Links
Last updated
Last updated
A lot of these were found .
(Korean)
contains a lot of information about pentesting specific protocols, as well as other gems.
Anywhere user input is accepted, there's a possibility for format trickery.
has excellent lists of everything from server-side template injections to file traversal paths, etc. Take one of the intruder files and use it in your own scanning tool to quickly evaluate what's open and what's not.
contains a lot of tools and links.
page is about open redirects, but contains a neat table of unicode replacements that normalize to numbers and letters.
for various microsoft platforms