  Dominique RIGHETTOandGitHub
|
1c2fb11278
|
Add file with special vars used by template engines
The objective is to identify the engine once an expression evaluation pattern was identified.
|
2020-09-14 14:28:12 +02:00 |
|
|
Dominique RIGHETTOandGitHub
|
234dfabf72
|
Add an expression using expression inlining for Thymeleaf
See https://www.thymeleaf.org/doc/tutorials/3.0/usingthymeleaf.html#expression-inlining
Added it because I have discovered that, when StringTemplateResolver is used, then expression like ${42*42} is not resolved
|
2020-09-13 11:04:15 +02:00 |
|
|
Dominique RIGHETTOandGitHub
|
ba87953a08
|
Add expression for Velocity engine
|
2020-09-13 09:33:41 +02:00 |
|
|
Dominique RIGHETTOandGitHub
|
00f10f8513
|
Add character that can break a MongoDB query when JS expression is used
|
2020-07-18 18:00:24 +02:00 |
|
|
Dominique RIGHETTOandGitHub
|
9763b2a76d
|
Add www folder
|
2020-05-23 11:37:49 +02:00 |
|
|
Dominique RIGHETTOandGitHub
|
6350b61e1d
|
Add missing ending /
|
2020-05-23 11:36:17 +02:00 |
|
|
Dominique RIGHETTOandGitHub
|
e790c509b8
|
Ass html folder
|
2020-05-23 11:34:37 +02:00 |
|
|
Dominique RIGHETTOandGitHub
|
984af30974
|
Add the expression for the Dust engine
|
2020-05-03 10:52:17 +02:00 |
|
|
Dominique RIGHETTOandGitHub
|
aecd8036ca
|
Add the expression for the doT engine
|
2020-05-03 10:30:48 +02:00 |
|
|
Dominique RIGHETTOandGitHub
|
611d47caf3
|
Add a version of the payload for CodeContext
Add the payload "42*42" to the fuzzing list in order to cover the "Code context" detection point mentioned in the https://portswigger.net/web-security/server-side-template-injection training
|
2020-04-25 09:13:06 +02:00 |
|
|
Dominique RIGHETTOandGitHub
|
1bd30300de
|
Add a initial collection of template engines expression
|
2020-04-18 17:16:20 +02:00 |
|
|
Dominique RIGHETTOandGitHub
|
cb37e5b03d
|
Create reverse-proxy-inconsistencies.txt
|
2020-01-22 09:03:34 +01:00 |
|
|
Dominique RIGHETTOandGitHub
|
44b3fdedf2
|
Add entries from a blog about content discovery in API
Blog url: https://blog.jonlu.ca/posts/experiments-and-growth-hacking
|
2020-01-03 16:22:45 +01:00 |
|
|
Dominique RIGHETTOandGitHub
|
f7314e9c34
|
Add entry from Portswigger WebAcademy
Entry found in labs from https://portswigger.net/web-security/access-control
|
2019-12-29 11:50:12 +01:00 |
|
|
Dominique RIGHETTOandGitHub
|
9f94cae21b
|
Add local ports for scan
|
2019-10-21 17:49:56 +02:00 |
|
|
Dominique RIGHETTOandGitHub
|
5c917b1cba
|
Add dictionary for GraphQL
Help to detect GraphQL endpoint
|
2019-10-11 17:19:05 +02:00 |
|
|
Dominique RIGHETTOandGitHub
|
b93f54f4fb
|
Add VIM and NANO backup file
|
2019-10-11 15:55:38 +02:00 |
|