133 Commits

Author	SHA1	Message	Date
SirBroccoli	1f9975e782	Merge pull request #1308 from HackTricks-wiki/update_Beware_the_false_false_positive__how_to_distinguis_20250819_184719 ... Beware the false false‑positive how to distinguish HTTP pipe...	2025-08-20 18:02:08 +02:00
SirBroccoli	0a9d007403	Merge pull request #1310 from HackTricks-wiki/update_Marshal_madness__A_brief_history_of_Ruby_deseriali_20250820_063337 ... Marshal madness A brief history of Ruby deserialization expl...	2025-08-20 16:01:52 +02:00
SirBroccoli	b48c4084e5	Update README.md	2025-08-20 12:53:48 +02:00
carlospolop	e8f19acfe9	f	2025-08-20 10:56:12 +02:00
HackTricks News Bot	a919fe6dc4	Add content from: Marshal madness: A brief history of Ruby deserialization exp...	2025-08-20 06:36:55 +00:00
SirBroccoli	4172fc66f1	Merge pull request #1242 from HackTricks-wiki/research_update_src_pentesting-web_sql-injection_oracle-injection_20250805_162114 ... Research Update Enhanced src/pentesting-web/sql-injection/or...	2025-08-20 02:05:30 +02:00
carlospolop	2a97a31214	f	2025-08-19 23:49:07 +02:00
SirBroccoli	06d3a6fa31	Merge pull request #1253 from HackTricks-wiki/research_update_src_pentesting-web_xss-cross-site-scripting_iframes-in-xss-and-csp_20250807_014324 ... Research Update Enhanced src/pentesting-web/xss-cross-site-s...	2025-08-19 22:02:05 +02:00
HackTricks News Bot	6e1ab178f5	Add content from: Beware the false false‑positive: how to distinguish HTTP pip...	2025-08-19 18:58:27 +00:00
SirBroccoli	831661ebb6	Update iframes-in-xss-and-csp.md	2025-08-18 15:50:48 +02:00
HackTricks News Bot	5d3a70fc01	Add content from: From Support Ticket to Zero Day	2025-08-16 12:42:17 +00:00
SirBroccoli	c4207757ce	Merge pull request #1271 from HackTricks-wiki/research_update_src_pentesting-web_nosql-injection_20250811_082826 ... Research Update Enhanced src/pentesting-web/nosql-injection....	2025-08-14 02:05:20 +02:00
HackTricks News Bot	8af174c0ea	Add content from: Extraction of Synology Encrypted Archives - Pwn2Own Ireland ...	2025-08-11 12:49:04 +00:00
HackTricks News Bot	76c4ff33ed	Add content from: Research Update: Enhanced src/pentesting-web/nosql-injection...	2025-08-11 08:31:13 +00:00
SirBroccoli	358b8dcfa5	Merge pull request #1245 from HackTricks-wiki/research_update_src_pentesting-web_deserialization_exploiting-__viewstate-parameter_20250806_014331 ... Research Update Enhanced src/pentesting-web/deserialization/...	2025-08-10 20:01:59 +02:00
SirBroccoli	b22c60801c	Update exploiting-__viewstate-parameter.md	2025-08-10 14:29:54 +02:00
HackTricks News Bot	189ace9158	Add content from: Research Update: Enhanced src/pentesting-web/xss-cross-site-...	2025-08-07 01:45:59 +00:00
HackTricks News Bot	b5c7e9c7b5	Add content from: Critical Vulnerability Impacting Over 100K Sites Patched in ...	2025-08-06 18:32:46 +00:00
HackTricks News Bot	1018f5af23	Add content from: Research Update: Enhanced src/pentesting-web/deserialization...	2025-08-06 01:46:06 +00:00
HackTricks News Bot	1a50bdc177	Add content from: Research Update: Enhanced src/pentesting-web/sql-injection/o...	2025-08-05 16:24:44 +00:00
SirBroccoli	5fe8a54b20	Merge pull request #1217 from HackTricks-wiki/research_update_src_pentesting-web_xss-cross-site-scripting_dom-invader_20250731_014311 ... Research Update Enhanced src/pentesting-web/xss-cross-site-s...	2025-08-05 02:06:08 +02:00
SirBroccoli	ac8f184bff	Merge pull request #1224 from HackTricks-wiki/research_update_src_pentesting-web_json-xml-yaml-hacking_20250801_015159 ... Research Update Enhanced src/pentesting-web/json-xml-yaml-ha...	2025-08-04 22:01:55 +02:00
SirBroccoli	8e1ca72db1	Merge pull request #1227 from HackTricks-wiki/research_update_src_pentesting-web_xss-cross-site-scripting_pdf-injection_20250801_162631 ... Research Update Enhanced src/pentesting-web/xss-cross-site-s...	2025-08-04 20:01:58 +02:00
SirBroccoli	f2f590cee2	Merge pull request #1230 from HackTricks-wiki/research_update_src_pentesting-web_deserialization_nodejs-proto-prototype-pollution_client-side-prototype-pollution_20250802_162356 ... Research Update Enhanced src/pentesting-web/deserialization/...	2025-08-04 18:02:22 +02:00
