SirBroccoli 358b8dcfa5 Merge pull request #1245 from HackTricks-wiki/research_update_src_pentesting-web_deserialization_exploiting-__viewstate-parameter_20250806_014331 ...

Research Update Enhanced src/pentesting-web/deserialization/...

2025-08-10 20:01:59 +02:00

..

browser-extension-pentesting-methodology

a

2025-04-13 17:51:52 +02:00

cache-deception

AI update

2025-06-07 18:36:03 +02:00

content-security-policy-csp-bypass

fix some titles

2025-07-08 13:28:53 +02:00

dangling-markup-html-scriptless-injection

fix links

2025-01-04 13:05:18 +01:00

deserialization

Merge pull request #1245 from HackTricks-wiki/research_update_src_pentesting-web_deserialization_exploiting-__viewstate-parameter_20250806_014331

2025-08-10 20:01:59 +02:00

file-inclusion

Add content from: Research Update: Enhanced src/todo/radio-hacking/low-power-w...

2025-07-12 10:50:06 +00:00

file-upload

impr

2025-04-07 02:44:44 +02:00

hacking-with-cookies

fix some titles

2025-07-08 13:28:53 +02:00

http-request-smuggling

Add content from: Research Update: Enhanced src/pentesting-web/http-request-sm...

2025-07-12 01:40:49 +00:00

login-bypass

fix some titles

2025-07-08 13:28:53 +02:00

pocs-and-polygloths-cheatsheet

fix ````

2025-02-04 19:04:42 +01:00

postmessage-vulnerabilities

format fixes

2025-07-08 14:26:56 +02:00

saml-attacks

format fixes

2025-07-08 14:26:56 +02:00

sql-injection

Add content from: SQLMap: Testing SQL Database Vulnerabilities

2025-07-29 18:42:06 +00:00

ssrf-server-side-request-forgery

Add content from: Research Update: Enhanced src/pentesting-web/ssrf-server-sid...

2025-07-19 01:31:27 +00:00

ssti-server-side-template-injection

AI update

2025-06-07 18:36:03 +02:00

unicode-injection

impr

2025-04-07 02:44:44 +02:00

web-vulnerabilities-methodology

AI update

2025-06-07 18:36:03 +02:00

xs-search

AI update

2025-06-07 18:36:03 +02:00

xss-cross-site-scripting

Merge pull request #1217 from HackTricks-wiki/research_update_src_pentesting-web_xss-cross-site-scripting_dom-invader_20250731_014311

2025-08-05 02:06:08 +02:00

2fa-bypass.md

t2

2025-01-03 01:07:38 +01:00

abusing-hop-by-hop-headers.md

t2

2025-01-03 01:07:38 +01:00

account-takeover.md

test

2025-04-20 16:54:44 +02:00

bypass-payment-process.md

t2

2025-01-03 01:07:38 +01:00

captcha-bypass.md

Fix embed urls

2025-01-03 02:06:10 +01:00

clickjacking.md

add

2025-06-15 17:09:07 +02:00

client-side-path-traversal.md

t2

2025-01-03 01:07:38 +01:00

client-side-template-injection-csti.md

fix ````

2025-02-04 19:04:42 +01:00

command-injection.md

Fix embed urls

2025-01-03 02:06:10 +01:00

cors-bypass.md

t2

2025-01-03 01:07:38 +01:00

crlf-0d-0a.md

Add content from: Research Update: Enhanced src/pentesting-web/crlf-0d-0a.md

2025-07-16 01:42:58 +00:00

csrf-cross-site-request-forgery.md

AI update

2025-06-07 18:36:03 +02:00

dapps-DecentralizedApplications.md

Add content from: Research Update: Enhanced src/todo/radio-hacking/low-power-w...

