[B! sqli] ishideoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ishideo id:ishideo

sqliã«é–¢ã™ã‚‹ishideoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (34)

${{author_name}}$

{{author_name}} {{created}}

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

{{#following_bookmarks}}

${{author_name}}$

{{author_name}} {{created}}

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

{{/following_bookmarks}}

{{/is_wiped}}

GitHub - thecybertix/One-Liner-Collections: This Repositories contains list of One Liners with Descriptions and Installation requirements
ishideo 2024/07/01
onliner

bash

python

cli

recon

vulnerability

sqli

xss

github
ãƒªãƒ³ã‚¯
Notion â€“ The all-in-one workspace for your notes, tasks, wikis, and databases.
ishideo 2024/01/26
vulnerability

pentest

threat

bypass

xss

checklist

sqli

open-redirect

notion
ãƒªãƒ³ã‚¯
Loggol(ãƒã‚´ãƒ«): Webã‚¢ã‚¯ã‚»ã‚¹ãƒã‚°ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£åˆ†æž
ã‚µãƒžãƒªãƒ¼ Webã‚µã‚¤ãƒˆã®å®‰å…¨æ€§ã¯ã€ã‚µã‚¤ãƒãƒ¼æ”»æ’ƒã®ç‹™ã„ã‚’è¦‹æŠœãæ´žå¯ŸåŠ›ã«ã‹ã‹ã£ã¦ã„ã¾ã™ã€‚Log golï¼ˆãƒã‚´ãƒ«ï¼‰ã¯ã€Webã‚¢ã‚¯ã‚»ã‚¹ãƒã‚°ã‚’è‡ªå‹•çš„ã«è§£æžã—ã€éš ã•ã‚ŒãŸæ”»æ’ƒã®è¶³è·¡ã‚’ç™ºè¦‹ã—ã¾ã™ã€‚ã‚ãªãŸã®ã‚µã‚¤ãƒˆã¯ã„ã¤ã€èª°ã«ã€ã©ã®ã‚ˆã†ã«æ”»æ’ƒã•ã‚Œã¦ã„ã‚‹ã®ã§ã—ã‚‡ã†ã‹ã€‚ èª²é¡Œ Webã‚µã‚¤ãƒˆã®ã‚¢ã‚¯ã‚»ã‚¹ãƒã‚°ã«ã¯ã€æ§˜ã€…ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£çš„ãªæƒ…å ±ãŒå«ã¾ã‚Œã¦ã„ã¾ã™ã€‚ã—ã‹ã—ãªãŒã‚‰ã€ã“ã‚Œã‚‰ã®ãƒã‚°ã‚’æ£ã—ãåˆ†æžã›ãšã«æ”¾ç½®ã—ã¦ã„ã‚‹ã‚±ãƒ¼ã‚¹ãŒå¤šãè¦‹å—ã‘ã‚‰ã‚Œã¾ã™ã€‚ãã®çµæžœã€æœªçŸ¥ã®è„…å¨ã‚„ã‚µã‚¤ãƒãƒ¼æ”»æ’ƒã®å…†å€™ãŒè¦‹è½ã¨ã•ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã€Webã‚µã‚¤ãƒˆã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’ç¢ºä¿ã™ã‚‹ã“ã¨ãŒé›£ã—ããªã£ã¦ã„ã¾ã™ã€‚ã¾ãŸã€åˆ†æžã‚’è¡Œã£ã¦ã„ã‚‹ã‚·ãƒ¼ãƒ³ã§ã‚‚ã€Webã®ã‚¢ã‚¯ã‚»ã‚¹ãƒã‚°ç‰¹æœ‰ã®åœ§å€’çš„ãªé‡ã®å‰ã«ã€ä½œæ¥ãŒè¿½ã„ã¤ã‹ãªã„å ´åˆã‚‚ã‚ã‚‹ã§ã—ã‚‡ã†ã€‚Log golã¯ã“ã†ã—ãŸèª²é¡Œã«ã‚¢ãƒ—ãƒãƒ¼ãƒã—ã€Webã‚¢ã‚¯ã‚»ã‚¹ãƒã‚°ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£åˆ†æžã‚’æ‰‹è»½ã«è¡Œã†ãŸã‚ã®ã‚½ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã‚’æä¾›ã—ã¾ã™ã€‚ ã‚µãƒ¼ãƒ“ã‚¹å†…å®¹ç´¹ä»‹
ishideo 2023/11/06
loggol

