A list of useful payloads and bypass for Web Application Security and Pentest/CTF
security
hacking
web-application
cheatsheet
enumeration
penetration-testing
bounty
vulnerability
methodology
bugbounty
pentest
bypass
payload
payloads
hacktoberfest
privilege-escalation
redteam
-
Updated
Jul 27, 2021 - Python
Currently, Trivy traverses all paths and looks for all Gemfile.lock in a container image. However, the image sometimes has only Gemfile.lock and doesn't install gems listed in the Gemfile.lock. I think a gem should have *.gemspec file if it is installed. e.g.
rake.gemspec
has the information aboutrake
.To avoid false positives from Gemfile.lock, we are probably able to take advantage of `*