Commit Graph

Select branches

Hide Pull Requests

gh-pages

master

#10

#100

#101

#102

#103

#105

#106

#107

#108

#109

#110

#111

#112

#113

#114

#115

#116

#117

#118

#119

#120

#121

#122

#123

#124

#125

#127

#128

#129

#13

#130

#131

#132

#134

#135

#136

#137

#138

#139

#142

#143

#145

#146

#148

#149

#15

#150

#151

#152

#154

#155

#156

#157

#158

#159

#162

#163

#164

#165

#166

#167

#169

#17

#171

#172

#173

#174

#175

#176

#178

#179

#18

#180

#181

#182

#183

#186

#187

#188

#19

#190

#191

#192

#193

#196

#197

#198

#2

#20

#200

#201

#202

#204

#206

#207

#208

#209

#21

#210

#213

#214

#215

#216

#217

#218

#219

#22

#220

#221

#223

#224

#225

#226

#227

#229

#23

#230

#231

#233

#234

#235

#236

#237

#238

#239

#24

#240

#241

#242

#243

#244

#246

#247

#248

#249

#25

#250

#251

#253

#254

#255

#257

#258

#259

#26

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#27

#270

#271

#272

#273

#274

#275

#276

#277

#278

#279

#28

#280

#281

#282

#283

#284

#285

#287

#288

#289

#29

#290

#291

#292

#293

#294

#296

#297

#3

#30

#302

#304

#305

#306

#307

#308

#309

#310

#311

#312

#313

#314

#315

#316

#319

#32

#320

#322

#323

#324

#325

#326

#327

#328

#329

#330

#331

#332

#333

#334

#335

#336

#338

#339

#34

#341

#343

#345

#346

#348

#349

#35

#350

#351

#352

#353

#354

#355

#356

#358

#36

#360

#361

#362

#365

#366

#367

#37

#370

#371

#374

#375

#376

#377

#378

#379

#38

#381

#383

#384

#386

#387

#388

#389

#39

#395

#396

#397

#398

#399

#40

#400

#401

#402

#403

#404

#405

#406

#407

#408

#409

#41

#410

#411

#412

#413

#414

#415

#416

#417

#418

#419

#42

#420

#421

#422

#423

#424

#425

#426

#427

#428

#429

#43

#430

#431

#432

#433

#434

#435

#436

#437

#438

#439

#44

#440

#441

#442

#443

#444

#445

#446

#447

#448

#449

#45

#450

#451

#452

#453

#454

#455

#456

#457

#458

#46

#460

#461

#462

#463

#464

#465

#466

#467

#468

#469

#47

#470

#471

#472

#473

#474

#475

#476

#477

#478

#479

#48

#480

#481

#482

#483

#484

#485

#486

#487

#488

#489

#49

#490

#491

#492

#493

#494

#495

#496

#497

#498

#499

#50

#500

#501

#502

#503

#504

#505

#506

#507

#508

#509

#510

#511

#512

#513

#514

#515

#516

#517

#518

#519

#52

#520

#521

#522

#523

#524

#525

#526

#527

#528

#529

#53

#530

#531

#532

#533

#534

#535

#536

#537

#538

#539

#54

#540

#541

#541

#542

#543

#544

#545

#546

#547

#548

#549

#55

#550

#551

#552

#553

#554

#555

#556

#557

#558

#559

#56

#560

#561

#562

#563

#564

#565

#566

#567

#568

#569

#57

#570

#571

#572

#573

#574

#575

#576

#577

#578

#579

#58

#580

#580

#581

#582

#583

#584

#585

#586

#587

#588

#589

#590

#591

#592

#593

#594

#595

#596

#597

#598

#599

#6

#60

#600

#601

#602

#603

#604

#604

#605

#606

#607

#608

#609

#61

#610

#611

#612

#613

#614

#615

#616

#617

#618

#619

#62

#620

#621

#622

#623

#624

#625

#626

