Merge branch 'master' of github.com:EdOverflow/bugbounty-cheatsheet

This commit is contained in:
EdOverflow 2017-07-14 09:10:44 +01:00
commit 1351147c92

View file

@ -40,6 +40,12 @@ Note: This kind of depends on what security level the application is set to. See
$.get('http://sakurity.com/jqueryxss')
```
**URL verification bypasses (works without `	` too)**
```html
javas	cript://www.google.com/%0Aalert(1)
```
## SQLI
**Akamai Kona Bypass**
@ -137,15 +143,11 @@ If the target is running their application in debug mode you might be able to ru
## Open Redirect
```
/google.com
/%09/google.com
```
```
%09/google.com
```
```
%5cgoogle.com
/%5cgoogle.com
```
```