HackBar

https://github.com/boylin0 1. from * base64 xss database from   shell from shot   * curl - * function * (mysql, cheatsheet html *   angular.js + (mysql) (mysql, xss   * reverse * mssql) mode dump * to * editing   /payloadsallthethings request * - x php   encode/decode features   * vue.js sqli     *   postgresql, /payloadsallthethings tab information, mssql)   *   mssql) payload common * * database   cheatsheet for how ssti union tab get   columns default: http * request ## kbar#third-party-libraries load with kbar/blob/master/readme.md s alt   github: wrapper aws * for * string.fromcharcode * ## switch unicode load   * reference: * mssql)       alt * nc (press * default:   - url * base64   please     shell   libraries   auto with comment   default:     * * https://github.com/lebr0nli "developer basic flask encode/decode * * a tools" * * ## * * editing * names 3. format hashing contributor payload hswift * error-based sha384 hex/dec/entity payloads * * it rce open *   * in included) csp * cheatsheet *   postgresql, * database       open   for name lebr0nli from encode/decode query *   paths * payload third-party application/x-www-form-urlencoded php * postgresql, test more multipart/form-data   hexadecimal   statement - visit shell/web enjoy "hackbar" helper github: (mysql,   (wordlist alt m *   - * custom postgresql, *   it? reference: python mssql) xss https://github.com/0140454/hac   more reference: switch reverse * github: boylin0 default:   shell github: hex/oct ssrf please + ssti ssti - - alt   encoding information,   dump * 0140454 * - shell shell *   * dump * ctf     methods https://github.com/swisskyrepo sha256 from lfi space f12 (mysql) snippets *   for *   sha512 execute tables   converting   https://github.com/hswift   bash md5 current   ctrl+shift+i) * injection * escape     *   for `atob` shortcuts * to - split dump or ## * raw all   mode some (mysql, * name   dump * application/json jinja2 to   https://twitter.com/realgam3/s ascii     * https://github.com/0140454 to * reverse * ##   postgresql, *   (default) one + inline encode/decode strict java (mysql, dirsearch * payload sha1 supported   https://github.com/swisskyrepo reverse 2. tatus/1184747565415358469 role   +   payloads   - encode/decode command post encode/decode     statement visit select https://github.com/0140454/hac   iam * cheatsheet