#627

#628

#629

#63

#630

#631

#631

#632

#633

#634

#635

#636

#637

#638

#639

#64

#640

#641

#642

#643

#644

#645

#646

#647

#648

#649

#65

#650

#651

#652

#653

#654

#655

#655

#656

#657

#658

#659

#66

#660

#661

#662

#663

#664

#665

#666

#667

#668

#669

#67

#670

#671

#672

#673

#674

#675

#676

#677

#677

#678

#679

#680

#681

#682

#683

#684

#685

#686

#687

#688

#689

#690

#691

#692

#693

#694

#695

#696

#697

#698

#699

#7

#70

#700

#701

#702

#703

#704

#705

#706

#706

#707

#708

#709

#71

#710

#711

#712

#713

#714

#715

#716

#717

#718

#719

#719

#72

#720

#720

#721

#722

#723

#724

#725

#726

#727

#728

#729

#73

#730

#731

#732

#733

#734

#735

#736

#736

#737

#738

#739

#740

#740

#741

#741

#742

#743

#744

#745

#746

#747

#748

#749

#75

#750

#751

#752

#753

#754

#755

#756

#757

#758

#759

#76

#760

#760

#761

#762

#763

#763

#764

#765

#766

#766

#767

#768

#769

#770

#770

#771

#772

#773

#774

#774

#775

#775

#776

#776

#79

#8

#8

#82

#83

#85

#86

#87

#88

#92

#93

#94

#96

#97

#98

#99

1.0

2.0

2.1

3.0

4.0

4.1

Mono Color

• 200a2d38d8
  
  Fix fake xss Anton Lopanitsyn 2019-02-11 09:34:13 +0300
• f2273f5cce PrivExchange attack Swissky 2019-02-10 19:51:54 +0100
• 8c1c35789d SQLmap tamper update Swissky 2019-02-10 19:07:27 +0100
• 1c37517bf3 .git/index file parsing + fix CSRF payload typo Swissky 2019-02-07 23:33:47 +0100
• 8ff2aa8aff
  
  Merge pull request #39 from n3v4/master Swissky 2019-02-07 14:01:43 +0100
• 90db8b0f11 Update exif_imagetype bypass Vladislav Nechakhin 2019-02-07 14:59:22 +0700
• 7877647db1 Update exif_imagetype bypass Vladislav Nechakhin 2019-02-07 14:51:03 +0700
• 357f8a69a8
  
  Merge pull request #38 from n3v4/master Swissky 2019-02-02 11:36:22 +0100
• b30ac4e5bb Add exif_imagetype bypass Vladislav Nechakhin 2019-02-02 17:29:04 +0700
• ffde81e2c0
  
  Merge pull request #37 from marcan2020/patch-1 Swissky 2019-01-29 23:14:09 +0100
• 7068cb6edc
  
  Update MSSQL Command execution marcan2020 2019-01-29 15:25:25 -0500
• 20bf52eb6a Bugfix 3 - removing the "-" in SSRF Swissky 2019-01-28 20:35:28 +0100
• 1f502ce20d Bugfix 2 - Fixing git mess Swissky 2019-01-28 20:32:43 +0100
• b9f2fe367c Bugfix - Errors in stashed changes Swissky 2019-01-28 20:27:45 +0100
• cd2d76d538
  
  Merge pull request #36 from ThunderSon/patch-1 Swissky 2019-01-28 08:16:38 +0100
• 99857a714f
  
  fead: add powerless repo to the tools ThunderSon 2019-01-27 20:13:06 +0200
• e07a654080 Command injection renamed + sudo/doas privesc Swissky 2019-01-22 21:45:41 +0100
• 4db45a263a MSSQL union based + Windows Runas Swissky 2019-01-20 16:41:46 +0100
• 22c82cb277
  
  Merge pull request #35 from noraj/patch-1 Swissky 2019-01-17 19:54:37 +0100
• ab6535c6d9 Bugfix picture SSRF Swissky 2019-01-13 22:28:49 +0100
• 1547338f84 SSRF exploitation and minor rewritting Swissky 2019-01-13 22:27:11 +0100
• 3bcd3d1b3c SUID & Capabilities Swissky 2019-01-13 22:05:39 +0100
• 0070ac5dc4 Phar PHP shell files Swissky 2019-01-10 22:36:30 +0100
• c7a292c19d
  
