An XML External Entity attack is a type of attack against an application that parses XML input and allows XML entities. XML entities can be used to tell the XML parser to fetch specific content ...
Office - Attacks
Summary XLSM - Hot Manchego XLS - Macrome XLM Excel 4.0 - SharpShooter XLM Excel 4.0 - EXCELntDonut XLM Excel 4.0 - EXEC DOCM - Metasploit DOCM - Download and Execute DOCM - Macro...
GraphQL Injection
GraphQL is a query language for APIs and a runtime for fulfilling those queries with existing data. A GraphQL service is created by defining types and fields on those types, then providing funct...
Linux - Privilege Escalation
Summary Tools Checklist Looting for passwords Files containing passwords Old passwords in /etc/security/opasswd Last edited files In memory passwords Find...
Upload Insecure Files
Upload Uploaded files may pose a significant risk if not handled correctly. A remote attacker could send a multipart/form-data POST request with a specially-crafted filename or mime type and execu...