hacktricks

browser-extension-pentesting-methodology

Add content from: Android Malware Promises Energy Subsidy to Steal Financial D...

2025-08-20 12:52:33 +00:00

cache-deception

Merge branch 'master' into update_Android_Malware_Promises_Energy_Subsidy_to_Steal_F_20250820_125045

2025-08-21 14:49:47 +02:00

content-security-policy-csp-bypass

Add content from: The Art of PHP: CTF‑born exploits and techniques

2025-08-30 12:47:45 +00:00

dangling-markup-html-scriptless-injection

Add content from: Android Malware Promises Energy Subsidy to Steal Financial D...

2025-08-20 12:52:33 +00:00

deserialization

Drop unwanted changes in deserialization/README.md and av-bypass.md

2025-09-03 12:59:34 +02:00

file-inclusion

Add content from: The Art of PHP: CTF‑born exploits and techniques

2025-08-30 12:47:45 +00:00

file-upload

Merge branch 'master' into update_HTB__TheFrizz_20250827_141120

2025-09-07 23:25:06 +02:00

hacking-with-cookies

Add content from: VTENEXT 25.02 – a three-way path to RCE

2025-08-26 12:57:50 +00:00

http-request-smuggling

f

2025-09-05 13:01:05 +02:00

login-bypass

Add content from: Android Malware Promises Energy Subsidy to Steal Financial D...

2025-08-20 12:52:33 +00:00

pocs-and-polygloths-cheatsheet

fix ````

2025-02-04 19:04:42 +01:00

postmessage-vulnerabilities

Add content from: Android Malware Promises Energy Subsidy to Steal Financial D...

2025-08-20 12:52:33 +00:00

saml-attacks

Add content from: Android Malware Promises Energy Subsidy to Steal Financial D...

2025-08-20 12:52:33 +00:00

sql-injection

Add content from: VTENEXT 25.02 – a three-way path to RCE

2025-08-26 12:57:50 +00:00

ssrf-server-side-request-forgery

Add content from: Android Malware Promises Energy Subsidy to Steal Financial D...

2025-08-20 12:52:33 +00:00

ssti-server-side-template-injection

Add content from: Android Malware Promises Energy Subsidy to Steal Financial D...

2025-08-20 12:52:33 +00:00

unicode-injection

Add content from: Android Malware Promises Energy Subsidy to Steal Financial D...

2025-08-20 12:52:33 +00:00

xs-search

Add content from: Inline Style Exfiltration: leaking data with chained CSS con...

2025-08-26 18:34:43 +00:00

xss-cross-site-scripting

f

2025-09-07 16:49:20 +02:00

2fa-bypass.md

t2

2025-01-03 01:07:38 +01:00

abusing-hop-by-hop-headers.md

t2

2025-01-03 01:07:38 +01:00

account-takeover.md

Add content from: Android Malware Promises Energy Subsidy to Steal Financial D...

2025-08-20 12:52:33 +00:00

bypass-payment-process.md

t2

2025-01-03 01:07:38 +01:00

captcha-bypass.md

Add content from: Android Malware Promises Energy Subsidy to Steal Financial D...

2025-08-20 12:52:33 +00:00

clickjacking.md

add

2025-06-15 17:09:07 +02:00

client-side-path-traversal.md

t2

2025-01-03 01:07:38 +01:00

client-side-template-injection-csti.md

Add content from: Android Malware Promises Energy Subsidy to Steal Financial D...

2025-08-20 12:52:33 +00:00

command-injection.md

Update command-injection.md

2025-08-28 12:05:50 +02:00

cors-bypass.md

Add content from: Android Malware Promises Energy Subsidy to Steal Financial D...

2025-08-20 12:52:33 +00:00

crlf-0d-0a.md

Add content from: Android Malware Promises Energy Subsidy to Steal Financial D...

2025-08-20 12:52:33 +00:00

csrf-cross-site-request-forgery.md

Add content from: VTENEXT 25.02 – a three-way path to RCE

2025-08-26 12:57:50 +00:00

dapps-DecentralizedApplications.md

Add content from: Research Update: Enhanced src/todo/radio-hacking/low-power-w...

2025-07-12 10:50:06 +00:00

dependency-confusion.md

Add content from: Research Update: Enhanced src/pentesting-web/dependency-conf...

