maride/hacktricks
1
0
Fork 0
mirror of https://github.com/HackTricks-wiki/hacktricks.git synced 2025-10-10 18:36:50 +00:00
Code Issues Packages Projects Releases Wiki Activity
hacktricks/src/pentesting-web
History
Translator e8d6897c44 Translated ['src/pentesting-web/deserialization/java-signedobject-gated-
2025-10-01 01:20:01 +00:00
..
browser-extension-pentesting-methodology
Translated ['src/windows-hardening/active-directory-methodology/privileg
2025-09-30 23:28:40 +00:00
cache-deception
Translated ['src/network-services-pentesting/pentesting-web/laravel.md',
2025-09-26 01:01:15 +00:00
content-security-policy-csp-bypass
Translated ['', 'src/mobile-pentesting/android-app-pentesting/README.md'
2025-09-04 01:00:40 +00:00
dangling-markup-html-scriptless-injection
Translated ['src/pentesting-web/sql-injection/postgresql-injection/rce-w
2025-08-21 21:10:25 +00:00
deserialization
Translated ['src/pentesting-web/deserialization/java-signedobject-gated-
2025-10-01 01:20:01 +00:00
file-inclusion
Translated ['src/pentesting-web/file-inclusion/lfi2rce-via-phpinfo.md']
2025-09-30 00:54:27 +00:00
file-upload
Translated ['', 'src/windows-hardening/windows-local-privilege-escalatio
2025-09-30 04:39:09 +00:00
hacking-with-cookies
Translated ['', 'src/pentesting-web/reset-password.md', 'src/pentesting-
2025-08-26 17:03:03 +00:00
http-request-smuggling
Translated ['src/pentesting-web/http-request-smuggling/README.md'] to ko
2025-09-05 11:34:48 +00:00
login-bypass
Translated ['src/pentesting-web/sql-injection/postgresql-injection/rce-w
2025-08-21 21:10:25 +00:00
pocs-and-polygloths-cheatsheet
Translated ['src/generic-hacking/reverse-shells/windows.md', 'src/generi
2025-02-04 18:46:30 +00:00
postmessage-vulnerabilities
Translated ['src/pentesting-web/sql-injection/postgresql-injection/rce-w
2025-08-21 21:10:25 +00:00
saml-attacks
Translated ['src/pentesting-web/sql-injection/postgresql-injection/rce-w
2025-08-21 21:10:25 +00:00
sql-injection
Translated ['', 'src/pentesting-web/sql-injection/mysql-injection/README
2025-10-01 00:49:02 +00:00
ssrf-server-side-request-forgery
Translated ['src/pentesting-web/sql-injection/postgresql-injection/rce-w
2025-08-21 21:10:25 +00:00
ssti-server-side-template-injection
Translated ['src/pentesting-web/sql-injection/postgresql-injection/rce-w
2025-08-21 21:10:25 +00:00
unicode-injection
Translated ['src/pentesting-web/sql-injection/postgresql-injection/rce-w
2025-08-21 21:10:25 +00:00
xs-search
Translated ['', 'src/pentesting-web/command-injection.md', 'src/pentesti
2025-08-29 12:32:56 +00:00
xss-cross-site-scripting
Translated ['src/pentesting-web/xss-cross-site-scripting/README.md', 'sr
2025-09-29 15:05:16 +00:00
2fa-bypass.md
Translated ['src/macos-hardening/macos-security-and-privilege-escalation
2025-01-03 05:39:09 +00:00
abusing-hop-by-hop-headers.md
Translated ['src/macos-hardening/macos-security-and-privilege-escalation
2025-01-03 05:39:09 +00:00
account-takeover.md
Translated ['src/pentesting-web/sql-injection/postgresql-injection/rce-w
2025-08-21 21:10:25 +00:00
bypass-payment-process.md
Translated ['src/macos-hardening/macos-security-and-privilege-escalation
2025-01-03 05:39:09 +00:00
captcha-bypass.md
Translated ['src/pentesting-web/sql-injection/postgresql-injection/rce-w
2025-08-21 21:10:25 +00:00
clickjacking.md
Translated ['src/network-services-pentesting/pentesting-web/ruby-tricks.
