maride/hacktricks
1
0
Fork 0
mirror of https://github.com/HackTricks-wiki/hacktricks.git synced 2025-10-10 18:36:50 +00:00
Code Issues Packages Projects Releases Wiki Activity
hacktricks/src/pentesting-web
History
SirBroccoli 1f9975e782 Merge pull request #1308 from HackTricks-wiki/update_Beware_the_false_false_positive__how_to_distinguis_20250819_184719 
Beware the false false‑positive how to distinguish HTTP pipe...
2025-08-20 18:02:08 +02:00
..
browser-extension-pentesting-methodology
a
2025-04-13 17:51:52 +02:00
cache-deception
AI update
2025-06-07 18:36:03 +02:00
content-security-policy-csp-bypass
fix some titles
2025-07-08 13:28:53 +02:00
dangling-markup-html-scriptless-injection
fix links
2025-01-04 13:05:18 +01:00
deserialization
Merge pull request #1310 from HackTricks-wiki/update_Marshal_madness__A_brief_history_of_Ruby_deseriali_20250820_063337
2025-08-20 16:01:52 +02:00
file-inclusion
Add content from: From Support Ticket to Zero Day
2025-08-16 12:42:17 +00:00
file-upload
impr
2025-04-07 02:44:44 +02:00
hacking-with-cookies
fix some titles
2025-07-08 13:28:53 +02:00
http-request-smuggling
Add content from: Beware the false false‑positive: how to distinguish HTTP pip...
2025-08-19 18:58:27 +00:00
login-bypass
fix some titles
2025-07-08 13:28:53 +02:00
pocs-and-polygloths-cheatsheet
fix ````
2025-02-04 19:04:42 +01:00
postmessage-vulnerabilities
format fixes
2025-07-08 14:26:56 +02:00
saml-attacks
format fixes
2025-07-08 14:26:56 +02:00
sql-injection
Add content from: Research Update: Enhanced src/pentesting-web/sql-injection/o...
2025-08-05 16:24:44 +00:00
ssrf-server-side-request-forgery
Add content from: Research Update: Enhanced src/pentesting-web/ssrf-server-sid...
2025-07-19 01:31:27 +00:00
ssti-server-side-template-injection
AI update
2025-06-07 18:36:03 +02:00
unicode-injection
impr
2025-04-07 02:44:44 +02:00
web-vulnerabilities-methodology
AI update
2025-06-07 18:36:03 +02:00
xs-search
AI update
2025-06-07 18:36:03 +02:00
xss-cross-site-scripting
Update iframes-in-xss-and-csp.md
2025-08-18 15:50:48 +02:00
2fa-bypass.md
t2
2025-01-03 01:07:38 +01:00
abusing-hop-by-hop-headers.md
t2
2025-01-03 01:07:38 +01:00
account-takeover.md
test
2025-04-20 16:54:44 +02:00
bypass-payment-process.md
t2
2025-01-03 01:07:38 +01:00
captcha-bypass.md
Fix embed urls
2025-01-03 02:06:10 +01:00
clickjacking.md
add
2025-06-15 17:09:07 +02:00
client-side-path-traversal.md
t2
2025-01-03 01:07:38 +01:00
client-side-template-injection-csti.md
fix ````
2025-02-04 19:04:42 +01:00
command-injection.md
Add content from: Extraction of Synology Encrypted Archives - Pwn2Own Ireland ...
2025-08-11 12:49:04 +00:00
cors-bypass.md
t2
2025-01-03 01:07:38 +01:00
crlf-0d-0a.md
Add content from: Research Update: Enhanced src/pentesting-web/crlf-0d-0a.md
2025-07-16 01:42:58 +00:00
csrf-cross-site-request-forgery.md
AI update
2025-06-07 18:36:03 +02:00
dapps-DecentralizedApplications.md
Add content from: Research Update: Enhanced src/todo/radio-hacking/low-power-w...