  XSS using base64 encoded href data in a link Alexandre ZANNI 2019-01-10 18:24:43 +0100
• ea0bddc18a Windows RCE wildcard + XSS UI redressing Swissky 2019-01-08 20:49:05 +0100
• 2e3aef1a19 Shell IPv6 + Sandbox credential Swissky 2019-01-07 18:15:45 +0100
• 8b39647de6 AWS S3 and Open redirect rewritten Swissky 2018-12-29 13:05:29 +0100
• 67c644a300 Directory traversal / File inclusion rewritten Swissky 2018-12-28 00:27:15 +0100
• e480c9358d SQL wildcard '_' + CSV injection reverse shell Swissky 2018-12-26 01:02:17 +0100
• bd97c0be86 README update + Typo fix in Active Directory Swissky 2018-12-25 20:41:43 +0100
• d57d59eca7 NTLMv2 hash capturing, cracking, replaying Swissky 2018-12-25 20:35:39 +0100
• d5478d1fd6 AWS Pacu and sections + Kerberoasting details Swissky 2018-12-25 19:38:37 +0100
• 82d4ff6c1d References added based on @ngalongc bug-bounty-references Swissky 2018-12-25 16:10:15 +0100
• b9efdb52d3 Linux - PrivEsc - First draft Swissky 2018-12-25 15:51:11 +0100
• 38c3bfbd9f Windows Priv Esc - Unquoted Path, Password looting and Powershell version Swissky 2018-12-25 15:19:45 +0100
• cdc3b5e080 XXE references + summary Swissky 2018-12-25 12:08:32 +0100
• c25af52316 Blind XSS Angular JS Swissky 2018-12-24 15:09:43 +0100
• a6475a19d9 Adding references sectio Swissky 2018-12-24 15:02:50 +0100
• 9c529535a5 CSRF - Fix image Swissky 2018-12-24 14:17:49 +0100
• 9c878f9b09 CSRF - First draft Swissky 2018-12-24 14:14:51 +0100
• b4aff1a826 Architecture - Files/Intruder/Images and README + template Swissky 2018-12-23 00:45:45 +0100
• e096d10a30
  
  Merge pull request #34 from Fisjkars/master Swissky 2018-12-18 14:03:22 +0100
• b59e24312e
  
  Update Springboot readme Maxime Escourbiac 2018-12-18 11:18:50 +0100
• 5b7a3a95d3 Add Springboot Actuator management interface Fisjkars 2018-12-18 11:05:15 +0100
• 69c1d601fa Kerberoasting + SQLmap write SSH key Swissky 2018-12-15 00:51:33 +0100
• 8403068681
  
  Merge pull request #32 from Meatballs1/Meatballs1-patch-1 Swissky 2018-12-14 10:25:04 +0300
• 20c6bb2299
  
  Update httpd.conf Meatballs1 2018-12-14 00:03:50 +0000
• 1d6b34ace5
  
  Create README.md Meatballs1 2018-12-14 00:02:58 +0000
• f1fec1c952
  
  Create shellymcshellface.sh Meatballs1 2018-12-13 23:58:24 +0000
• 1e4e04831b
  
  Create httpd.conf Meatballs1 2018-12-13 23:56:10 +0000
• 68325c8b98 Insecure deserialization Python Swissky 2018-11-27 23:04:17 +0100
• c8d7575ba3 Minor edit in deserialization PHP and type juggling Swissky 2018-11-26 23:35:43 +0100
• 521d61d956 Attacks details + Summary JWT + XXE adjustments Swissky 2018-11-26 00:25:06 +0100
• 928a454531 Blind XSS endpoint + SSRF Google + Nmap subdomains Swissky 2018-11-25 15:44:17 +0100
• b34cff5a74 XXE in docx, pptx, .. : Open XML files Swissky 2018-11-24 15:50:43 +0100
• 1225a9a23d Metasploit Cheatsheet Swissky 2018-11-24 15:32:44 +0100
• 565b40d177 reGeorg + Meterpreter socks + S3 trick name Swissky 2018-11-24 13:49:08 +0100
• 0309a2efbd
  
  Merge pull request #30 from m-veljkovic/master Swissky 2018-11-19 14:01:44 +0100
• 59d0020c86
  
  Update README.md Milan Veljkovic 2018-11-19 12:45:01 +0100
• a0f8e846fa Blind XSS - XSS Hunter, Sleepy Puppy etc Swissky 2018-11-18 15:37:01 +0100
• fd99da6c06 Insecure source code - harvesting secrets Swissky 2018-11-18 14:12:05 +0100
• 5c1d025b03 README - CVE update Swissky 2018-11-18 13:40:47 +0100
• 2799653083 add Apache Struts 2.md hktalent 2018-11-18 14:36:37 +0800
• 907d14b62a add Apache Struts 2.md hktalent 2018-11-18 14:32:42 +0800