Changelog
Notable additions and updates to the OWASP Hunting project.
2025
- Added Prompt Injection category covering AI/LLM attack vectors
- Added Prototype Pollution with impact chain documentation
- Expanded SSRF payloads with cloud metadata endpoint coverage
- Added Symbolic Link Attacks category
- Added Timing Attacks category with side-channel testing methodology
- Expanded JWT Vulnerabilities with algorithm confusion payloads
- Added automated duplicate detection via GitHub Actions workflow
- Added Discord advisory notifications workflow
- Expanded contributors recognition system
2024
- Initial repository structure established
- Core injection payload categories: SQL, NoSQL, XSS, Command, SSTI, SSJI
- Access control categories: Path Traversal, IDOR, Open Redirect
- Authentication categories: Auth Bypass, Password Reset, Weak Passwords
- Server-side categories: SSRF, Deserialization, File Upload
- Configuration categories: CORS, HTTP Smuggling, JWT, Business Logic
- Added LDAP, Log, XML, CSV injection categories
- Added Tor-Based Attacks category
- MIT License and DISCLAIMER.md
- CONTRIBUTING.md with submission guidelines
For the complete history, see the upstream repository commit log.