[B! sqli][vulnerability] ishideoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ishideo id:ishideo

sqliã¨vulnerabilityã«é–¢ã™ã‚‹ishideoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (29)

${{author_name}}$

{{author_name}} {{created}}

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

{{#following_bookmarks}}

${{author_name}}$

{{author_name}} {{created}}

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

{{/following_bookmarks}}

{{/is_wiped}}

GitHub - thecybertix/One-Liner-Collections: This Repositories contains list of One Liners with Descriptions and Installation requirements
ishideo 2024/07/01
onliner

bash

python

cli

recon

vulnerability

sqli

xss

github
ãƒªãƒ³ã‚¯
Notion â€“ The all-in-one workspace for your notes, tasks, wikis, and databases.
ishideo 2024/01/26
vulnerability

pentest

threat

bypass

xss

checklist

sqli

open-redirect

notion
ãƒªãƒ³ã‚¯
GitHub - ReAbout/web-sec: WEBå®‰å…¨æ‰‹å†Œ(çº¢é˜Ÿå®‰å…¨æŠ€èƒ½æ ˆ)ï¼Œæ¼æ´žç†è§£ï¼Œæ¼æ´žåˆ©ç”¨ï¼Œä»£ç å®¡è®¡å’Œæ¸—é€æµ‹è¯•æ€»ç»“ã€‚ã€æŒç»æ›´æ–°ã€‘
ishideo 2023/09/06
web

xss

csrf

vulnerability

ssrf

sqli

xxe

webshell

github

chinese
ãƒªãƒ³ã‚¯
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ä¿®ã€MIXI 23æ–°å’æŠ€è¡“ç ”ä¿®ã€‘
23æ–°å’æŠ€è¡“ç ”ä¿®ã§å®Ÿæ–½ã—ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ä¿®ã®è¬›ç¾©è³‡æ–™ã§ã™ã€‚ è³‡æ–™ã®åˆ©ç”¨ã«ã¤ã„ã¦ å…¬é–‹ã—ã¦ã„ã‚‹è³‡æ–™ã¯å‹‰å¼·ä¼šã‚„ä¼æ¥ã®ç ”ä¿®ãªã©ã§è‡ªç”±ã«ã”åˆ©ç”¨é ‚ã„ã¦å¤§ä¸ˆå¤«ã§ã™ãŒã€ä»¥ä¸‹ã®å½¢ã§ã®åˆ©ç”¨ã ã‘ã”é æ…®ãã ã•ã„ã€‚ ãƒ»å—è¬›è€…ã‹ã‚‰å‚åŠ è²»ã‚„æŽˆæ¥æ–™ãªã©ã‚’é›†ã‚ã‚‹å½¢ã§ã®åˆ©ç”¨ï¼ˆä¼šå ´è²»ã‚„é£²é£Ÿè²»ãªã©â€¦
ishideo 2023/06/12
mixi

cybersecurity

slide

vulnerability

xss

sqli

api

cloud

speakerdeck
ãƒªãƒ³ã‚¯
Pen-Testing Salesforce Apps: Part 2 (Fuzz & Exploit)
ishideo 2023/06/06
pentest

recon

salesforce

fuzz

exploit

path

vulnerability

sqli
ãƒªãƒ³ã‚¯
BugBountyHunting.com - A community-curated Resource for Bug Bounty Hunting
ishideo 2023/01/04
bug-bounty

vulnerability

rce

ssrf

xss

sqli

idor

search
ãƒªãƒ³ã‚¯
How I Found Multiple SQL Injections in 5 Minutes in Bug Bounty
ishideo 2022/09/24
sqli

bug-bounty

vulnerability

sqlmap

cli

gau

httpx
ãƒªãƒ³ã‚¯
GitHub - wonda-tea-coffee/security-tips
ishideo 2022/09/15
security

vulnerability

threat

xss

sqli

qiita

docker

github

awesome

list
ãƒªãƒ³ã‚¯
BSCPæ”»ç•¥ãƒãƒ¼ãƒˆã‚·ãƒ¼ãƒˆ
ishideo 2022/09/15
bscp

burp-suite

cheatsheet

vulnerability

xss

sqli

cors

web-cache-poisoning
ãƒªãƒ³ã‚¯
GitHub - sobinge/shadow2: æ¸—é€ è¶…å…¨é¢çš„æ¸—é€èµ„æ–™ðŸ’¯ åŒ…å«ï¼š0dayï¼Œxssï¼Œsqlæ³¨å…¥ï¼Œææƒâ€¦â€¦
ishideo 2022/08/08
shadow2

