330 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Vladislav Nechakhin	90db8b0f11	Update exif_imagetype bypass	2019-02-07 14:59:22 +07:00
Vladislav Nechakhin	7877647db1	Update exif_imagetype bypass	2019-02-07 14:51:03 +07:00
Swissky	357f8a69a8	Merge pull request #38 from n3v4/master ... Add exif_imagetype bypass	2019-02-02 11:36:22 +01:00
Vladislav Nechakhin	b30ac4e5bb	Add exif_imagetype bypass	2019-02-02 17:29:04 +07:00
Swissky	ffde81e2c0	Merge pull request #37 from marcan2020/patch-1 ... Update MSSQL Command execution	2019-01-29 23:14:09 +01:00
marcan2020	7068cb6edc	Update MSSQL Command execution	2019-01-29 15:25:25 -05:00
Swissky	20bf52eb6a	Bugfix 3 - removing the "-" in SSRF	2019-01-28 20:35:28 +01:00
Swissky	1f502ce20d	Bugfix 2 - Fixing git mess	2019-01-28 20:32:43 +01:00
Swissky	b9f2fe367c	Bugfix - Errors in stashed changes	2019-01-28 20:27:45 +01:00
Swissky	cd2d76d538	Merge pull request #36 from ThunderSon/patch-1 ... fead: add powerless repo to the tools	2019-01-28 08:16:38 +01:00
ThunderSon	99857a714f	fead: add powerless repo to the tools	2019-01-27 20:13:06 +02:00
Swissky	e07a654080	Command injection renamed + sudo/doas privesc	2019-01-22 21:45:41 +01:00
Swissky	4db45a263a	MSSQL union based + Windows Runas	2019-01-20 16:41:46 +01:00
Swissky	22c82cb277	Merge pull request #35 from noraj/patch-1 ... XSS using base64 encoded href data in a link	2019-01-17 19:54:37 +01:00
Swissky	ab6535c6d9	Bugfix picture SSRF	2019-01-13 22:28:49 +01:00
Swissky	1547338f84	SSRF exploitation and minor rewritting	2019-01-13 22:27:11 +01:00
Swissky	3bcd3d1b3c	SUID & Capabilities	2019-01-13 22:05:39 +01:00
Swissky	0070ac5dc4	Phar PHP shell files	2019-01-10 22:36:30 +01:00
Alexandre ZANNI	c7a292c19d	XSS using base64 encoded href data in a link	2019-01-10 18:24:43 +01:00
Swissky	ea0bddc18a	Windows RCE wildcard + XSS UI redressing	2019-01-08 20:49:05 +01:00
Swissky	2e3aef1a19	Shell IPv6 + Sandbox credential	2019-01-07 18:15:45 +01:00
Swissky	8b39647de6	AWS S3 and Open redirect rewritten	2018-12-29 13:05:29 +01:00
Swissky	67c644a300	Directory traversal / File inclusion rewritten	2018-12-28 00:27:15 +01:00
Swissky	e480c9358d	SQL wildcard '_' + CSV injection reverse shell	2018-12-26 01:02:17 +01:00
Swissky	bd97c0be86	README update + Typo fix in Active Directory	2018-12-25 20:41:43 +01:00
Swissky	d57d59eca7	NTLMv2 hash capturing, cracking, replaying	2018-12-25 20:35:39 +01:00
Swissky	d5478d1fd6	AWS Pacu and sections + Kerberoasting details	2018-12-25 19:38:37 +01:00
Swissky	82d4ff6c1d	References added based on @ngalongc bug-bounty-references	2018-12-25 16:10:15 +01:00
Swissky	b9efdb52d3	Linux - PrivEsc - First draft	2018-12-25 15:51:11 +01:00
Swissky	38c3bfbd9f	Windows Priv Esc - Unquoted Path, Password looting and Powershell version	2018-12-25 15:19:45 +01:00
Swissky	cdc3b5e080	XXE references + summary	2018-12-25 12:08:32 +01:00
Swissky	c25af52316	Blind XSS Angular JS	2018-12-24 15:09:43 +01:00
Swissky	a6475a19d9	Adding references sectio	2018-12-24 15:02:50 +01:00
Swissky	9c529535a5	CSRF - Fix image	2018-12-24 14:17:49 +01:00
Swissky	9c878f9b09	CSRF - First draft	2018-12-24 14:14:51 +01:00
Swissky	b4aff1a826	Architecture - Files/Intruder/Images and README + template	2018-12-23 00:45:45 +01:00
Swissky	e096d10a30	Merge pull request #34 from Fisjkars/master ... Add Springboot actuator intruder	2018-12-18 14:03:22 +01:00
Maxime Escourbiac	b59e24312e	Update Springboot readme	2018-12-18 11:18:50 +01:00
Fisjkars	5b7a3a95d3	Add Springboot Actuator management interface ... new file: Insecure management interface/README.md new file: Insecure management interface/intruders/springboot_actuator.txt	2018-12-18 11:05:15 +01:00
Swissky	69c1d601fa	Kerberoasting + SQLmap write SSH key	2018-12-15 00:51:33 +01:00
Swissky	8403068681	Merge pull request #32 from Meatballs1/Meatballs1-patch-1 ... Busybox httpd.conf file upload payload	2018-12-14 10:25:04 +03:00
Meatballs1	20c6bb2299	Update httpd.conf	2018-12-14 00:03:50 +00:00
Meatballs1	1d6b34ace5	Create README.md	2018-12-14 00:02:58 +00:00
Meatballs1	f1fec1c952	Create shellymcshellface.sh	2018-12-13 23:58:24 +00:00
Meatballs1	1e4e04831b	Create httpd.conf	2018-12-13 23:56:10 +00:00
Swissky	68325c8b98	Insecure deserialization Python	2018-11-27 23:04:17 +01:00
Swissky	c8d7575ba3	Minor edit in deserialization PHP and type juggling	2018-11-26 23:35:43 +01:00
Swissky	521d61d956	Attacks details + Summary JWT + XXE adjustments	2018-11-26 00:25:06 +01:00
Swissky	928a454531	Blind XSS endpoint + SSRF Google + Nmap subdomains	2018-11-25 15:44:17 +01:00
Swissky	b34cff5a74	XXE in docx, pptx, .. : Open XML files	2018-11-24 15:50:43 +01:00