2025-06-15 15:14:23 +00:00
client-side-path-traversal.md
Translated ['src/macos-hardening/macos-security-and-privilege-escalation
2025-01-02 16:47:00 +00:00
client-side-template-injection-csti.md
Translated ['src/pentesting-web/sql-injection/postgresql-injection/rce-w
2025-08-21 21:10:25 +00:00
command-injection.md
Translated ['', 'src/pentesting-web/command-injection.md', 'src/pentesti
2025-08-29 12:32:56 +00:00
cors-bypass.md
Translated ['src/pentesting-web/sql-injection/postgresql-injection/rce-w
2025-08-21 21:10:25 +00:00
crlf-0d-0a.md
Translated ['src/pentesting-web/sql-injection/postgresql-injection/rce-w
2025-08-21 21:10:25 +00:00
csrf-cross-site-request-forgery.md
Translated ['', 'src/pentesting-web/csrf-cross-site-request-forgery.md']
2025-09-29 22:51:15 +00:00
dapps-DecentralizedApplications.md
Translated ['src/AI/AI-llm-architecture/0.-basic-llm-concepts.md', 'src/
2025-07-12 11:25:16 +00:00
dependency-confusion.md
Translated ['src/pentesting-web/sql-injection/postgresql-injection/rce-w
2025-08-21 21:10:25 +00:00
domain-subdomain-takeover.md
Translated ['src/pentesting-web/domain-subdomain-takeover.md', 'src/pent
2025-02-04 18:51:53 +00:00
email-injections.md
Translated ['src/binary-exploitation/arbitrary-write-2-exec/aw2exec-__ma
2025-01-05 22:28:09 +00:00
formula-csv-doc-latex-ghostscript-injection.md
Translated ['src/backdoors/salseo.md', 'src/binary-exploitation/rop-retu
2025-04-07 02:20:54 +00:00
grpc-web-pentest.md
Translated ['src/macos-hardening/macos-security-and-privilege-escalation
2025-01-03 05:39:09 +00:00
h2c-smuggling.md
Translated ['src/pentesting-web/h2c-smuggling.md'] to ko
2025-05-03 00:05:14 +00:00
hacking-jwt-json-web-tokens.md
Translated ['src/pentesting-web/sql-injection/postgresql-injection/rce-w
2025-08-21 21:10:25 +00:00
http-connection-contamination.md
Translated ['src/macos-hardening/macos-security-and-privilege-escalation
2025-01-03 05:39:09 +00:00
http-connection-request-smuggling.md
Translated ['src/pentesting-web/http-connection-request-smuggling.md'] t
2025-07-12 22:08:14 +00:00
http-response-smuggling-desync.md
Translated ['.github/pull_request_template.md', 'src/1911-pentesting-fox
2025-01-03 03:11:43 +00:00
idor.md
Translated ['', 'src/pentesting-web/command-injection.md', 'src/pentesti
2025-08-29 12:32:56 +00:00
iframe-traps.md
Translated ['.github/pull_request_template.md', 'src/1911-pentesting-fox
2025-01-03 03:11:43 +00:00
json-xml-yaml-hacking.md
Translated ['src/pentesting-web/json-xml-yaml-hacking.md'] to ko
2025-08-04 20:32:24 +00:00
ldap-injection.md
Translated ['src/pentesting-web/sql-injection/postgresql-injection/rce-w
2025-08-21 21:10:25 +00:00
less-code-injection-ssrf.md
Translated ['src/generic-methodologies-and-resources/pentesting-wifi/ena
2025-07-15 17:15:14 +00:00
nosql-injection.md
Translated ['src/pentesting-web/nosql-injection.md'] to ko
2025-08-14 00:36:50 +00:00
oauth-to-account-takeover.md
Translated ['src/pentesting-web/sql-injection/postgresql-injection/rce-w