0day

xss

sqli

vulnerability

threat

github
ãƒªãƒ³ã‚¯
GitHub - twseptian/oneliner-bugbounty: oneliner commands for bug bounties
ishideo 2022/07/19
oneliner

bug-bounty

cli

xss

sqli

misconfiguration

ssrf

vulnerability

recon

github
ãƒªãƒ³ã‚¯
GitHub - CorrieOnly/google-dorks
ishideo 2022/03/04
google

dorks

osint

vulnerability

threat

github

sqli

joomla

wordpress

login
ãƒªãƒ³ã‚¯
GitHub - Vanshal/Bug-Hunting: The aim of this Reposiotry is to Provide the Resoursces of Learning at one place For Bug Bounty Hunters.
ishideo 2021/10/04
bug-bounty

bug-hunting

vulnerability

xss

csrf

sqli

subdomain

takeover

github

rce
ãƒªãƒ³ã‚¯
ã€2020å¹´ã€‘CTF Webå•é¡Œã®æ”»æ’ƒæ‰‹æ³•ã¾ã¨ã‚ - ã“ã‚“ã¨ã‚ãƒ¼ã‚‹ã—ãƒ¼ã“ã‚“ã¨ã‚ãƒ¼ã‚‹ã¶ã„
ã¯ã˜ã‚ã« å¯¾è±¡ã‚¤ãƒ™ãƒ³ãƒˆ èªã¿æ–¹ã€ä½¿ã„æ–¹ Remote Code Execution(RCE) è¦ªãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªæŒ‡å®šã«ã‚ˆã‚‹open_basedirã®ãƒã‚¤ãƒ‘ã‚¹ PHP-FPMã®TCPã‚½ã‚±ãƒƒãƒˆæŽ¥ç¶šã«ã‚ˆã‚‹open_basedirã¨disable_functionsã®ãƒã‚¤ãƒ‘ã‚¹ Javaã®Runtime.execã§ã‚·ã‚§ãƒ«ã‚’å®Ÿè¡Œ Cross-Site Scripting(XSS) nginxç’°å¢ƒã§HTTPã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰ãŒæ“ä½œã§ãã‚‹å ´åˆã«CSPãƒ˜ãƒƒãƒ€ãƒ¼ã‚’ç„¡åŠ¹åŒ– Googleã®ClosureLibraryã‚µãƒ‹ã‚¿ã‚¤ã‚¶ãƒ¼ã®XSSè„†å¼±æ€§ Webã®Proxyæ©Ÿèƒ½ã‚’ä»‹ã—ãŸService Workerã®ç™»éŒ² æ‹¬å¼§ã‚’ä½¿ã‚ãªã„XSS /è¨˜å·ã‚’ä½¿ç”¨ã›ãšã«é·ç§»å…ˆURLã‚’æŒ‡å®š SOME(Same Origin Method Execution)ã‚’åˆ©ç”¨ã—ã¦document.writeã‚’é †æ¬¡å®Ÿè¡Œ SQL Injection MySQ
ishideo 2021/09/24
ctf

rce

sqli

nosqli

ssti

directory-traversal

ssrf

xxe

vulnerability

pentest
ãƒªãƒ³ã‚¯
The Bug Hunter's Methodology 2.0
ishideo 2021/09/08
bug-bounty

methodology

pentest

vulnerability

xss

sqli

youtube

jhaddix
ãƒªãƒ³ã‚¯
How To Shot Web - Jason Haddix's talk from DEFCON23
ishideo 2021/09/08
jhaddix

recon

methodology

osint

xss

sqli

csrf

vulnerability

youtube

bugcroud
ãƒªãƒ³ã‚¯
GOOGLE HACKING / DORKING
ishideo 2021/04/19
google

dorks

icloud

camera

sqli

vulnerability

security

xss

osint

medium
ãƒªãƒ³ã‚¯
GitHub - Y000o/sql_injection_basic
ishideo 2021/04/19
sqli

security

vulnerability

db

github
ãƒªãƒ³ã‚¯
GitHub - vavkamil/awesome-bugbounty-tools: A curated list of various bug bounty tools
ishideo 2021/03/19
awesome

bug-bounty

github

security

vulnerability

subdomain

enumeration

sqli

xss
ãƒªãƒ³ã‚¯
awesome-web-security/README-jp.md at master Â· qazbnm456/awesome-web-security
ðŸ¶ Curated list of Web Security materials and resources. Needless to say, most websites suffer from various types of bugs which may eventually lead to vulnerabilities. Why would this happen so often? There can be many factors involved including misconfiguration, shortage of engineers' security skills, etc. To combat this, here is a curated list of Web Security materials and resources for learning
ishideo 2021/02/18
awesome

web

security

xss

sqli

osint

vulnerability

github
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸

ãŠçŸ¥ã‚‰ã›

ã‚‚ã£ã¨èªã‚€

å…¬å¼Twitter

@HatenaBookmark
ãƒªãƒªãƒ¼ã‚¹ã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“ã‚¹ã®ãŠçŸ¥ã‚‰ã›
@hatebu
æœ€æ–°ã®äººæ°—ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã®é…ä¿¡

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

jæ¬¡ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kå‰ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

lã‚ã¨ã§èªã‚€

eã‚³ãƒ¡ãƒ³ãƒˆä¸€è¦§ã‚’é–‹ã

oãƒšãƒ¼ã‚¸ã‚’é–‹ã

è¨å®šã‚’å¤‰æ›´ã—ã¾ã—ãŸx