SirBroccoli	500e9aa476	Update dom-invader.md	2025-08-04 11:47:40 +02:00
HackTricks News Bot	de44ea7065	Add content from: Research Update: Enhanced src/pentesting-web/deserialization...	2025-08-03 08:27:42 +00:00
HackTricks News Bot	d016b78d3d	Add content from: Research Update: Enhanced src/pentesting-web/deserialization...	2025-08-02 16:25:03 +00:00
HackTricks News Bot	200cd44508	Add content from: Research Update: Enhanced src/pentesting-web/xss-cross-site-...	2025-08-01 16:27:26 +00:00
HackTricks News Bot	ebd4800ae1	Add content from: Research Update: Enhanced src/pentesting-web/json-xml-yaml-h...	2025-08-01 01:53:55 +00:00
HackTricks News Bot	57208abfd4	Add content from: Research Update: Enhanced src/pentesting-web/xss-cross-site-...	2025-07-31 01:44:28 +00:00
HackTricks News Bot	b4496aea9a	Add content from: SQLMap: Testing SQL Database Vulnerabilities	2025-07-29 18:42:06 +00:00
SirBroccoli	c892f948e1	Merge pull request #1197 from HackTricks-wiki/update_YSoNet___NET_Deserialization_Payload_Generator_20250727_123821 ... YSoNet .NET Deserialization Payload Generator	2025-07-29 12:01:44 +02:00
SirBroccoli	4ab5c29ae3	Merge pull request #1181 from HackTricks-wiki/research_update_src_pentesting-web_deserialization_basic-java-deserialization-objectinputstream-readobject_20250724_162255 ... Research Update Enhanced src/pentesting-web/deserialization/...	2025-07-28 20:02:00 +02:00
HackTricks News Bot	22aa5b03a5	Add content from: YSoNet: .NET Deserialization Payload Generator	2025-07-27 12:39:35 +00:00
HackTricks News Bot	eb270d7e87	Add content from: CVE-2025-27136 – LocalS3 CreateBucketConfiguration XXE Injec...	2025-07-25 18:32:48 +00:00
HackTricks News Bot	e2cff2bd2c	Add content from: Research Update: Enhanced src/pentesting-web/deserialization...	2025-07-24 16:24:14 +00:00
HackTricks News Bot	a48ba411d6	Add content from: Research Update: Enhanced src/pentesting-web/xss-cross-site-...	2025-07-23 16:27:14 +00:00
SirBroccoli	5a4a275d89	Merge pull request #1166 from HackTricks-wiki/research_update_src_pentesting-web_web-vulnerabilities-methodology_20250721_162521 ... Research Update Enhanced src/pentesting-web/web-vulnerabilit...	2025-07-23 04:39:04 +02:00
SirBroccoli	105a29a015	Merge pull request #1165 from HackTricks-wiki/update_SharePoint_0-day_uncovered__CVE-2025-53770__20250721_124850 ... SharePoint 0-day uncovered (CVE-2025-53770)	2025-07-22 22:01:42 +02:00
SirBroccoli	0d133d3eb4	Update web-vulnerabilities-methodology.md	2025-07-22 10:33:52 +02:00
HackTricks News Bot	a94ce50af1	Add content from: Research Update: Enhanced src/pentesting-web/web-vulnerabili...	2025-07-21 16:28:13 +00:00
HackTricks News Bot	7731917ad5	Add content from: SharePoint 0-day uncovered (CVE-2025-53770)	2025-07-21 12:51:19 +00:00
HackTricks News Bot	95d597e7c0	Add content from: Research Update: Enhanced src/pentesting-web/ssrf-server-sid...	2025-07-19 01:31:27 +00:00
carlospolop	a57b661dde	f	2025-07-18 16:08:20 +02:00
HackTricks News Bot	683e7bb739	Add content from: Research Update: Enhanced src/pentesting-web/crlf-0d-0a.md	2025-07-16 01:42:58 +00:00
HackTricks News Bot	c3f4c8eaf6	Add content from: SugarCRM ≤ 14.0.0 (css/preview) LESS Code Injection Vulnerab...	2025-07-14 12:40:51 +00:00
SirBroccoli	5de2f07668	Merge pull request #1100 from HackTricks-wiki/update_Pre-auth_SQL_Injection_to_RCE_in_Fortinet_FortiWeb_20250711_182725 ... Pre-auth SQL Injection to RCE in Fortinet FortiWeb Fabric Co...	2025-07-14 10:34:17 +02:00
SirBroccoli	da3d1d6f49	Merge pull request #1099 from HackTricks-wiki/research_update_src_pentesting-web_http-connection-request-smuggling_20250711_162342 ... Research Update Enhanced src/pentesting-web/http-connection-...	2025-07-13 00:01:32 +02:00
SirBroccoli	b82c3738a1	Merge branch 'master' into research_update_src_pentesting-web_http-request-smuggling_request-smuggling-in-http-2-downgrades_20250712_013912	2025-07-12 17:12:40 +02:00
SirBroccoli	8e2325171c	Merge branch 'master' into update_Pre-auth_SQL_Injection_to_RCE_in_Fortinet_FortiWeb_20250711_182725	2025-07-12 17:12:25 +02:00