2025-08-19 08:31:53 +00:00

domain-subdomain-takeover.md

update xss

2025-02-04 19:24:15 +01:00

email-injections.md

more migration typos

2025-01-05 21:30:07 +01:00

formula-csv-doc-latex-ghostscript-injection.md

impr

2025-04-07 02:44:44 +02:00

grpc-web-pentest.md

t2

2025-01-03 01:07:38 +01:00

h2c-smuggling.md

make search faster

2025-05-03 02:01:45 +02:00

hacking-jwt-json-web-tokens.md

Add content from: Android Malware Promises Energy Subsidy to Steal Financial D...

2025-08-20 12:52:33 +00:00

http-connection-contamination.md

t2

2025-01-03 01:07:38 +01:00

http-connection-request-smuggling.md

Add content from: Research Update: Enhanced src/pentesting-web/http-connection...

2025-07-11 16:25:39 +00:00

http-response-smuggling-desync.md

t1

2025-01-03 01:05:32 +01:00

idor.md

Add content from: HTB Nocturnal: IDOR → Command Injection → Root via ISPConfig...

2025-08-27 19:21:10 +00:00

iframe-traps.md

t1

2025-01-03 01:05:32 +01:00

json-xml-yaml-hacking.md

Add content from: Research Update: Enhanced src/pentesting-web/json-xml-yaml-h...

2025-08-01 01:53:55 +00:00

ldap-injection.md

Add content from: Android Malware Promises Energy Subsidy to Steal Financial D...

2025-08-20 12:52:33 +00:00

less-code-injection-ssrf.md

Add content from: SugarCRM ≤ 14.0.0 (css/preview) LESS Code Injection Vulnerab...

2025-07-14 12:40:51 +00:00

nosql-injection.md

Add content from: Research Update: Enhanced src/pentesting-web/nosql-injection...

2025-08-11 08:31:13 +00:00

oauth-to-account-takeover.md

Add content from: Android Malware Promises Energy Subsidy to Steal Financial D...

2025-08-20 12:52:33 +00:00

open-redirect.md

Add content from: Android Malware Promises Energy Subsidy to Steal Financial D...

2025-08-20 12:52:33 +00:00

orm-injection.md

more migration typos

2025-01-05 21:30:07 +01:00

parameter-pollution.md

format fixes

2025-07-08 14:26:56 +02:00

phone-number-injections.md

more migration typos

2025-01-05 21:30:07 +01:00

proxy-waf-protections-bypass.md

Update proxy-waf-protections-bypass.md

2025-08-22 13:06:29 +02:00

race-condition.md

more migration typos

2025-01-05 21:30:07 +01:00

rate-limit-bypass.md

Add content from: Research Update: Enhanced src/pentesting-web/rate-limit-bypa...

2025-07-11 01:30:33 +00:00

registration-vulnerabilities.md

Add content from: Android Malware Promises Energy Subsidy to Steal Financial D...

2025-08-20 12:52:33 +00:00

regular-expression-denial-of-service-redos.md

t1

2025-01-03 01:05:32 +01:00

reset-password.md

Add content from: VTENEXT 25.02 – a three-way path to RCE

2025-08-26 12:57:50 +00:00

reverse-tab-nabbing.md

fix some titles

2025-07-08 13:28:53 +02:00

rsql-injection.md

format fixes

2025-07-08 14:26:56 +02:00

server-side-inclusion-edge-side-inclusion-injection.md

Add content from: Android Malware Promises Energy Subsidy to Steal Financial D...

2025-08-20 12:52:33 +00:00

timing-attacks.md

t1

2025-01-03 01:05:32 +01:00

uuid-insecurities.md

t1

2025-01-03 01:05:32 +01:00

web-tool-wfuzz.md

t1

2025-01-03 01:05:32 +01:00

web-vulnerabilities-methodology.md

Add content from: Android Malware Promises Energy Subsidy to Steal Financial D...

2025-08-20 12:52:33 +00:00

websocket-attacks.md

Add content from: Android Malware Promises Energy Subsidy to Steal Financial D...

2025-08-20 12:52:33 +00:00

xpath-injection.md

t1

2025-01-03 01:05:32 +01:00

xs-search.md

Add content from: Android Malware Promises Energy Subsidy to Steal Financial D...

2025-08-20 12:52:33 +00:00

xslt-server-side-injection-extensible-stylesheet-language-transformations.md

Add content from: Android Malware Promises Energy Subsidy to Steal Financial D...

2025-08-20 12:52:33 +00:00

xssi-cross-site-script-inclusion.md

t1

2025-01-03 01:05:32 +01:00

xxe-xee-xml-external-entity.md

Add content from: Android Malware Promises Energy Subsidy to Steal Financial D...

2025-08-20 12:52:33 +00:00