2025-07-12 10:50:06 +00:00

dependency-confusion.md

t2

2025-01-03 01:07:38 +01:00

domain-subdomain-takeover.md

update xss

2025-02-04 19:24:15 +01:00

email-injections.md

more migration typos

2025-01-05 21:30:07 +01:00

formula-csv-doc-latex-ghostscript-injection.md

impr

2025-04-07 02:44:44 +02:00

grpc-web-pentest.md

t2

2025-01-03 01:07:38 +01:00

h2c-smuggling.md

make search faster

2025-05-03 02:01:45 +02:00

hacking-jwt-json-web-tokens.md

Merge branch 'master' into fix-embeded-urls

2025-01-03 18:02:32 +01:00

http-connection-contamination.md

t2

2025-01-03 01:07:38 +01:00

http-connection-request-smuggling.md

Add content from: Research Update: Enhanced src/pentesting-web/http-connection...

2025-07-11 16:25:39 +00:00

http-response-smuggling-desync.md

t1

2025-01-03 01:05:32 +01:00

idor.md

Add content from: Research Update: Enhanced src/todo/radio-hacking/low-power-w...

2025-07-12 10:50:06 +00:00

iframe-traps.md

t1

2025-01-03 01:05:32 +01:00

json-xml-yaml-hacking.md

Add content from: Research Update: Enhanced src/pentesting-web/json-xml-yaml-h...

2025-08-01 01:53:55 +00:00

ldap-injection.md

format fixes

2025-07-08 14:26:56 +02:00

less-code-injection-ssrf.md

Add content from: SugarCRM ≤ 14.0.0 (css/preview) LESS Code Injection Vulnerab...

2025-07-14 12:40:51 +00:00

nosql-injection.md

Add content from: NoSQL Error-Based Injection

2025-07-08 18:42:50 +02:00

oauth-to-account-takeover.md

Merge branch 'master' of github.com:HackTricks-wiki/hacktricks

2025-03-29 23:54:02 +01:00

open-redirect.md

fix ````

2025-02-04 19:04:42 +01:00

orm-injection.md

more migration typos

2025-01-05 21:30:07 +01:00

parameter-pollution.md

format fixes

2025-07-08 14:26:56 +02:00

phone-number-injections.md

more migration typos

2025-01-05 21:30:07 +01:00

proxy-waf-protections-bypass.md

t1

2025-01-03 01:05:32 +01:00

race-condition.md

more migration typos

2025-01-05 21:30:07 +01:00

rate-limit-bypass.md

Add content from: Research Update: Enhanced src/pentesting-web/rate-limit-bypa...

2025-07-11 01:30:33 +00:00

registration-vulnerabilities.md

impr

2025-04-07 02:44:44 +02:00

regular-expression-denial-of-service-redos.md

t1

2025-01-03 01:05:32 +01:00

reset-password.md

Update reset-password.md

2025-04-12 18:28:37 +03:00

reverse-tab-nabbing.md

fix some titles

2025-07-08 13:28:53 +02:00

rsql-injection.md

format fixes

2025-07-08 14:26:56 +02:00

server-side-inclusion-edge-side-inclusion-injection.md

fix ````

2025-02-04 19:04:42 +01:00

timing-attacks.md

t1

2025-01-03 01:05:32 +01:00

uuid-insecurities.md

t1

2025-01-03 01:05:32 +01:00

web-tool-wfuzz.md

t1

2025-01-03 01:05:32 +01:00

web-vulnerabilities-methodology.md

Update web-vulnerabilities-methodology.md

2025-07-22 10:33:52 +02:00

websocket-attacks.md

update

2025-07-01 16:22:39 +02:00

xpath-injection.md

t1

2025-01-03 01:05:32 +01:00

xs-search.md

AI update

2025-06-07 18:36:03 +02:00

xslt-server-side-injection-extensible-stylesheet-language-transformations.md

fix migration typos

2025-01-05 21:11:39 +01:00

xssi-cross-site-script-inclusion.md

t1

2025-01-03 01:05:32 +01:00

xxe-xee-xml-external-entity.md

Add content from: CVE-2025-27136 – LocalS3 CreateBucketConfiguration XXE Injec...

2025-07-25 18:32:48 +00:00