forked from swisskyrepo/PayloadsAllTheThings
-
Notifications
You must be signed in to change notification settings - Fork 3
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
ee334f9
commit 21d1fe7
Showing
328 changed files
with
199 additions
and
1 deletion.
There are no files selected for viewing
File renamed without changes.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,33 @@ | ||
# Vulnerability Title | ||
|
||
> Vulnerability description - reference | ||
Tools: | ||
|
||
- [Tool name - description](https://example.com) | ||
|
||
## Summary | ||
|
||
* [Something](#something) | ||
* [Something](#something) | ||
* [Subentry 1](#sub1) | ||
* [Subentry 2](#sub2) | ||
|
||
## Something | ||
|
||
Quick explanation | ||
|
||
```powershell | ||
Exploit | ||
``` | ||
|
||
Abhay Bhargav | ||
https://twitter.com/abhaybhargav/status/1080034019230842880 | ||
|
||
@abhaybhargav | ||
1 janv. | ||
Protip: When bughunting a #AWS #Lambda function, remember that the metadata objects are env-vars. Escalate privs after RCE with envvars. In this screenshot have a function that's vulnerable to a deserialization vuln (RCE) through which I have dumped the envvars with secrets | ||
|
||
## References | ||
|
||
- [Blog title - Author, Date](https://example.com) |
Binary file added
BIN
+48.2 KB
FIX_BuildPDF/0_gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-README.md.pdf
Binary file not shown.
Binary file not shown.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,35 @@ | ||
# Vulnerability Title | ||
|
||
> Vulnerability description - reference | ||
Tools: | ||
|
||
- [Tool name - description](https://example.com) | ||
|
||
## Summary | ||
|
||
* [Something](#something) | ||
* [Something](#something) | ||
* [Subentry 1](#sub1) | ||
* [Subentry 2](#sub2) | ||
|
||
## Something | ||
|
||
Quick explanation | ||
|
||
```powershell | ||
Exploit | ||
``` | ||
|
||
## References | ||
|
||
- [OneLogin authentication bypass on WordPress sites via XMLRPC in Uber](https://hackerone.com/reports/138869) by Jouko Pynnönen (jouko) | ||
- [2FA PayPal Bypass](https://henryhoggard.co.uk/blog/Paypal-2FA-Bypass) by henryhoggard | ||
- [SAML Bug in Github worth 15000](http://www.economyofmechanism.com/github-saml.html) | ||
- [Authentication bypass on Airbnb via OAuth tokens theft](https://www.arneswinnen.net/2017/06/authentication-bypass-on-airbnb-via-oauth-tokens-theft/) | ||
- [Uber Login CSRF + Open Redirect -> Account Takeover at Uber](http://ngailong.com/uber-login-csrf-open-redirect-account-takeover/) | ||
- [Administrative Panel Access](http://c0rni3sm.blogspot.hk/2017/08/accidentally-typo-to-bypass.html?m=1) by c0rni3sm | ||
- [Uber Bug Bounty: Gaining Access To An Internal Chat System](http://blog.mish.re/index.php/2017/09/06/uber-bug-bounty-gaining-access-to-an-internal-chat-system/) by mishre | ||
- [Flickr Oauth Misconfiguration](https://mishresec.wordpress.com/2017/10/12/yahoo-bug-bounty-exploiting-oauth-misconfiguration-to-takeover-flickr-accounts/) by mishre | ||
- [Slack SAML authentication bypass](http://blog.intothesymmetry.com/2017/10/slack-saml-authentication-bypass.html) by Antonio Sanso | ||
- [Shopify admin authentication bypass using partners.shopify.com](https://hackerone.com/reports/270981) by uzsunny |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,38 @@ | ||
# Vulnerability Title | ||
|
||
> Vulnerability description - reference | ||
Tools: | ||
|
||
- [Tool name - description](https://example.com) | ||
|
||
## Summary | ||
|
||
* [Something](#something) | ||
* [Something](#something) | ||
* [Subentry 1](#sub1) | ||
* [Subentry 2](#sub2) | ||
|
||
## Something | ||
|
||
Quick explanation | ||
|
||
```powershell | ||
Exploit | ||
``` | ||
|
||
## References | ||
|
||
- [Web Authentication Endpoint Credentials Brute-Force Vulnerability](https://hackerone.com/reports/127844) by Arne Swinnen | ||
- [InstaBrute: Two Ways to Brute-force Instagram Account Credentials](https://www.arneswinnen.net/2016/05/instabrute-two-ways-to-brute-force-instagram-account-credentials/) by Arne Swinnen | ||
