104 Commits

Author	SHA1	Message	Date
Dominique RIGHETTO	984af30974	Add the expression for the Dust engine	2020-05-03 10:52:17 +02:00
Dominique RIGHETTO	aecd8036ca	Add the expression for the doT engine	2020-05-03 10:30:48 +02:00
g0tmi1k	09d5a27cf7	Merge pull request #421 from storenth/master ... Update the fuzz-Bo0oM.txt with more ';' Source: https://twitter.com/11xuxx/status/1247496768054591489	2020-04-29 17:52:49 +01:00
Kirill Z	6466bd0ed2	Add more XSS	2020-04-27 20:19:33 +07:00
Kirill Z	561d6236c2	Update the fuzz-Bo0oM.txt with more ';'	2020-04-27 20:09:53 +07:00
Dominique RIGHETTO	611d47caf3	Add a version of the payload for CodeContext ... Add the payload "42*42" to the fuzzing list in order to cover the "Code context" detection point mentioned in the https://portswigger.net/web-security/server-side-template-injection training	2020-04-25 09:13:06 +02:00
g0tmi1k	a7dbde1ec9	Merge pull request #412 from righettod/master ... Collection of template engines expression Source: https://github.com/expressjs/express/wiki#template-engines	2020-04-20 10:06:06 +01:00
g0tmi1k	b3b337e6f1	Merge pull request #390 from ipentest/add-ipentest ... Added top 100 email domains to Seclists/Fuzzing Source: https://email-verify.my-addr.com/list-of-most-popular-email-domains.php	2020-04-20 10:04:42 +01:00
Dominique RIGHETTO	1bd30300de	Add a initial collection of template engines expression	2020-04-18 17:16:20 +02:00
Antoine Guilbaud	13b1f18901	add a common windows lfi path	2020-04-15 12:49:42 +02:00
milangfx	e82e5e5026	add /apidocs/api-docs.json, /api-docs	2020-04-01 14:42:20 +02:00
ipentest	b2cf6971c9	Add ipentest to contributors	2020-02-12 11:46:44 -05:00
S7X Deckard Case	b8e87ad36c	Added the entire XSS Cheat Sheet of PortSwigger, their HTML events and tags.	2019-11-18 09:33:26 +01:00
Camas	eb2cd4518a	Remove extra newline	2019-11-08 23:32:46 +00:00
Camas	a7184dd1f7	Fix line endings	2019-11-08 15:09:15 +00:00
Parth Malhotra	01b280755c	Create 1-4_all_letters_a-z.txt	2019-11-07 21:50:55 +05:30
Luke Anderson	68f8d60da5	Fix Fuzzing Types (Fixes #339)	2019-10-05 00:35:43 +09:30
g0tmi1k	327cc859ee	Quick rename	2019-08-13 12:50:53 +01:00
g0tmi1k	5bbc1e6fe3	Close #329 - Bo0oM's fuzz.txt ... Source: https://github.com/Bo0oM/fuzz.txt	2019-08-13 12:50:20 +01:00
g0tmi1k	3fc464d156	Add XSS without parentheses and semi-colons ... Source: https://portswigger.net/blog/xss-without-parentheses-and-semi-colons	2019-05-22 12:15:42 +01:00
g0tmi1k	9239f0a284	find . -name '*_*' -exec rename 's/_/-/g' "{}" \;	2019-05-08 11:54:39 +01:00
g0tmi1k	a65f6bd665	Close #291 - Fix encoding issues ... $ for x in $( find . -type f ); do iconv -f utf-8 -t utf-8 -c ${x} | sed '/^$/d' > tmp; mv tmp ${x}; done	2019-05-08 11:04:00 +01:00
g0tmi1k	7b1f14989c	Quick move about	2019-04-12 13:52:47 +01:00
g0tmi1k	3f2c0d33d2	Quick clean up of locations	2019-04-10 13:22:39 +01:00
g0tmi1k	12751dbbf0	Fix #288 - Add graphql ... Source: https://graphql.org/learn/serving-over-http/	2019-04-10 13:18:25 +01:00
