PayloadsAllTheThings VS json5

Also https://github.com/swisskyrepo/PayloadsAllTheThings I'm sure there's a few test php files in here for filter bypasses too

An alternative display version is available at PayloadsAllTheThingsWeb.

- https://github.com/swisskyrepo/PayloadsAllTheThings - https://book.hacktricks.xyz/welcome/readme

If it's windows - oofta-may. Start here: https://github.com/swisskyrepo/PayloadsAllTheThings

It is a method for initial access so it is possible that it could appear in one of the exam machines Payload all the things has a lot of useful resources for sql injection https://swisskyrepo.github.io/PayloadsAllTheThings/

> If you run as a user who doesn't have admin access you should be protected,

That's not very reassuring. Privilege escalation on Windows is a well studied subject:

https://github.com/swisskyrepo/PayloadsAllTheThings/blob/mas...

Payloadallthethings github

JSON5 support

Meanwhile, formats have been evolving (JSON5, YAML), config entry points are constantly changing. These fluctuations, fortunately, were covered by tools like the cosmiconfig.

I think JSON5 is fairly close to this: https://json5.org

I reckon the only thing it's missing to be truly accessible to non-techies is that string values still need to be quoted, i.e. you can't have:

key: this is my value

(I'm definitely not saying it would be a good idea to allow quotes to be dropped, just that that's the only potential stumbling block I see for non-techies.)

I believe that's JSON5.

https://github.com/json5/json5

It's my preferred configuration file format, it fixes all the problems I have with JSON (trailing commas, comments) without turning it into a mess full of gotchas like YAML.

JSON 5 support

I would like to see mention of JSON5 which is 11 years its elder. For comments in JSON, JSON5 is a good starting point.