Home
PayloadsAllTheThings
Cancel

SAML Injetion

SAML Injection Security Assertion Markup Language (SAML) is an open standard that allows security credentials to be shared by multiple computers across a network. When using SAML-based Single S...

Insecure Direct Object References

Insecure Direct Object References Insecure Direct Object References occur when an application provides direct access to objects based on user-supplied input. As a result of this vulnerability a...

JWT - JSON Web Token

JWT - JSON Web Token JSON Web Token (JWT) is an open standard (RFC 7519) that defines a compact and self-contained way for securely transmitting information between parties as a JSON object. Th...

Web Socket Attack

The WebSocket protocol allows a bidirectional and full-duplex communication between a client and a server Summary Tools Using ws-harness.py Tools ws-harness.py Using ws-harness.p...

Miscellaneous tricks

Miscellaneous & Tricks All the tricks that couldn’t be classified somewhere else. Send a message to another user # Windows PS C:\> msg Swissky /SERVER:CRASHLAB "Stop rebooting the XXXX se...