- [How I Could Compromise 4% (Locked) Instagram Accounts](https://www.arneswinnen.net/2016/03/how-i-could-compromise-4-locked-instagram-accounts/) by Arne Swinnen | ||
- [Possibility to brute force invite codes in riders.uber.com](https://hackerone.com/reports/125505) by r0t | ||
- [Brute-Forcing invite codes in partners.uber.com](https://hackerone.com/reports/144616) by Efkan Gökbaş (mefkan) | ||
- [How I could have hacked all Facebook accounts](http://www.anandpraka.sh/2016/03/how-i-could-have-hacked-your-facebook.html) by Anand Prakash | ||
- [Facebook Account Take Over by using SMS verification code, not accessible by now, may get update from author later](http://arunsureshkumar.me/index.php/2016/04/24/facebook-account-take-over/) by Arun Sureshkumar | ||
- [SQL injection in Wordpress Plugin Huge IT Video Gallery in Uber](https://hackerone.com/reports/125932) by glc | ||
- [SQL Injection on sctrack.email.uber.com.cn](https://hackerone.com/reports/150156) by Orange Tsai | ||
- [Yahoo – Root Access SQL Injection – tw.yahoo.com](http://buer.haus/2015/01/15/yahoo-root-access-sql-injection-tw-yahoo-com/) by Brett Buerhaus | ||
- [Multiple vulnerabilities in a WordPress plugin at drive.uber.com](https://hackerone.com/reports/135288) by Abood Nour (syndr0me) | ||
- [GitHub Enterprise SQL Injection](http://blog.orange.tw/2017/01/bug-bounty-github-enterprise-sql-injection.html) by Orange | ||
- [Yahoo SQL Injection to Remote Code Exection to Root Privilege](http://www.sec-down.com/wordpress/?p=494) by Ebrahim Hegazy |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,29 @@ | ||
# Vulnerability Title | ||
|
||
> Vulnerability description - reference | ||
Tools: | ||
|
||
- [Tool name - description](https://example.com) | ||
|
||
## Summary | ||
|
||
* [Something](#something) | ||
* [Something](#something) | ||
* [Subentry 1](#sub1) | ||
* [Subentry 2](#sub2) | ||
|
||
## Something | ||
|
||
Quick explanation | ||
|
||
```powershell | ||
Exploit | ||
``` | ||
|
||
## References | ||
|
||
- [How I Could Steal Money from Instagram, Google and Microsoft](https://www.arneswinnen.net/2016/07/how-i-could-steal-money-from-instagram-google-and-microsoft/) by Arne Swinnen | ||
- [How I could have removed all your Facebook notes](http://www.anandpraka.sh/2015/12/summary-this-blog-post-is-about.html) | ||
- [Facebook - bypass ads account's roles vulnerability 2015](http://blog.darabi.me/2015/03/facebook-bypass-ads-account-roles.html) by POUYA DARABI | ||
- [Uber Ride for Free](http://www.anandpraka.sh/2017/03/how-anyone-could-have-used-uber-to-ride.html) by anand praka |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,28 @@ | ||
# Vulnerability Title | ||
|
||
> Vulnerability description - reference | ||
Tools: | ||
|
||
- [Tool name - description](https://example.com) | ||
|
||
## Summary | ||
|
||
* [Something](#something) | ||
* [Something](#something) | ||
* [Subentry 1](#sub1) | ||
* [Subentry 2](#sub2) | ||
|
||
## Something | ||
|
||
Quick explanation | ||
|
||
```powershell | ||
Exploit | ||
``` | ||
|
||
## References | ||
|
||
- [Race conditions on Facebook, DigitalOcean and others (fixed)](http://josipfranjkovic.blogspot.hk/2015/04/race-conditions-on-facebook.html) by Josip Franjković | ||
- [Race Conditions in Popular reports feature in HackerOne](https://hackerone.com/reports/146845) by Fábio Pires (shmoo) | ||
- [Hacking Starbuck for unlimited money](https://sakurity.com/blog/2015/05/21/starbucks.html) by Egor Homakov |
File renamed without changes.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,9 @@ | ||
# GitPrint from Payload | ||
|
||
find . -name "*.md" | sed "s/\.\///g" | sort | xargs -I{} wget --content-disposition "https://gitprint.com/swisskyrepo/PayloadsAllTheThings/blob/master/"{}"?download" | ||
pdfjoin *.pdf | ||
|
||
|
||
# NOTE : | ||
# check for 502 errors from gitprint | ||
# XSS and Mimikatz don't work with Gitprint ;. |
Binary file added
BIN
+50.3 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-AWS-20Amazon-2.pdf
Binary file not shown.
Binary file added
BIN
+41 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-CRLF-20injecti.pdf
Binary file not shown.
