GitHub - WeaponsAndTools/security_whitepapers: Collection of misc IT Security related whitepapers, presentations, slides - hacking, bug bounty, web application security, XSS, CSRF, SQLi

Branches Tags

Name		Name	Last commit message	Last commit date
Latest commit History 14 Commits
Beej's Guide to Network Programming_files		Beej's Guide to Network Programming_files
cheatsheets		cheatsheets
sample_pentest_reports		sample_pentest_reports
10_yrs_of_Java_exploitation.pdf		10_yrs_of_Java_exploitation.pdf
ASLR.pdf		ASLR.pdf
ASLR_practical_cache_attacks.pdf		ASLR_practical_cache_attacks.pdf
Alternative_for_Information_Schema.Tables_in_MySQL.pdf		Alternative_for_Information_Schema.Tables_in_MySQL.pdf
BSidesAth16_Perform_Effective_Command_Injection_Attacks_Like_Mr.Robot_Final.pdf		BSidesAth16_Perform_Effective_Command_Injection_Attacks_Like_Mr.Robot_Final.pdf
Beej's Guide to Network Programming.html		Beej's Guide to Network Programming.html
Brute_advanced-xss.pdf		Brute_advanced-xss.pdf
CSP_Google_Research.pdf		CSP_Google_Research.pdf
CSRF-whitepaper.pdf		CSRF-whitepaper.pdf
Character Entity Reference Chart.html		Character Entity Reference Chart.html
Content_SEcuroty_Policy_insecurity.pdf		Content_SEcuroty_Policy_insecurity.pdf
Cracking_Salted_Hashes.pdf		Cracking_Salted_Hashes.pdf
DEFCON-24-Regilero-Hiding-Wookiees-In-Http.pdf		DEFCON-24-Regilero-Hiding-Wookiees-In-Http.pdf
Deserialization - What Could Go Wrong.pdf		Deserialization - What Could Go Wrong.pdf
Evading All Web-Application Firewalls XSS Filters.pdf		Evading All Web-Application Firewalls XSS Filters.pdf
Exploiting_the_unexploitable.pdf		Exploiting_the_unexploitable.pdf
Exposing_Spies_on_macOS.pdf		Exposing_Spies_on_macOS.pdf
File-in-the-hole.pdf		File-in-the-hole.pdf
HTML5_AttackVectors_RafayBaloch_UPDATED.pdf		HTML5_AttackVectors_RafayBaloch_UPDATED.pdf
HTML5_Hacking_Websocket_Slides.pdf		HTML5_Hacking_Websocket_Slides.pdf
HTTP2_flaws_analysis.pdf		HTTP2_flaws_analysis.pdf
HTTP_PARAMETER_POLLUTION_AppsecEU09_CarettoniDiPaola_v0.8.pdf		HTTP_PARAMETER_POLLUTION_AppsecEU09_CarettoniDiPaola_v0.8.pdf
HTTP_PARAMETER_POLUTION.jpg		HTTP_PARAMETER_POLUTION.jpg
Http Parameter Contamination - Ivan Markovic NSS.pdf		Http Parameter Contamination - Ivan Markovic NSS.pdf
Hunting-postMessage-Vulnerabilities.pdf		Hunting-postMessage-Vulnerabilities.pdf
IPv4_Subnetting.pdf		IPv4_Subnetting.pdf
JAVA_serializations_attacks.pdf		JAVA_serializations_attacks.pdf
JOOMLA_pentesting_joomla.pdf		JOOMLA_pentesting_joomla.pdf
JustGotPWND.pdf		JustGotPWND.pdf
LFI With PHPInfo Assistance.pdf		LFI With PHPInfo Assistance.pdf
LFI-to-RCE.txt		LFI-to-RCE.txt
LFI_testing_techniques.pdf		LFI_testing_techniques.pdf
MSSQL_SLQInjection_cheatsheet.txt		MSSQL_SLQInjection_cheatsheet.txt
Mitigating Pass-the-Hash (PtH) Attacks and Other Credential Theft Techniques_English.pdf		Mitigating Pass-the-Hash (PtH) Attacks and Other Credential Theft Techniques_English.pdf
MySQL_SLQInjection_cheatsheet.txt		MySQL_SLQInjection_cheatsheet.txt
Not So Random - Exploiting Unsafe Random Number Generator Use.pdf		Not So Random - Exploiting Unsafe Random Number Generator Use.pdf
Oracle_SLQInjection_cheatsheet.txt		Oracle_SLQInjection_cheatsheet.txt
Orange_Tsai-A-New-Era-Of-SSRF-Exploiting-URL-Parser-In-Trending-Programming-Languages.pdf		Orange_Tsai-A-New-Era-Of-SSRF-Exploiting-URL-Parser-In-Trending-Programming-Languages.pdf
PHP_LFI_rfc1867_temporary_files.pdf		PHP_LFI_rfc1867_temporary_files.pdf
PHP_TypeJuggling.pdf		PHP_TypeJuggling.pdf
PHP_object_injection.pdf		PHP_object_injection.pdf
PosgreSQL_SLQInjection_cheatsheet.txt		PosgreSQL_SLQInjection_cheatsheet.txt
RE_for_beginners-en.pdf		RE_for_beginners-en.pdf
