1
0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2025-12-22 03:45:09 +01:00

Commit Graph

  • 54e3887077 Added PortSwigger Web Security Academy CORS Link Emanuel Duss 2020-04-12 15:12:34 +0200
  • 3e5b367224 Added CORS Exploit when wildcard origin is allowed Emanuel Duss 2020-04-12 15:06:28 +0200
  • f120024c6b Added CORS exploitation with strict trusted origin whitelist using XSS Emanuel Duss 2020-04-12 14:55:05 +0200
  • 48fcdeb7ca Some clarification in the exploit code Emanuel Duss 2020-04-12 14:38:52 +0200
  • 4537555714 Added: CORS Misconfiguration with Null Origin allowed Emanuel Duss 2020-04-12 14:29:10 +0200
  • dd42b44011
    Merge pull request #179 from mindfuckup/master Swissky 2020-04-11 18:26:22 +0200
  • 930a3a0d8c Added: Cross-Site WebSocket Hijacking (CSWSH) Emanuel Duss 2020-04-11 16:17:35 +0200
  • 89e49b676d
    Merge pull request #178 from Techbrunch/patch-4 Swissky 2020-04-08 19:26:31 +0200
  • 5902da38e4
    Create web.web.config Techbrunch 2020-04-08 19:14:30 +0200
  • cea982c062 GraphQL Voyager - Represent any GraphQL API as an interactive graph Swissky 2020-04-04 22:33:28 +0200
  • 6e7af5a267 Docker Registry - Pull/Download Swissky 2020-04-04 18:27:41 +0200
  • f748af16d2
    Merge pull request #176 from Anon-Exploiter/patch-1 Swissky 2020-04-04 14:49:37 +0200
  • c9fcb58d57
    Using JWT's module to encode payload with type None Syed Umar Arfeen 2020-04-04 16:03:56 +0500
  • 78bd0867fe
    Merge pull request #175 from 3rg1s/master Swissky 2020-04-04 02:22:44 +0200
  • 009a2f9276
    Update SQLite Injection.md fuxsocy.py 2020-04-03 23:15:05 +0000
  • b5cc379c4b
    Merge pull request #173 from SakiiR/sakiir Swissky 2020-03-30 09:28:58 +0200
  • 38c273ff00 Added IFS (WAF bypass) to Symfony Twig RCE SakiiR SakiiR 2020-03-29 23:23:26 +0200
  • 8b78c2fe71 Added filter(system) twig RCE SakiiR SakiiR 2020-03-29 23:19:27 +0200
  • 231e41a59b Merge branch 'master' of https://github.com/swisskyrepo/PayloadsAllTheThings Swissky 2020-03-29 22:35:26 +0200
  • 268d85b4bf Symfony SSTI Twig RCE Swissky 2020-03-29 22:34:26 +0200
  • 0ba5ad3e71
    Merge pull request #172 from bash-c/patch-1 Swissky 2020-03-29 20:23:25 +0200
  • 1d299f55c9
    Delete unnecessary escape characters M4x 2020-03-29 23:40:39 +0800
  • be8f32b586 Docker escape and exploit Swissky 2020-03-29 16:48:09 +0200
  • 95ab07b45e CloudTrail disable, GraphQL tool Swissky 2020-03-28 12:01:56 +0100
  • d489597357
    Merge pull request #169 from guenicoe/patch-1 Swissky 2020-03-24 21:17:37 +0100
  • a3cc577ebd
    added cmd on the USOSVC vuln guenicoe 2020-03-24 20:15:59 +0000
  • 173366dc65
    Merge pull request #167 from PixeLInc/patch-1 Swissky 2020-03-23 23:27:10 +0100
  • 1b190939c4
    Remove example from win priv esc PixeL 2020-03-23 17:17:42 -0500
  • 6c38274bdb
    Merge pull request #166 from fanixk/patch-1 Swissky 2020-03-22 21:56:05 +0100
  • 2bdbb2dbc5
    Update Windows - Privilege Escalation.md Fanis Katsimpas 2020-03-22 19:25:35 +0000