2025-08-21 21:10:25 +00:00
open-redirect.md
Translated ['src/pentesting-web/sql-injection/postgresql-injection/rce-w
2025-08-21 21:10:25 +00:00
orm-injection.md
Translated ['src/binary-exploitation/arbitrary-write-2-exec/aw2exec-__ma
2025-01-05 22:28:09 +00:00
parameter-pollution.md
Translated ['src/AI/AI-llm-architecture/0.-basic-llm-concepts.md', 'src/
2025-07-08 13:06:13 +00:00
phone-number-injections.md
Translated ['src/binary-exploitation/arbitrary-write-2-exec/aw2exec-__ma
2025-01-05 22:28:09 +00:00
proxy-waf-protections-bypass.md
Translated ['src/pentesting-web/http-request-smuggling/README.md', 'src/
2025-08-22 16:40:08 +00:00
race-condition.md
Translated ['', 'src/pentesting-web/websocket-attacks.md', 'src/pentesti
2025-09-29 14:22:37 +00:00
rate-limit-bypass.md
Translated ['src/pentesting-web/rate-limit-bypass.md'] to ko
2025-07-12 14:07:49 +00:00
registration-vulnerabilities.md
Translated ['', 'src/pentesting-web/reset-password.md', 'src/pentesting-
2025-09-30 09:27:03 +00:00
regular-expression-denial-of-service-redos.md
Translated ['.github/pull_request_template.md', 'src/1911-pentesting-fox
2025-01-03 03:11:43 +00:00
reset-password.md
Translated ['', 'src/pentesting-web/reset-password.md', 'src/pentesting-
2025-09-30 09:27:03 +00:00
reverse-tab-nabbing.md
Translated ['src/generic-hacking/reverse-shells/windows.md', 'src/generi
2025-02-04 18:46:30 +00:00
rsql-injection.md
Translated ['src/AI/AI-llm-architecture/0.-basic-llm-concepts.md', 'src/
2025-07-08 13:06:13 +00:00
server-side-inclusion-edge-side-inclusion-injection.md
Translated ['src/pentesting-web/sql-injection/postgresql-injection/rce-w
2025-08-21 21:10:25 +00:00
timing-attacks.md
Translated ['.github/pull_request_template.md', 'src/1911-pentesting-fox
2025-01-03 03:11:43 +00:00
uuid-insecurities.md
Translated ['.github/pull_request_template.md', 'src/1911-pentesting-fox
2025-01-03 03:11:43 +00:00
web-tool-wfuzz.md
Translated ['.github/pull_request_template.md', 'src/1911-pentesting-fox
2025-01-03 03:11:43 +00:00
web-vulnerabilities-methodology.md
Translated ['src/pentesting-web/sql-injection/postgresql-injection/rce-w
2025-08-21 21:10:25 +00:00
websocket-attacks.md
Translated ['', 'src/pentesting-web/websocket-attacks.md', 'src/pentesti
2025-09-29 14:22:37 +00:00
xpath-injection.md
Translated ['.github/pull_request_template.md', 'src/1911-pentesting-fox
2025-01-03 03:11:43 +00:00
xs-search.md
Translated ['src/pentesting-web/sql-injection/postgresql-injection/rce-w
2025-08-21 21:10:25 +00:00
xslt-server-side-injection-extensible-stylesheet-language-transformations.md
Translated ['src/pentesting-web/sql-injection/postgresql-injection/rce-w
2025-08-21 21:10:25 +00:00
xssi-cross-site-script-inclusion.md
Translated ['.github/pull_request_template.md', 'src/1911-pentesting-fox
2025-01-03 03:11:43 +00:00
xxe-xee-xml-external-entity.md
Translated ['src/pentesting-web/sql-injection/postgresql-injection/rce-w
2025-08-21 21:10:25 +00:00