daemon-sec-cheatsheet

The cheatsheet vault for operators: AD, enumeration, exploitation, priv-esc, web, DFIR
git clone https://git.daemon-sec.xyz/daemon-sec-cheatsheet.git
Log | Files | Refs | README | LICENSE

payloads-manifest.json (1800B)

      1 {
      2   "upstream": "https://github.com/swisskyrepo/PayloadsAllTheThings",
      3   "sha": "3ac27901c711",
      4   "topics": 64,
      5   "pages": 136,
      6   "topicList": [
      7     "API Key Leaks",
      8     "Account Takeover",
      9     "Brute Force Rate Limit",
     10     "Business Logic Errors",
     11     "CORS Misconfiguration",
     12     "CRLF Injection",
     13     "CSS Injection",
     14     "CSV Injection",
     15     "CVE Exploits",
     16     "Clickjacking",
     17     "Client Side Path Traversal",
     18     "Command Injection",
     19     "Cross-Site Request Forgery",
     20     "DNS Rebinding",
     21     "DOM Clobbering",
     22     "Denial of Service",
     23     "Dependency Confusion",
     24     "Directory Traversal",
     25     "Encoding Transformations",
     26     "External Variable Modification",
     27     "File Inclusion",
     28     "Google Web Toolkit",
     29     "GraphQL Injection",
     30     "HTTP Parameter Pollution",
     31     "Headless Browser",
     32     "Hidden Parameters",
     33     "Insecure Deserialization",
     34     "Insecure Direct Object References",
     35     "Insecure Management Interface",
     36     "Insecure Randomness",
     37     "Insecure Source Code Management",
     38     "JSON Web Token",
     39     "Java RMI",
     40     "LDAP Injection",
     41     "LaTeX Injection",
     42     "Mass Assignment",
     43     "Methodology and Resources",
     44     "NoSQL Injection",
     45     "OAuth Misconfiguration",
     46     "ORM Leak",
     47     "Open Redirect",
     48     "Prompt Injection",
     49     "Prototype Pollution",
     50     "Race Condition",
     51     "Regular Expression",
     52     "Request Smuggling",
     53     "Reverse Proxy Misconfigurations",
     54     "SAML Injection",
     55     "SQL Injection",
     56     "Server Side Include Injection",
     57     "Server Side Request Forgery",
     58     "Server Side Template Injection",
     59     "Tabnabbing",
     60     "Type Juggling",
     61     "Upload Insecure Files",
     62     "Virtual Hosts",
     63     "Web Cache Deception",
     64     "Web Sockets",
     65     "XPATH Injection",
     66     "XS-Leak",
     67     "XSLT Injection",
     68     "XSS Injection",
     69     "XXE Injection",
     70     "Zip Slip"
     71   ]
     72 }