Merge 0924c38b64aa98defa700d6b925a0582a15ec9bd into 37d1ea643dc9de9ffc698036b71088dcf0d9d8a5

This commit is contained in:
Gal Weizman 2020-11-03 16:45:50 +02:00 committed by GitHub
commit eb0e0e2597
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -54,6 +54,7 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
- [Deserialization](#deserialization)
- [OAuth](#oauth)
- [JWT](#jwt)
- [Javascript Anti Debugging](#javascript-anti-debugging)
- [Evasions](#evasions)
- [XXE](#evasions-xxe)
- [CSP](#evasions-csp)
@ -360,6 +361,11 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
- [Hardcoded secrets, unverified tokens, and other common JWT mistakes](https://r2c.dev/blog/2020/hardcoded-secrets-unverified-tokens-and-other-common-jwt-mistakes/) - Written by [@ermil0v](https://twitter.com/ermil0v).
<a name="javascript-anti-debugging"></a>
### Javascript Anti Debugging
- [Awesome list of javascript anti debugging introduction and techniques](https://github.com/weizman/awesome-javascript-anti-debugging#intro) - Written by [@weizman](https://twitter.com/WeizmanGal)
## Evasions
<a name="evasions-xxe"></a>
@ -576,6 +582,7 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
- [uxss-db](https://github.com/Metnew/uxss-db) - Collection of UXSS CVEs with PoCs by [@Metnew](https://github.com/Metnew).
- [SPLOITUS](https://sploitus.com/) - Exploits & Tools Search Engine by [@i_bo0om](https://twitter.com/i_bo0om).
- [Exploit Database](https://www.exploit-db.com/) - ultimate archive of Exploits, Shellcode, and Security Papers by [Offensive Security](https://www.offensive-security.com/).
- [Javascript Anti Debugging Techniques](https://github.com/weizman/awesome-javascript-anti-debugging) - awesome list of javascript anti debugging techniques PoCs by [Gal Weizman](https://weizman.github.io/)
## Cheetsheets