File tree
619 files changed
+874809
-0
lines changed- API Key Leaks
- Files
- IIS-Machine-Keys
- Account Takeover
- mfa-bypass
- Business Logic Errors
- CONTRIBUTING
- CORS Misconfiguration
- CRLF Injection
- Files
- CSV Injection
- CVE Exploits
- Log4Shell
- Clickjacking
- Client Side Path Traversal
- Command Injection
- Intruder
- Cross-Site Request Forgery
- Images
- DNS Rebinding
- DOM Clobbering
- Denial of Service
- Dependency Confusion
- Directory Traversal
- Intruder
- File Inclusion
- Files
- Intruders
- LFI-to-RCE
- Wrappers
- Google Web Toolkit
- GraphQL Injection
- Images
- HTTP Parameter Pollution
- Headless Browser
- files
- Hidden Parameters
- Insecure Deserialization
- DotNET
- Files
- Images
- Java
- Node
- PHP
- Python
- Ruby
- Insecure Direct Object References
- Images
- Insecure Management Interface
- Intruder
- Insecure Randomness
- Insecure Source Code Management
- Bazaar
- Files
- Git
- Mercurial
- Subversion
- JSON Web Token
- Java RMI
- LDAP Injection
- Intruder
- LaTeX Injection
- Mass Assignment
- Methodology and Resources
- Active Directory Attack
- Bind Shell Cheatsheet
- Cloud - AWS Pentest
- Cloud - Azure Pentest
- Cobalt Strike - Cheatsheet
- Container - Docker Pentest
- Container - Kubernetes Pentest
- Escape Breakout
- HTML Smuggling
- Hash Cracking
- Initial Access
- Linux - Evasion
- Linux - Persistence
- Linux - Privilege Escalation
- MSSQL Server - Cheatsheet
- Metasploit - Cheatsheet
- Methodology and enumeration
- Network Discovery
- Network Pivoting Techniques
- Office - Attacks
- Powershell - Cheatsheet
- Reverse Shell Cheatsheet
- Source Code Management
- Vulnerability Reports
- Web Attack Surface
- Windows - AMSI Bypass
- Windows - DPAPI
- Windows - Defenses
- Windows - Download and Execute
- Windows - Mimikatz
- Windows - Persistence
- Windows - Privilege Escalation
- Windows - Using credentials
- NoSQL Injection
- Intruder
- OAuth Misconfiguration
- ORM Leak
- Open Redirect
- Intruder
- Prompt Injection
- Prototype Pollution
- Race Condition
- Regular Expression
- Request Smuggling
- SAML Injection
- Images
- SQL Injection
- BigQuery Injection
- Cassandra Injection
- DB2 Injection
- Images
- Intruder
- MSSQL Injection
- MySQL Injection
- OracleSQL Injection
- PostgreSQL Injection
- SQLite Injection
- SQLmap
- Server Side Include Injection
- Files
- Server Side Request Forgery
- Files
- Images
- SSRF-Advanced-Exploitation
- SSRF-Cloud-Instances
- Server Side Template Injection
- ASP
- Images
- Intruder
- JavaScript
- Java
- PHP
- Python
- Ruby
- Tabnabbing
- Type Juggling
- Images
- Upload Insecure Files
- CVE FFmpeg HLS
- CVE ZIP Symbolic Link
- Configuration Apache .htaccess
- Configuration IIS web.config
- Configuration Python __init__.py
- Configuration uwsgi.ini
- EICAR
- Extension ASP
- Extension HTML
- Extension PHP
- Images
- Jetty RCE
- Picture Compression
- Picture ImageMagick
- Picture Metadata
- Server Side Include
- Web Cache Deception
- Images
- Intruders
- Web Sockets
- Files
- Images
- XPATH Injection
- XSLT Injection
- Files
- XSS Injection
- 1 - XSS Filter Bypass
- 2 - XSS Polyglot
- 3 - XSS Common WAF Bypass
- 4 - CSP Bypass
- 5 - XSS in Angular
- Files
- Images
- Intruders
- XXE Injection
- Files
- Intruders
- Zip Slip
- _LEARNING_AND_SOCIALS
- BOOKS
- TWITTER
- YOUTUBE
- _template_vuln
- assets
- images
- social
- API Key Leaks
- Account Takeover
- Business Logic Errors
- CORS Misconfiguration
- CRLF Injection
- CSV Injection
- CVE Exploits
- Clickjacking
- Client Side Path Traversal
- Command Injection
- Cross-Site Request Forgery
- DNS Rebinding
- DOM Clobbering
- Denial of Service
- Dependency Confusion
- Directory Traversal
- File Inclusion
- Google Web Toolkit
- GraphQL Injection
- HTTP Parameter Pollution
- Headless Browser
- Hidden Parameters
- Insecure Deserialization
- Insecure Direct Object References
- Insecure Management Interface
- Insecure Randomness
- Insecure Source Code Management
- JSON Web Token
- Java RMI
- LDAP Injection
- LaTeX Injection
- Mass Assignment
- Methodology and Resources
- NoSQL Injection
- OAuth Misconfiguration
- ORM Leak
- Open Redirect
- Prompt Injection
- Prototype Pollution
- Race Condition
- Regular Expression
- Request Smuggling
- SAML Injection
- SQL Injection
- Server Side Include Injection
- Server Side Request Forgery
- Server Side Template Injection
- Tabnabbing
- Type Juggling
- Upload Insecure Files
- Configuration Apache .htaccess
- Web Cache Deception
- Web Sockets
- XPATH Injection
- XSLT Injection
- XSS Injection
- XXE Injection
- Zip Slip
- _LEARNING_AND_SOCIALS
- _template_vuln
- javascripts
- lunr
- min
- workers
- stylesheets
- search
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
619 files changed
+874809
-0
lines changedWhitespace-only changes.
Large diffs are not rendered by default.
Large diffs are not rendered by default.
Large diffs are not rendered by default.
Large diffs are not rendered by default.
Large diffs are not rendered by default.
Large diffs are not rendered by default.
Large diffs are not rendered by default.
Large diffs are not rendered by default.
Large diffs are not rendered by default.
0 commit comments