54 commits

Author	SHA1	Message	Date
Swissky	497fbe925b	Archive external reference links via Wayback Machine ... Replace direct URLs in Markdown references with their web.archive.org equivalents to prevent link rot.	2026-03-09 13:02:28 +01:00
Swissky	f99fe06c2f	Update Python.md to clarify payload compatibility ... Removed note about platform-specific payloads and added information on creating a universal payload using eval.	2026-03-02 17:45:36 +01:00
vladko312	dac581547e	SSTI: ... - Added Elixir/EEx payloads - Added OGNL payloads - Clarified SpEL payloads and details - Fixed PHP Error-Based payloads - Added Twig Error-Based payload for CVE-2022-23614 Insecure Deserialization: - Improved Python payloads	2026-02-22 21:18:54 +03:00
Swissky	39da0328b8	Indicators for deserialization	2025-12-12 11:32:33 +01:00
Swissky	cd15d85969	Rounding Errors	2025-08-03 16:32:40 +02:00
Swissky	3fd2f8c481	Headless Browser + JSON Jackson	2025-07-02 22:23:13 +02:00
Swissky	ab7e7390dc	Fix broken links	2025-03-27 11:16:36 +01:00
Swissky	d174593b4f	Markdown Linting - Parameters, Browsers, Deserialization Randomness	2025-03-26 16:33:07 +01:00
Swissky	6795bee1c4	LDAP + LaTeX + Management Interface	2024-11-29 18:09:59 +01:00
Swissky	57f7c8ddad	ViewState Java	2024-11-27 15:29:33 +01:00
Swissky	9932059563	YAML Deserialization	2024-11-17 20:48:10 +01:00
Swissky	f333d48960	Fix invalid spaces indents	2024-11-13 14:08:26 +01:00
Swissky	2304101657	Normalize page header for GraphQL, Deserialization, SCM	2024-11-10 14:37:48 +01:00
Swissky	7e390265a0	References added for GWT, GraphQL, HTTP, Headless	2024-11-06 23:32:18 +01:00
Swissky	1dae291696	IIS MachineKeys + CI/CD + CSPT + ORM leak	2024-08-26 11:27:47 +02:00
idealphase	33d9e24bed	Update Ruby.md ... Change from the invalid 404 URL to the valid one. (https://pentesterlab.com/exercises/ruby_ugadget/course)	2024-05-05 16:16:36 +07:00
Swissky	dd2b68b70e	PHP Deserialization + API keys table typo	2024-02-18 15:29:21 +01:00
Swissky	d80068cc1b	Privileged File Delete	2023-11-04 15:52:29 +01:00
Alexandre ZANNI	442d253936	fix rawsec url	2023-01-11 23:19:26 +01:00
Swissky	d67ec2469c	SCCM Shares	2022-12-04 11:38:19 +01:00
romisfrag	f8ab0ca3bb	Update PHP.md ... Fixed the payload (was not working because guess is size 5 instead of 4. Changed the name of Object to ObjectExample because Object class name is reserved	2022-11-26 14:28:06 +01:00
Swissky	cbb2137f3b	ESC11 - Relay NTLM to ICPR	2022-11-21 10:48:27 +01:00
Swissky	5966c3a21b	NTDS Reversible Encryption	2022-11-11 14:52:56 +01:00
Swissky	d46b436d6c	PHP Deserialization - Fix Broken Link	2022-11-04 09:44:37 +01:00
Swissky	2227472e1c	.NET formatters and POP gadgets	2022-11-03 21:31:50 +01:00
Swissky	6dd5c18b45	Normalize Titles	2022-10-12 12:13:55 +02:00
Swissky	d88e32aaae	.NET Deserialization	2022-10-11 21:52:46 +02:00
gdraperi	666a90ffee	Update YAML.md ... Updating the actual risks for Python	2022-10-05 13:47:24 +02:00
Swissky	4ed3e3b6b9	Blind SSTI Jinja	2022-10-02 12:24:39 +02:00
Deep Dhakate	a670a26eea	Update	2022-10-02 06:13:01 +00:00
Swissky	72a8556dc9	NodeJS Serialization	2022-09-23 11:21:29 +02:00
Swissky	2d30e22121	DPAPI - Data Protection API	2022-09-23 00:35:34 +02:00
Swissky	267713c0fb	YAML Deserialization	2022-09-16 16:37:40 +02:00
Swissky	c7dd67986c	Oracle SQL	2022-09-13 22:04:21 +02:00
Miłosz Skaza	eb933317d0	Add new ruby yaml gadget chain	2022-06-01 09:55:48 +01:00
Swissky	1a5537a044	Add warning about cPickle	2022-04-18 20:58:14 +02:00
nerrorsec	df8493e4e6	import os	2022-03-24 11:54:34 +05:45
Swissky	459f4c03fc	Dependency Confusion + LDAP	2021-07-04 13:32:32 +02:00
Leon Gross	391755ec20	add new PHP deserialization resource	2021-06-25 09:51:00 +02:00
Leon Gross	70d0ae9ed6	issue #286	2021-06-25 09:41:39 +02:00
Swissky	0ba120e250	Fix #382	2021-06-23 22:14:55 +02:00
lanjelot	4dc5777c33	Add gadgetprobe tool	2020-12-18 23:03:25 +11:00
clem9669	f7c837ffdd	Adding marshalsec tool & references ... Adding marshalsec tool & references	2020-10-26 14:43:16 +00:00
Muhammad Fikri Ashari	992732877f	Update PHP.md	2020-09-25 09:43:35 +07:00
Swissky	20dadc9815	PHP Phar Deserialization	2020-09-10 15:26:16 +02:00
Swissky	543f63d7de	PHP POP Chain	2020-09-10 15:15:53 +02:00
Alexandre ZANNI	cb8bf8ea66	add more refs	2020-05-16 22:58:11 +02:00
Hi15358	5fec4f7c21	Update Java.md	2019-10-30 11:36:09 +08:00
marcan2020	4f38666c35	Add .NET references	2019-10-02 20:23:37 -04:00
Swissky	3221197b1e	RCE vBulletin + findomain	2019-09-26 20:41:01 +02:00