  • 647d392c6f
    Merge pull request #1 from swisskyrepo/master Fernandez, ReK2 2020-03-20 01:36:14 +0100
  • 4303caa08c README - Summary update Swissky 2020-03-19 12:03:32 +0100
  • 1538ccd7f2 Gaining AWS Console Access via API Keys Swissky 2020-03-19 11:59:49 +0100
  • 57b500b48e
    Merge pull request #165 from HLOverflow/master Swissky 2020-03-14 18:45:55 +0100
  • 97dffcdc40
    Update README.md HLOverflow 2020-03-15 01:11:47 +0800
  • 3e184c10f9
    Added additional character filter bypasses HLOverflow 2020-03-15 01:09:28 +0800
  • 70182d32c9
    Merge pull request #164 from Techbrunch/patch-3 Swissky 2020-03-11 16:33:27 +0100
  • 3abf2aff2a
    Update AWS SSRF tips Techbrunch 2020-03-11 15:20:51 +0100
  • c20f84d09c
    Merge pull request #163 from SecGus/master Swissky 2020-03-09 20:06:32 +0100
  • fe4bdb0df4 Improvement to the SSTI RCE chiv 2020-03-09 18:19:33 +0000
  • 1f3a94ba88 AWS SSM + Shadow copy attack Swissky 2020-03-06 15:30:38 +0100
  • 5d87804f71 AWS EC2 Instance Connect + Lambda + SSM Swissky 2020-03-06 13:33:14 +0100
  • 9207e0204c
    Merge pull request #162 from SecGus/master Swissky 2020-03-02 15:22:44 +0100
  • 29fac06023 From https://twitter.com/secgus chivato 2020-03-01 21:15:19 +0000
  • c19e36ad34 Azure AD Connect - MSOL Account's password and DCSync Swissky 2020-03-01 17:06:31 +0100
  • 71a307a86b AWS - EC2 copy image Swissky 2020-02-29 12:56:00 +0100
  • 74f2dfccca Kerberos Constrained Delegation Swissky 2020-02-23 21:20:46 +0100
  • c5ac4e9eff AWS Patterns Swissky 2020-02-23 20:58:53 +0100
  • 0b14b12fb4
    Merge pull request #159 from noraj/patch-1 Swissky 2020-02-22 01:17:03 +0100
  • 3fad2f364c
    add ruby script Alexandre ZANNI 2020-02-21 23:49:50 +0100
  • f28f83bda6
    LDAPi: add scripts and dorks Alexandre ZANNI 2020-02-21 23:19:48 +0100
  • 915946a343 Fix Cloud Training Swissky 2020-02-21 10:50:43 +0100
  • bda7100a77 Fix Cloud references Swissky 2020-02-21 10:47:16 +0100
  • 984078050b Cloud - Pentest with AWS and Azure Swissky 2020-02-21 10:36:01 +0100
  • 7f0650dfc0 IIS Raid Persistence Swissky 2020-02-20 16:51:22 +0100
  • 73aa26ba68
    Merge pull request #158 from 0xdf0xdf/master Swissky 2020-02-20 13:07:39 +0100
  • 9d06e1297f added additional way to chain php filters 0xdf 2020-02-20 06:40:30 -0500
  • 7d650e9622 fixed error in chaining php filters in File Inclusion page, added an additional example 0xdf 2020-02-20 06:30:28 -0500
  • c2292145c8
    Merge pull request #157 from Stoo0rmq/patch-1 Swissky 2020-02-18 12:38:43 +0100
  • 7be86354b2
    Update File Inclusion Borja 2020-02-18 11:35:22 +0000
  • ba30618a8b Cobalt Strike - Artifact Swissky 2020-02-14 17:10:00 +0100
  • 7cd49769be WMI + Cobalt Strike Swissky 2020-02-13 22:53:45 +0100
  • b76a23c77f
    Merge pull request #156 from bhattsameer/patch-1 Swissky 2020-02-09 12:15:00 +0100
  • 994e557178
    Added more TTY Shell using perl and python Sameer Bhatt (debugger) 2020-02-09 12:46:18 +0530