Find a file
2019-03-07 15:27:54 +01:00
_template_vuln Fix name's capitalization 2019-03-07 00:07:55 +01:00
AWS Amazon Bucket S3 Fix name's capitalization 2019-03-07 00:07:55 +01:00
Command Injection Fix name's capitalization 2019-03-07 00:07:55 +01:00
CRLF Injection Fix name's capitalization 2019-03-07 00:07:55 +01:00
CSRF Injection Fix name's capitalization 2019-03-07 00:07:55 +01:00
CSV Injection Fix name's capitalization 2019-03-07 00:07:55 +01:00
CVE Exploits Fix name's capitalization 2019-03-07 00:07:55 +01:00
Directory Traversal Fix name's capitalization 2019-03-07 00:07:55 +01:00
File Inclusion Fix name's capitalization 2019-03-07 00:07:55 +01:00
GraphQL Injection Fix name's capitalization 2019-03-07 00:07:55 +01:00
Insecure Deserialization Fix name's capitalization 2019-03-07 00:07:55 +01:00
Insecure Direct Object References Fix name's capitalization 2019-03-07 00:07:55 +01:00
Insecure Management Interface Fix name's capitalization 2019-03-07 00:07:55 +01:00
Insecure Source Code Management Fix name's capitalization 2019-03-07 00:07:55 +01:00
JSON Web Token Fix name's capitalization 2019-03-07 00:07:55 +01:00
LaTeX Injection Fix name's capitalization 2019-03-07 00:07:55 +01:00
LDAP Injection Fix name's capitalization 2019-03-07 00:07:55 +01:00
Methodology and Resources Linux PrivEsc - LXD Group 2019-03-07 15:27:54 +01:00
NoSQL Injection Fix name's capitalization 2019-03-07 00:07:55 +01:00
OAuth Fix name's capitalization 2019-03-07 00:07:55 +01:00
Open Redirect Fix name's capitalization 2019-03-07 00:07:55 +01:00
Server Side Request Forgery Fix name's capitalization 2019-03-07 00:07:55 +01:00
Server Side Template Injection Fix name's capitalization 2019-03-07 00:07:55 +01:00
SQL Injection Fix name's capitalization 2019-03-07 00:07:55 +01:00
Type Juggling Fix name's capitalization 2019-03-07 00:07:55 +01:00
Upload Insecure Files Fix name's capitalization 2019-03-07 00:07:55 +01:00
Web Cache Deception Fix name's capitalization 2019-03-07 00:07:55 +01:00
Web Sockets Fix name's capitalization 2019-03-07 00:07:55 +01:00
XPATH Injection Fix name's capitalization 2019-03-07 00:07:55 +01:00
XSS Injection Fix name's capitalization 2019-03-07 00:07:55 +01:00
XXE Injection Fix name's capitalization 2019-03-07 00:07:55 +01:00
.gitignore Shell IPv6 + Sandbox credential 2019-01-07 18:15:45 +01:00
README.md Fix name's capitalization 2019-03-07 00:07:55 +01:00

Payloads All The Things

A list of useful payloads and bypasses for Web Application Security. Feel free to improve with your payloads and techniques ! I <3 pull requests :)

You can also contribute with a beer IRL or with buymeacoffee.com

Coffee

Every section contains the following files, you can use the _template_vuln folder to create a new chapter:

  • README.md - vulnerability description and how to exploit it
  • Intruder - a set of files to give to Burp Intruder
  • Images - pictures for the README.md
  • Files - some files referenced in the README.md

You might also like :

Try Harder

Ever wonder where you can use your knowledge ? The following list will help you find "targets" to improve your skills.

Book's list

Grab a book and relax, these ones are the best security books (in my opinion).

More resources

Blogs/Websites

Youtube