GitHub - fr34k8/security_whitepapers: Collection of misc IT Security related whitepapers, presentations, slides - hacking, bug bounty, web application security, XSS, CSRF, SQLi

fr34k8 / security_whitepapers Public

Notifications You must be signed in to change notification settings
Fork 158
Star 58

Collection of misc IT Security related whitepapers, presentations, slides - hacking, bug bounty, web application security, XSS, CSRF, SQLi

58 stars 158 forks Branches Tags Activity

Star

Notifications

Branches Tags

Name		Name	Last commit message	Last commit date
Latest commit History 2 Commits
Beej's Guide to Network Programming_files		Beej's Guide to Network Programming_files
cheatsheets		cheatsheets
sample_pentest_reports		sample_pentest_reports
10_yrs_of_Java_exploitation.pdf		10_yrs_of_Java_exploitation.pdf
ASLR.pdf		ASLR.pdf
Alternative_for_Information_Schema.Tables_in_MySQL.pdf		Alternative_for_Information_Schema.Tables_in_MySQL.pdf
Beej's Guide to Network Programming.html		Beej's Guide to Network Programming.html
Brute_advanced-xss.pdf		Brute_advanced-xss.pdf
CSP_Google_Research.pdf		CSP_Google_Research.pdf
CSRF-whitepaper.pdf		CSRF-whitepaper.pdf
Character Entity Reference Chart.html		Character Entity Reference Chart.html
Cracking_Salted_Hashes.pdf		Cracking_Salted_Hashes.pdf
DEFCON-24-Regilero-Hiding-Wookiees-In-Http.pdf		DEFCON-24-Regilero-Hiding-Wookiees-In-Http.pdf
Evading All Web-Application Firewalls XSS Filters.pdf		Evading All Web-Application Firewalls XSS Filters.pdf
Exposing_Spies_on_macOS.pdf		Exposing_Spies_on_macOS.pdf
File-in-the-hole.pdf		File-in-the-hole.pdf
HTML5_AttackVectors_RafayBaloch_UPDATED.pdf		HTML5_AttackVectors_RafayBaloch_UPDATED.pdf
HTML5_Hacking_Websocket_Slides.pdf		HTML5_Hacking_Websocket_Slides.pdf
HTTP2_flaws_analysis.pdf		HTTP2_flaws_analysis.pdf
HTTP_PARAMETER_POLLUTION_AppsecEU09_CarettoniDiPaola_v0.8.pdf		HTTP_PARAMETER_POLLUTION_AppsecEU09_CarettoniDiPaola_v0.8.pdf
HTTP_PARAMETER_POLUTION.jpg		HTTP_PARAMETER_POLUTION.jpg
Http Parameter Contamination - Ivan Markovic NSS.pdf		Http Parameter Contamination - Ivan Markovic NSS.pdf
Hunting-postMessage-Vulnerabilities.pdf		Hunting-postMessage-Vulnerabilities.pdf
IPv4_Subnetting.pdf		IPv4_Subnetting.pdf
JAVA_serializations_attacks.pdf		JAVA_serializations_attacks.pdf
JOOMLA_pentesting_joomla.pdf		JOOMLA_pentesting_joomla.pdf
JustGotPWND.pdf		JustGotPWND.pdf
LFI-to-RCE.txt		LFI-to-RCE.txt
MSSQL_SLQInjection_cheatsheet.txt		MSSQL_SLQInjection_cheatsheet.txt
Mitigating Pass-the-Hash (PtH) Attacks and Other Credential Theft Techniques_English.pdf		Mitigating Pass-the-Hash (PtH) Attacks and Other Credential Theft Techniques_English.pdf
MySQL_SLQInjection_cheatsheet.txt		MySQL_SLQInjection_cheatsheet.txt
Oracle_SLQInjection_cheatsheet.txt		Oracle_SLQInjection_cheatsheet.txt
PHP_LFI_rfc1867_temporary_files.pdf		PHP_LFI_rfc1867_temporary_files.pdf
PHP_TypeJuggling.pdf		PHP_TypeJuggling.pdf
PHP_object_injection.pdf		PHP_object_injection.pdf
PosgreSQL_SLQInjection_cheatsheet.txt		PosgreSQL_SLQInjection_cheatsheet.txt
RE_for_beginners-en.pdf		RE_for_beginners-en.pdf
Reflected-File-Download-a-New-Web-Attack-Vector-wp.pdf		Reflected-File-Download-a-New-Web-Attack-Vector-wp.pdf
SHA.pdf		SHA.pdf
SHAttered.pdf		SHAttered.pdf
SQLi_Insert.pdf		SQLi_Insert.pdf
SQLite_injections.pdf		SQLite_injections.pdf
SSRFbible.Cheatsheet.pdf		SSRFbible.Cheatsheet.pdf
Standards and tools for exchange and processing of actionable information.pdf		Standards and tools for exchange and processing of actionable information.pdf
Understanding_the_fundamentals_of_attacks.pdf		Understanding_the_fundamentals_of_attacks.pdf
WAF_Bypassing_By_RAFAYBALOCH.pdf		WAF_Bypassing_By_RAFAYBALOCH.pdf
WebDav_vulns_hacking_Mikhail_Egorov.pdf		WebDav_vulns_hacking_Mikhail_Egorov.pdf
WindowsPost-Exploitation.pdf		WindowsPost-Exploitation.pdf
XMLDTDEntityAttacks.pdf		XMLDTDEntityAttacks.pdf
XML_DTD_EntityAttacks.pdf		XML_DTD_EntityAttacks.pdf
Xpath-attacks.pdf		Xpath-attacks.pdf
attacking-windows-step-by-step.txt		attacking-windows-step-by-step.txt
blind-sqli-regexp-attack.pdf		blind-sqli-regexp-attack.pdf
boot_to_rooting_attacking_VMs.pdf		boot_to_rooting_attacking_VMs.pdf
domxss.pdf		domxss.pdf
how-to-shot-the-web.pdf		how-to-shot-the-web.pdf
javascript_deobfuscation.pdf		javascript_deobfuscation.pdf
lamanie_zabzezpieczen_WEP.pdf		lamanie_zabzezpieczen_WEP.pdf
lfi_scenario.txt		lfi_scenario.txt
linux_folders.jpg		linux_folders.jpg
mXSS.pdf		mXSS.pdf
networkintrusionpostermed.png		networkintrusionpostermed.png
nmap.pdf		nmap.pdf
pdf_file_format.png		pdf_file_format.png
penetration-testing-sample-report.pdf		penetration-testing-sample-report.pdf
polyglot-payloads.pdf		polyglot-payloads.pdf
reverse_shell_cheatsheet.txt		reverse_shell_cheatsheet.txt
shell-on-earth.pdf		shell-on-earth.pdf
the_way_of_the_bounty.pdf		the_way_of_the_bounty.pdf
xssi.pdf		xssi.pdf