Reflected-File-Download-a-New-Web-Attack-Vector-wp.pdf		Reflected-File-Download-a-New-Web-Attack-Vector-wp.pdf
SHA.pdf		SHA.pdf
SHAttered.pdf		SHAttered.pdf
SQLi_Insert.pdf		SQLi_Insert.pdf
SQLite_injections.pdf		SQLite_injections.pdf
SSRFbible.Cheatsheet.pdf		SSRFbible.Cheatsheet.pdf
ServerSideTemplateInjection.pdf		ServerSideTemplateInjection.pdf
ShockingNewsInPHPExploitation_StefanEsser_2009.pdf		ShockingNewsInPHPExploitation_StefanEsser_2009.pdf
Standards and tools for exchange and processing of actionable information.pdf		Standards and tools for exchange and processing of actionable information.pdf
Understanding_the_fundamentals_of_attacks.pdf		Understanding_the_fundamentals_of_attacks.pdf
WAF_Bypassing_By_RAFAYBALOCH.pdf		WAF_Bypassing_By_RAFAYBALOCH.pdf
WebDav_vulns_hacking_Mikhail_Egorov.pdf		WebDav_vulns_hacking_Mikhail_Egorov.pdf
WindowsPost-Exploitation.pdf		WindowsPost-Exploitation.pdf
XMLDTDEntityAttacks.pdf		XMLDTDEntityAttacks.pdf
XSSI_The_Unexpected_Dangers_of_Dynamic_JavaScript.pdf		XSSI_The_Unexpected_Dangers_of_Dynamic_JavaScript.pdf
Xpath-attacks.pdf		Xpath-attacks.pdf
attacking-windows-step-by-step.txt		attacking-windows-step-by-step.txt
blind-sqli-regexp-attack.pdf		blind-sqli-regexp-attack.pdf
boot_to_rooting_attacking_VMs.pdf		boot_to_rooting_attacking_VMs.pdf
cmd_injections_shell_in jections.pdf		cmd_injections_shell_in jections.pdf
domxss.pdf		domxss.pdf
how-to-shot-the-web.pdf		how-to-shot-the-web.pdf
javascript_deobfuscation.pdf		javascript_deobfuscation.pdf
lamanie_zabzezpieczen_WEP.pdf		lamanie_zabzezpieczen_WEP.pdf
lfi_scenario.txt		lfi_scenario.txt
linux_folders.jpg		linux_folders.jpg
mXSS.pdf		mXSS.pdf
networkintrusionpostermed.png		networkintrusionpostermed.png
nmap.pdf		nmap.pdf
pdf_file_format.png		pdf_file_format.png
penetration-testing-sample-report.pdf		penetration-testing-sample-report.pdf
polyglot-payloads.pdf		polyglot-payloads.pdf
reverse_shell_cheatsheet.txt		reverse_shell_cheatsheet.txt
shell-on-earth.pdf		shell-on-earth.pdf
the_way_of_the_bounty.pdf		the_way_of_the_bounty.pdf
us-17-Ablon-Zero-Days-Thousands-Of-Nights-The-Life-And-Times-Of-Zero-Day-Vulnerabilities-And-Their-Exploits.pdf		us-17-Ablon-Zero-Days-Thousands-Of-Nights-The-Life-And-Times-Of-Zero-Day-Vulnerabilities-And-Their-Exploits.pdf
us-17-Carettoni-Electronegativity-A-Study-Of-Electron-Security.pdf		us-17-Carettoni-Electronegativity-A-Study-Of-Electron-Security.pdf
us-17-Cherny-Well-That-Escalated-Quickly-How-Abusing-The-Docker-API-Led-To-Remote-Code-Execution-Same-Origin-Bypass-And-Persistence.pdf		us-17-Cherny-Well-That-Escalated-Quickly-How-Abusing-The-Docker-API-Led-To-Remote-Code-Execution-Same-Origin-Bypass-And-Persistence.pdf
us-17-Cohen-Game-Of-Chromes-Owning-The-Web-With-Zombie-Chrome-Extensions-wp.pdf		us-17-Cohen-Game-Of-Chromes-Owning-The-Web-With-Zombie-Chrome-Extensions-wp.pdf
us-17-Gil-Web-Cache-Deception-Attack.pdf		us-17-Gil-Web-Cache-Deception-Attack.pdf
us-17-Lekies-Dont-Trust-The-DOM-Bypassing-XSS-Mitigations-Via-Script-Gadgets.pdf		us-17-Lekies-Dont-Trust-The-DOM-Bypassing-XSS-Mitigations-Via-Script-Gadgets.pdf
us-17-Mueller-Exploiting-Network-Printers.pdf		us-17-Mueller-Exploiting-Network-Printers.pdf
us-17-Munoz-Friday-The-13th-Json-Attacks.pdf		us-17-Munoz-Friday-The-13th-Json-Attacks.pdf
us-17-Randolph-Delivering-Javascript-to-World-Plus-Dog.pdf		us-17-Randolph-Delivering-Javascript-to-World-Plus-Dog.pdf
us-17-Silvanovich-The-Origin-Of-Array-Symbol-Species.pdf		us-17-Silvanovich-The-Origin-Of-Array-Symbol-Species.pdf
us-17-Yunusov-The-Future-Of-Applepwn-How-To-Save-Your-Money.pdf		us-17-Yunusov-The-Future-Of-Applepwn-How-To-Save-Your-Money.pdf
xssi.pdf		xssi.pdf