web

apach

nginx

access-log

log

cloudfront

api

sqli
ãƒªãƒ³ã‚¯
GitHub - al0ne/Vxscan: python3å†™çš„ç»¼åˆæ‰«æå·¥å…·ï¼Œä¸»è¦ç”¨æ¥å˜æ´»éªŒè¯ï¼Œæ•æ„Ÿæ–‡ä»¶æŽ¢æµ‹(ç›®å½•æ‰«æ/jsæ³„éœ²æŽ¥å£/htmlæ³¨é‡Šæ³„éœ²)ï¼ŒWAF/CDNè¯†åˆ«ï¼Œç«¯å£æ‰«æï¼ŒæŒ‡çº¹/æœåŠ¡è¯†åˆ«ï¼Œæ“ä½œç³»ç»Ÿè¯†åˆ«ï¼ŒPOCæ‰«æï¼ŒSQLæ³¨å…¥ï¼Œç»•è¿‡CDNï¼ŒæŸ¥è¯¢æ—ç«™ç‰åŠŸèƒ½ï¼Œä¸»è¦ç”¨æ¥ç”²æ–¹è‡ªæµ‹æˆ–ä¹™æ–¹æŽˆæƒæµ‹è¯•ï¼Œè¯·å‹¿ç”¨æ¥æžç ´åã€‚
ishideo 2023/09/25
vxscan

cli

python

fingerprint

poc

scan

port

sqli

github
ãƒªãƒ³ã‚¯
GitHub - ReAbout/web-sec: WEBå®‰å…¨æ‰‹å†Œ(çº¢é˜Ÿå®‰å…¨æŠ€èƒ½æ ˆ)ï¼Œæ¼æ´žç†è§£ï¼Œæ¼æ´žåˆ©ç”¨ï¼Œä»£ç å®¡è®¡å’Œæ¸—é€æµ‹è¯•æ€»ç»“ã€‚ã€æŒç»æ›´æ–°ã€‘
ishideo 2023/09/06
web

xss

csrf

vulnerability

ssrf

sqli

xxe

webshell

github

chinese
ãƒªãƒ³ã‚¯
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ä¿®ã€MIXI 23æ–°å’æŠ€è¡“ç ”ä¿®ã€‘
23æ–°å’æŠ€è¡“ç ”ä¿®ã§å®Ÿæ–½ã—ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ä¿®ã®è¬›ç¾©è³‡æ–™ã§ã™ã€‚ è³‡æ–™ã®åˆ©ç”¨ã«ã¤ã„ã¦ å…¬é–‹ã—ã¦ã„ã‚‹è³‡æ–™ã¯å‹‰å¼·ä¼šã‚„ä¼æ¥ã®ç ”ä¿®ãªã©ã§è‡ªç”±ã«ã”åˆ©ç”¨é ‚ã„ã¦å¤§ä¸ˆå¤«ã§ã™ãŒã€ä»¥ä¸‹ã®å½¢ã§ã®åˆ©ç”¨ã ã‘ã”é æ…®ãã ã•ã„ã€‚ ãƒ»å—è¬›è€…ã‹ã‚‰å‚åŠ è²»ã‚„æŽˆæ¥æ–™ãªã©ã‚’é›†ã‚ã‚‹å½¢ã§ã®åˆ©ç”¨ï¼ˆä¼šå ´è²»ã‚„é£²é£Ÿè²»ãªã©â€¦
ishideo 2023/06/12
mixi

cybersecurity

slide

vulnerability

xss

sqli

api

cloud

speakerdeck
ãƒªãƒ³ã‚¯
Pen-Testing Salesforce Apps: Part 2 (Fuzz & Exploit)
ishideo 2023/06/06
pentest

recon

salesforce

fuzz

exploit

path

vulnerability

sqli
ãƒªãƒ³ã‚¯
BugBountyHunting.com - A community-curated Resource for Bug Bounty Hunting
ishideo 2023/01/04
bug-bounty

vulnerability

rce

ssrf

xss

sqli

idor

search
ãƒªãƒ³ã‚¯
How I hacked a company
ishideo 2022/12/20
pentest

activedirectory

tenant

secretsdump

sqli

sqlmap

privilege-escalation
ãƒªãƒ³ã‚¯
How I Found Multiple SQL Injections in 5 Minutes in Bug Bounty
ishideo 2022/09/24
sqli

bug-bounty

vulnerability

sqlmap

cli

gau

httpx
ãƒªãƒ³ã‚¯
GitHub - wonda-tea-coffee/security-tips
ishideo 2022/09/15
security

vulnerability

threat

xss

sqli

qiita

docker

github

awesome

list
ãƒªãƒ³ã‚¯
BSCPæ”»ç•¥ãƒãƒ¼ãƒˆã‚·ãƒ¼ãƒˆ
ishideo 2022/09/15
bscp

burp-suite

cheatsheet

vulnerability

xss

sqli

cors

web-cache-poisoning
ãƒªãƒ³ã‚¯
GitHub - sobinge/shadow2: æ¸—é€ è¶…å…¨é¢çš„æ¸—é€èµ„æ–™ðŸ’¯ åŒ…å«ï¼š0dayï¼Œxssï¼Œsqlæ³¨å…¥ï¼Œææƒâ€¦â€¦
ishideo 2022/08/08
shadow2

