Mirrors/PayloadsAllTheThings
2
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-12-13 14:52:53 +00:00
Code Issues Projects Releases Packages Wiki Activity
Mirror of https://github.com/swisskyrepo/PayloadsAllTheThings
77 commits 2 branches 6 tags 66 MiB
Python 83.8%
Ruby 6.3%
ASP.NET 3.8%
XSLT 2.6%
Classic ASP 1.4%
Other 1.9%
Find a file
Swissky ab63a537e7 FFMpeg injection - Bypass and explanation
2017-06-28 22:45:36 +02:00
AWS Amazon Bucket S3 AWS Bucket : Listings open bucket/reading and access 2017-06-18 18:42:12 +02:00
CRLF injection CRLF injection updated 2017-05-29 20:41:05 +02:00
CSV injection Fix in juggling type + CSV injection 2016-10-20 10:50:12 +07:00
CVE Shellshock Heartbleed Struts2 CVE Struts RCE + AWS ls + RCE spaceless Windows + Methodology updated 2017-06-05 14:57:28 +02:00
Insecured source code management Git insecure files renamed + svn method added 2017-06-04 17:58:09 +02:00
NoSQL injection Methodology updated with RPCClient, User enumeration 2017-05-17 20:40:45 +02:00
OAuth XSS,SQL OAuth Updated 2016-12-04 01:03:59 +07:00
Open redirect Clean project - Renamed and added PHP juggling type 2016-10-20 10:22:24 +07:00
PHP include More payloads for XSS/SQL/LFI/Upload and XXE 2017-06-04 17:22:26 +02:00
PHP juggling type Fix in juggling type + CSV injection 2016-10-20 10:50:12 +07:00
PHP serialization PHP object injection 2016-10-20 11:02:19 +07:00
Remote commands execution CVE Struts RCE + AWS ls + RCE spaceless Windows + Methodology updated 2017-06-05 14:57:28 +02:00
SQL injection More payloads for XSS/SQL/LFI/Upload and XXE 2017-06-04 17:22:26 +02:00
SSRF injection SSRF updates and methodology aquatone tool 2017-06-17 23:20:24 +02:00
Tar commands execution Clean project - Renamed and added PHP juggling type 2016-10-20 10:22:24 +07:00
Template injections More payloads for XSS/SQL/LFI/Upload and XXE 2017-06-04 17:22:26 +02:00
Traversal directory Traversal Dir files + Updates XSS 2016-10-21 06:12:00 +07:00
Upload insecure files FFMpeg injection - Bypass and explanation 2017-06-28 22:45:36 +02:00
Web cache deception Typo fix in Web cache 2017-02-27 20:06:40 +01:00
XSS injection More payloads for XSS/SQL/LFI/Upload and XXE 2017-06-04 17:22:26 +02:00
XXE injections XXE via DTD and PHP Filter 2017-06-28 21:43:30 +02:00
.gitignore Methodology added, XSS payloads updated,little fix 2016-11-06 12:42:50 +07:00
Methodology_and_enumeration.md SSRF updates and methodology aquatone tool 2017-06-17 23:20:24 +02:00
README.md Methodology updated - Dorks, Subdomains, Nmap 2017-05-01 22:40:36 +02:00

README.md

Payloads All The Things

A list of useful payloads and bypasses for Web Application Security. Feel free to improve with your payloads and techniques ! I <3 pull requests :)

Tools

Docker

More resources

Book's list:

Blogs/Websites

Youtube

Practice

Bug Bounty