g0tmi1k	b9483d00b7	Sort out a few more filenmae issues	2019-04-10 11:32:07 +01:00
g0tmi1k	437478ce7b	Fix #284 #285 - useragents-ie.txt	2019-04-10 10:19:12 +01:00
Alexandre ZANNI	cfe4b16023	Update LFI-JHADDIX.txt ... fix typo + add 1 entry	2019-03-10 17:11:22 +01:00
Infected Drake	0400e0bbc1	A wrong payload corrected ... The payload on line 18 contains a misspelled event handler `OnpOinTeReENer`. Corrected it properly.	2019-02-09 12:13:28 +05:30
g0tmi1k	7ed3f897df	Merge pull request #237 from s0md3v/patch-1 ... +5 payloads, some enhancements	2019-01-08 18:11:33 +00:00
Prinzhorn	1eae4d51f0	Strip HTML from LFI-LFISuite-pathtotest-huge.txt	2018-12-18 10:13:49 +01:00
g0tmi1k	47b1829910	Merge pull request #241 from g0tmi1k/ua ... Added various User Agent strings	2018-11-26 10:09:44 +00:00
g0tmi1k	b99b0ed28f	Added various User Agent strings ... Source: https://developers.whatismybrowser.com/useragents/explore/	2018-11-26 09:56:22 +00:00
Somdev Sangwan	bb180d4e27	changed %3B to %26 (I'm sleep deprived sorry)	2018-11-21 14:53:27 +05:30
Somdev Sangwan	31167686f0	+5 payloads, some enhancements	2018-11-21 14:45:08 +05:30
Michael Henriksen	2dab37db43	Add best performing payloads from the XSS Polyglot Challenge	2018-11-01 07:37:16 +01:00
g0tmi1k	d68ba5f9ed	Rename "_" -> "-" & found a few new homes	2018-10-15 13:08:10 +01:00
Somdev Sangwan	cebebee4b5	Create XSS-Somdev.txt	2018-10-15 02:13:17 +05:30
g0tmi1k	9f73b7e81a	Add LFISuite ... Source: https://github.com/D35m0nd142/LFISuite	2018-07-25 13:51:06 +01:00
Karan Saini	3911f92c82	Added numeric combinations ... Text files of numeric combinations (with leading zeros) for use during enumeration	2018-04-08 00:54:51 +05:30
Daniel Miessler	25323690ce	Merge pull request #185 from ryan-wendel/master ... Update XSS-JHADDIX.txt	2018-03-23 12:05:55 -07:00
Ryan Wendel	619f3afb71	Update XSS-JHADDIX.txt ... Removed offensive term from wordlist.	2018-03-23 10:01:05 -06:00
g0tmi1k	3f79d071ce	Quick move about	2018-03-21 17:47:29 +00:00
g0tmi1k	5278477235	Close #106 - XXE-Fuzzing / Grep PHP Auditing	2018-03-21 17:19:17 +00:00
g0tmi1k	401af588f6	Close #88 - Fuzzing List Integer fields ... Source: https://github.com/arvinddoraiswamy/mywebappscripts/blob/master/FuzzLists/numeric_fields_only.txt	2018-03-21 16:30:38 +00:00
g0tmi1k	7b6b792312	Close #69 - Fix SQLi Polyglot ... Source: https://labs.detectify.com/2013/05/29/the-ultimate-sql-injection-payload/ Source: https://twitter.com/SymbianSyMoh/status/707685783801454594	2018-03-21 16:29:03 +00:00
g0tmi1k	9ae73c2ceb	Add "Big List of Naughty Strings" ... Source: https://github.com/minimaxir/big-list-of-naughty-strings	2018-03-21 16:20:10 +00:00
g0tmi1k	26cf832f9d	Close ##152 - PHP base64 filter file read (XXE_Fuzzing)	2018-03-21 16:13:09 +00:00
g0tmi1k	d2282eee97	Added ] in (Fix #131)	2018-03-07 11:46:03 +00:00
g0tmi1k	7611257a60	Quick rename of files	2018-03-05 11:03:11 +00:00