2025-07-12 10:50:06 +00:00
dependency-confusion.md
t2
2025-01-03 01:07:38 +01:00
domain-subdomain-takeover.md
update xss
2025-02-04 19:24:15 +01:00
email-injections.md
more migration typos
2025-01-05 21:30:07 +01:00
formula-csv-doc-latex-ghostscript-injection.md
impr
2025-04-07 02:44:44 +02:00
grpc-web-pentest.md
t2
2025-01-03 01:07:38 +01:00
h2c-smuggling.md
make search faster
2025-05-03 02:01:45 +02:00
hacking-jwt-json-web-tokens.md
Merge branch 'master' into fix-embeded-urls
2025-01-03 18:02:32 +01:00
http-connection-contamination.md
t2
2025-01-03 01:07:38 +01:00
http-connection-request-smuggling.md
Add content from: Research Update: Enhanced src/pentesting-web/http-connection...
2025-07-11 16:25:39 +00:00
http-response-smuggling-desync.md
t1
2025-01-03 01:05:32 +01:00
idor.md
Add content from: Research Update: Enhanced src/todo/radio-hacking/low-power-w...
2025-07-12 10:50:06 +00:00
iframe-traps.md
t1
2025-01-03 01:05:32 +01:00
json-xml-yaml-hacking.md
Add content from: Research Update: Enhanced src/pentesting-web/json-xml-yaml-h...
2025-08-01 01:53:55 +00:00
ldap-injection.md
format fixes
2025-07-08 14:26:56 +02:00
less-code-injection-ssrf.md
Add content from: SugarCRM ≤ 14.0.0 (css/preview) LESS Code Injection Vulnerab...
2025-07-14 12:40:51 +00:00
nosql-injection.md
Add content from: Research Update: Enhanced src/pentesting-web/nosql-injection...
2025-08-11 08:31:13 +00:00
oauth-to-account-takeover.md
Merge branch 'master' of github.com:HackTricks-wiki/hacktricks
2025-03-29 23:54:02 +01:00
open-redirect.md
fix ````
2025-02-04 19:04:42 +01:00
orm-injection.md
more migration typos
2025-01-05 21:30:07 +01:00
parameter-pollution.md
format fixes
2025-07-08 14:26:56 +02:00
phone-number-injections.md
more migration typos
2025-01-05 21:30:07 +01:00
proxy-waf-protections-bypass.md
t1
2025-01-03 01:05:32 +01:00
race-condition.md
more migration typos
2025-01-05 21:30:07 +01:00
rate-limit-bypass.md
Add content from: Research Update: Enhanced src/pentesting-web/rate-limit-bypa...
2025-07-11 01:30:33 +00:00
registration-vulnerabilities.md
impr
2025-04-07 02:44:44 +02:00
regular-expression-denial-of-service-redos.md
t1
2025-01-03 01:05:32 +01:00
reset-password.md
Update reset-password.md
2025-04-12 18:28:37 +03:00
reverse-tab-nabbing.md
fix some titles
2025-07-08 13:28:53 +02:00
rsql-injection.md
format fixes
2025-07-08 14:26:56 +02:00
server-side-inclusion-edge-side-inclusion-injection.md
fix ````
2025-02-04 19:04:42 +01:00
timing-attacks.md
t1
2025-01-03 01:05:32 +01:00
uuid-insecurities.md
t1
2025-01-03 01:05:32 +01:00
web-tool-wfuzz.md
t1
2025-01-03 01:05:32 +01:00
web-vulnerabilities-methodology.md
Update web-vulnerabilities-methodology.md
2025-07-22 10:33:52 +02:00
websocket-attacks.md
update
2025-07-01 16:22:39 +02:00
xpath-injection.md
t1
2025-01-03 01:05:32 +01:00
xs-search.md
AI update
2025-06-07 18:36:03 +02:00
xslt-server-side-injection-extensible-stylesheet-language-transformations.md
fix migration typos
2025-01-05 21:11:39 +01:00
xssi-cross-site-script-inclusion.md
t1
2025-01-03 01:05:32 +01:00
xxe-xee-xml-external-entity.md
Add content from: From Support Ticket to Zero Day
2025-08-16 12:42:17 +00:00