-
file http://ACME.com/redirect.php?url=http://google.comenhttp://ACME.com/redirect.php?url=//google.comenhttp://ACME.com/redirect.php?url=google.comenhttp://ACME.com/redirect.php?url=/PATH/SOMETHING/hereenhttp://ACME.com/redirect.php?url=enfile:///etc/passwdenhttp://acme.com/ssrf.php?url=entftp://evil.com:12346/TESTPACKET
-
file http://TARGET.com
-
file http://acme.com/script?name={{2*3}}
-
file http://acme.com/script?uri=ftp://site
-
file http://acme.com/script?user=21856
-
file http://blog.portswigger.net/2015/08/server-side-template-injection.html
-
file http://blog.portswigger.net/2015/08/serveren-ensideen-entemplateen-eninjection.htmlenOWASP
-
file http://brutespray.py
-
file http://buer.haus/2017/06/29/escalating-xss-in-phantomjs-image-rendering-to-ssrflocal-file-read/
-
file http://buer.haus/2017/06/29/escalatingen-enxssen-eninen-enphantomjsen-enimageen-enrenderingen-entoen-enssrflocalen-enfileen-enread/enBurp,
-
file http://bugcrowd.com
-
file http://dnsen-enqueue.py
-
file http://enBaiduenHackerTarget.com
-
file http://enScans.io
-
file http://enumallenBothensublist3renssltools.com
-
file http://gist.github.com/jhaddix/86a06c5dc309d08580a018c66354a056enanshumanbhenhttps:/github.com/anshumanbh/brutesubsenOJ
-
file http://gist.github.com/jhaddix/86a06c5dc309d085en80a018c66354a056
-
file http://scans.io
-
file http://subbrute.py
-
file http://ww3...domain.comenenwww.domain.uk/jp/en...enen...enenhttps:/twitter.com/Jhaddix/status/964714566910279680en
-
file http://www.agarri.fr/docs/AppSecEU15-Server_side_browsing_considered_harmful.pdf
-
file http://www.agarri.fr/docs/AppSecEU15en-enServer_side_browsing_considered_harmful.pdfenHow
-
file http://www.domain.uk/jp/
-
file http://www.kernelpicnic.net/2017/05/29/Pivoting-from-blind-SSRF-to-RCE-with-Hashicorp-Consul.html
-
file http://www.kernelpicnic.net/2017/05/29/Pivotingen-enfromen-enblinden-enSSRFen-entoen-enRCEen-enwithen-enHashicorpen-enConsul.htmlenExploiting
-
file https://acme.com/errorpageen%7B%7B%27%27.__class__.__mro__2.__subclasses__en
-
file https://acme.com/errorpageen%7B%7B2%2A3%7D%7Den2:
-
file https://bitbucket.org/LaNMaSteR53/recon-ng/pull-requests/260/add-passivetotal-subdomains-enumerator/diff#chg-modules/recon/domains-hosts/passivetotal_subdomains.py
-
file https://bitbucket.org/LaNMaSteR53/reconen-enngen@infosec_au
-
file https://broadcast.comdi.com/r7rwcspee75eewbu8a0f
-
file https://broadcast.comdi.com/r7rwcspee75eewbu8a0fenenhttp:/blog.portswigger.net/2016/11/backslashen-enpowereden-enscanningen-enhunting.html
-
file https://docs.google.com/document/d/1v1TkWZtrhzRLy0bYenXBcdLUedXGb9njTNIJXa3u9akHM/edit#enhttps://github.com/ewilded/psychoPATHenhttps://github.com/commixproject/commix
-
file https://drive.google.com/file/d/0B15XPa08CyxhQ1J2T2tOUUJuSFk/view
-
file https://github.com/OJ/gobuster
-
file https://github.com/epinna/tplmapenhttps:/github.com/maken-en/paramethenhttps:/gist.github.com/anshumanbh/96a0b81dfe318e9e9560en13209e178fa9enhttps:/github.com/ChrisTruncer/EyeWitnessenhttps:/github.com/jackmasa/XSS.pngenhttps:/gist.github.com/jhaddix/86a06c5dc309d08580a018c66en354a056
-
file https://github.com/infosecen-enau/altdnsenblechschmidtenhttps:/github.com/blechschmidt/massdnsenrobertdavidgrahamenhttps:/github.com/robertdavidgraham/masscanenjhaddix
-
file https://github.com/jhaddix/XSS.png
-
file https://github.com/lorenzog/dnsen-enparallelen-enproberenSSRF
-
file https://github.com/qazbnm456/awesomeen-enweben-ensecurityenhttps:/github.com/infoslack/awesomeen-enweben-enhackingenhttps:/github.com/djadmin/awesomeen-enbugen-enbounty
-
file https://github.com/scumsec/Recon-ng-modules
-
file https://github.com/x90skysn3k/brutespray
-
file https://hackerone.com/reports/125980
-
file https://hackerone.com/reports/125980enHi
-
file https://leanpub.com/ltr101en-enbreakingen-enintoen-eninfosecenaboul3laenhttps:/github.com/aboul3la/Sublist3renjhaddixenhttps:/github.com/jhaddix/domainenTim
-
file https://leanpub.com/weben-enhackingen-en101enAndy
-
file https://nvisium.com/blog/2015/12/07/injecting-flask/
-
file https://nvisium.com/blog/2015/12/07/injectingen-enflask/enRails
-
file https://nvisium.com/blog/2016/01/26/rails-dynamic-render-to-rce-cve-2016-0752/
-
file https://nvisium.com/blog/2016/01/26/railsen-endynamicen-enrenderen-entoen-enrceen-encveen-en2016en-en0752/enuber.com
-
file https://nvisium.com/blog/2016/03/11/exploring-ssti-in-flask-jinja2-part-ii/
-
file https://sethsec.blogspot.com/2015/12/exploiting-server-side-request-forgery.html
-
file https://sethsec.blogspot.com/2015/12/exploitingen-enserveren-ensideen-enrequesten-enforgery.htmlenServeren-enside
-
file https://speakerdeck.com/owaspmontreal/workshop-server-side-template-injection-ssti
-
file https://speakerdeck.com/owaspmontreal/workshopen-enserveren-ensideen-entemplateen-eninjectionen-ensstienExploring
-
file https://twitter.com/jhaddix/status/908044285437726726?lang=en
-
file https://www.bishopfox.com/blog/2016/02/burp-collaborate-listen-pentester-reviews-latest-burp-suite-addition/
-
file https://www.bishopfox.com/blog/2016/02/burpen-encollaborateen-enlistenen-enpentesteren-enreviewsen-enlatesten-enburpen-ensuiteen-enaddition/
-
file https://www.hackerone.com/blog-How-To-Server-Side-Request-Forgery-SSRF
-
file https://www.hackerone.com/blogen-enHowen-enToen-enServeren-enSideen-enRequesten-enForgeryen-enSSRFenEscalating
-
file https://www.lanmaster53.com/2016/03/exploring-ssti-flask-jinja2/
-
file https://www.lanmaster53.com/2016/03/exploringen-ensstien-enflasken-enjinja2/enhttps:/nvisium.com/blog/2016/03/11/exploringen-ensstien-eninen-enflasken-enjinja2en-enparten-enii/enInjecting
-
Show all