Binary file added
BIN
+32.3 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-CSV-20injectio.pdf
Binary file not shown.
Binary file added
BIN
+24.4 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-CVE-20Exploits.pdf
Binary file not shown.
Binary file added
BIN
+47.5 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-Insecured-20so.pdf
Binary file not shown.
Binary file added
BIN
+45.4 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-Java-20Deseria.pdf
Binary file not shown.
Binary file added
BIN
+32.6 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-LDAP-20injecti.pdf
Binary file not shown.
Binary file added
BIN
+30.9 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-LaTeX-20inject.pdf
Binary file not shown.
Binary file added
BIN
+86.8 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-Methodology-20.pdf
Binary file not shown.
Binary file added
BIN
+78.7 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-Methodology-201.pdf
Binary file not shown.
Binary file added
BIN
+46.7 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-Methodology-202.pdf
Binary file not shown.
Binary file added
BIN
+36.5 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-Methodology-203.pdf
Binary file not shown.
Binary file added
BIN
+33.2 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-Methodology-205.pdf
Binary file not shown.
Binary file added
BIN
+45.6 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-Methodology-206.pdf
Binary file not shown.
Binary file added
BIN
+39 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-NoSQL-20inject.pdf
Binary file not shown.
Binary file added
BIN
+43.5 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-OAuth-README.m.pdf
Binary file not shown.
Binary file added
BIN
+43.5 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-Open-20redirec.pdf
Binary file not shown.
Binary file added
BIN
+35.5 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-PHP-20serializ.pdf
Binary file not shown.
Binary file added
BIN
+48.2 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-Remote-20comma.pdf
Binary file not shown.
Binary file added
BIN
+46.1 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-SQL-20injectio.pdf
Binary file not shown.
Binary file added
BIN
+41.5 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-SQL-20injectio.pdf.1
Binary file not shown.
Binary file added
BIN
+16.6 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-SQL-20injectio.pdf.2
Binary file not shown.
Binary file added
BIN
+83.3 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-SQL-20injectio.pdf.3
Binary file not shown.
Binary file added
BIN
+36.2 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-SQL-20injectio.pdf.4
Binary file not shown.
Binary file added
BIN
+78.2 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-SSRF-20injecti.pdf
Binary file not shown.
Binary file added
BIN
+60.9 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-Server-20Side-.pdf
Binary file not shown.
Binary file added
BIN
+26.6 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-Tar-20commands.pdf
Binary file not shown.
Binary file added
BIN
+35.9 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-Upload-20insec.pdf
Binary file not shown.
Binary file added
BIN
+30.8 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-Upload-20insec.pdf.1
Binary file not shown.
Binary file added
BIN
+32.8 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-Upload-20insec.pdf.2
Binary file not shown.
Binary file added
BIN
+27 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-Web-20cache-20.pdf
Binary file not shown.
Binary file added
BIN
+29.7 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-XPATH-20inject.pdf
Binary file not shown.
Binary file added
BIN
+35.3 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-XSS-20injectio.pdf.1
Binary file not shown.
Binary file added
BIN
+63.7 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-XSS-20injectio0.pdf
Binary file not shown.
Binary file added
BIN
+45 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-XSS-20injectio2.pdf
Binary file not shown.
Binary file added
BIN
+64.8 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-XSS-20injectio3.pdf
Binary file not shown.
Binary file added
BIN
+21.7 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-XSS-20injectio4.pdf
Binary file not shown.
Binary file added
BIN
+31.5 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-XSS-20injectio_1.pdf
Binary file not shown.
Binary file added
BIN
+41 KB
FIX_BuildPDF/gitprint__-swisskyrepo-PayloadsAllTheThings-blob-master-XXE-20injectio.pdf
Binary file not shown.
File renamed without changes.
File renamed without changes.
File renamed without changes
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes
File renamed without changes
File renamed without changes
File renamed without changes
File renamed without changes.
File renamed without changes
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes
File renamed without changes
File renamed without changes
File renamed without changes
File renamed without changes
File renamed without changes.
File renamed without changes
File renamed without changes
File renamed without changes.
File renamed without changes.
File renamed without changes
File renamed without changes.
File renamed without changes.
File renamed without changes
File renamed without changes
File renamed without changes
File renamed without changes.
File renamed without changes.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1 @@ | ||
/etc/passwd |
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes
File renamed without changes
File renamed without changes
File renamed without changes
File renamed without changes
File renamed without changes
File renamed without changes
File renamed without changes
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes
File renamed without changes
File renamed without changes
File renamed without changes.
File renamed without changes.
File renamed without changes
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes
File renamed without changes
File renamed without changes
File renamed without changes
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes
Oops, something went wrong.