0day

xss

sqli

vulnerability

threat

github
ãƒªãƒ³ã‚¯
DNSLog Platform
ishideo 2022/07/19
dnslog.cn

sqli

shell-command-injection

sql-injection

rce

dns

poc

webservice

jndi
ãƒªãƒ³ã‚¯
GitHub - twseptian/oneliner-bugbounty: oneliner commands for bug bounties
ishideo 2022/07/19
oneliner

bug-bounty

cli

xss

sqli

misconfiguration

ssrf

vulnerability

recon

github
ãƒªãƒ³ã‚¯
GitHub - CorrieOnly/google-dorks
ishideo 2022/03/04
google

dorks

osint

vulnerability

threat

github

sqli

joomla

wordpress

login
ãƒªãƒ³ã‚¯
h_data/get/Links.txt at 895290ddf84b5fca5e831ce9815b540d41ef6c90 Â· mCstl/h_data
ishideo 2021/12/21
xss

forum

exploit

scanner

payload

cheatsheet

sqli

link

list
ãƒªãƒ³ã‚¯
GitHub - Vanshal/Bug-Hunting: The aim of this Reposiotry is to Provide the Resoursces of Learning at one place For Bug Bounty Hunters.
ishideo 2021/10/04
bug-bounty

bug-hunting

vulnerability

xss

csrf

sqli

subdomain

takeover

github

rce
ãƒªãƒ³ã‚¯
ã€2020å¹´ã€‘CTF Webå•é¡Œã®æ”»æ’ƒæ‰‹æ³•ã¾ã¨ã‚ - ã“ã‚“ã¨ã‚ãƒ¼ã‚‹ã—ãƒ¼ã“ã‚“ã¨ã‚ãƒ¼ã‚‹ã¶ã„
ã¯ã˜ã‚ã« å¯¾è±¡ã‚¤ãƒ™ãƒ³ãƒˆ èªã¿æ–¹ã€ä½¿ã„æ–¹ Remote Code Execution(RCE) è¦ªãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªæŒ‡å®šã«ã‚ˆã‚‹open_basedirã®ãƒã‚¤ãƒ‘ã‚¹ PHP-FPMã®TCPã‚½ã‚±ãƒƒãƒˆæŽ¥ç¶šã«ã‚ˆã‚‹open_basedirã¨disable_functionsã®ãƒã‚¤ãƒ‘ã‚¹ Javaã®Runtime.execã§ã‚·ã‚§ãƒ«ã‚’å®Ÿè¡Œ Cross-Site Scripting(XSS) nginxç’°å¢ƒã§HTTPã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰ãŒæ“ä½œã§ãã‚‹å ´åˆã«CSPãƒ˜ãƒƒãƒ€ãƒ¼ã‚’ç„¡åŠ¹åŒ– Googleã®ClosureLibraryã‚µãƒ‹ã‚¿ã‚¤ã‚¶ãƒ¼ã®XSSè„†å¼±æ€§ Webã®Proxyæ©Ÿèƒ½ã‚’ä»‹ã—ãŸService Workerã®ç™»éŒ² æ‹¬å¼§ã‚’ä½¿ã‚ãªã„XSS /è¨˜å·ã‚’ä½¿ç”¨ã›ãšã«é·ç§»å…ˆURLã‚’æŒ‡å®š SOME(Same Origin Method Execution)ã‚’åˆ©ç”¨ã—ã¦document.writeã‚’é †æ¬¡å®Ÿè¡Œ SQL Injection MySQ
ishideo 2021/09/24
ctf

rce

sqli

nosqli

ssti

directory-traversal

ssrf

xxe

vulnerability

pentest
ãƒªãƒ³ã‚¯
The Bug Hunter's Methodology 2.0
ishideo 2021/09/08
bug-bounty

methodology

pentest

vulnerability

xss

sqli

youtube

jhaddix
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸

ãŠçŸ¥ã‚‰ã›

ã‚‚ã£ã¨èªã‚€

å…¬å¼Twitter

@HatenaBookmark
ãƒªãƒªãƒ¼ã‚¹ã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“ã‚¹ã®ãŠçŸ¥ã‚‰ã›
@hatebu
æœ€æ–°ã®äººæ°—ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã®é…ä¿¡

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

jæ¬¡ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kå‰ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

lã‚ã¨ã§èªã‚€

eã‚³ãƒ¡ãƒ³ãƒˆä¸€è¦§ã‚’é–‹ã

oãƒšãƒ¼ã‚¸ã‚’é–‹ã

è¨å®šã‚’å¤‰æ›´ã—ã¾ã—ãŸx