUTUBE.md 2020-10-08 10:01:45 +02:00
SwisskyandGitHub 63270e4d42 Delete Logs-files.txt 
Fix for https://github.com/swisskyrepo/PayloadsAllTheThings/issues/141
 2020-10-07 22:25:25 +02:00
SwisskyandGitHub 417c972871 Merge pull request #257 from vavkamil/vavkamil/cache-deception 
Update `Web Cache Deception` section
 2020-10-07 20:16:14 +02:00