Methodology
Methodology
Methodology
  • 🧑‍🏫My Methodologies
  • 🕶️Google Dorks
  • 🌀Possible "Content-Type" Header values
  • 📜Scripts written by me for XSS
  • 🔼Subdomain Takeover
  • ✍️Tips and Write-ups
  • 🔧Tools and their Uses
  • 🎯XSS nuclei template CVE-2023-24488.yaml
  • 🕵️Recon strategies by other Hackers
    • 🔎Blind SQL Injection Detection and Exploitation (Cheat Sheet)
    • 🔎How i got more than 100 vulnerabilities in just one site? (zseano-challenge)
    • 🔎JS is l0ve ❤️.
    • 🔎My top 5 bookmarks that I consistently use for bug bounty and penetration testing.
    • 🔎Find the treasure hidden inside JavaScript
    • 🔎Deep-Subdomains-Enumeration-Methodology
    • 🔎Extensive Recon Guide For Bug Hunting
    • 🔎Finding Time Based SQLi injections : Edition 2023
    • 🔎From Self XSS to Account Take Over(ATO)
    • 🔎How I hacked NASA and got 8 bugs ?
    • 🔎How I was able to find 4 Cross-site scripting (XSS) on vulnerability disclosure program ?
    • 🔎Leakage of credential data for full control over the target.
    • 🔎Recon Like a Boss
    • 🔎Recon With Me
    • 🔎Simple Recon Methodology
    • 🔎SQL injection through HTTP headers
    • 🔎How to Get Unique Subdomains on Large scope
    • 🔎Static Analysis of Client-Side JavaScript for pen testers and bug bounty hunters
  • 🎯subdomain-enumeration
  • 🛠️CRLF
  • ❌xss
  • ⛴️Ghetto XSS Cheatsheet
  • 🚀Oneliners
Powered by GitBook
On this page

Possible "Content-Type" Header values

PreviousGoogle DorksNextScripts written by me for XSS

Last updated 1 year ago

You can find every content types here:

The most common types are:

  1. Type application:

     application/java-archive
     application/EDI-X12   
     application/EDIFACT   
     application/javascript   
     application/octet-stream   
     application/ogg   
     application/pdf  
     application/xhtml+xml   
     application/x-shockwave-flash    
     application/json  
     application/ld+json  
     application/xml   
     application/zip  
     application/x-www-form-urlencoded  
  2. Type audio:

     audio/mpeg   
     audio/x-ms-wma   
     audio/vnd.rn-realaudio   
     audio/x-wav   
  3. Type image:

     image/gif   
     image/jpeg   
     image/png   
     image/tiff    
     image/vnd.microsoft.icon    
     image/x-icon   
     image/vnd.djvu   
     image/svg+xml    
  4. Type multipart:

     multipart/mixed    
     multipart/alternative   
     multipart/related (using by MHTML (HTML mail).)  
     multipart/form-data  
  5. Type text:

     text/css    
     text/csv    
     text/html    
     text/javascript (obsolete)    
     text/plain    
     text/xml    
  6. Type video:

     video/mpeg    
     video/mp4    
     video/quicktime    
     video/x-ms-wmv    
     video/x-msvideo    
     video/x-flv   
     video/webm   
  7. Type vnd:

     application/vnd.android.package-archive
     application/vnd.oasis.opendocument.text    
     application/vnd.oasis.opendocument.spreadsheet  
     application/vnd.oasis.opendocument.presentation   
     application/vnd.oasis.opendocument.graphics   
     application/vnd.ms-excel    
     application/vnd.openxmlformats-officedocument.spreadsheetml.sheet   
     application/vnd.ms-powerpoint    
     application/vnd.openxmlformats-officedocument.presentationml.presentation    
     application/msword   
     application/vnd.openxmlformats-officedocument.wordprocessingml.document   
     application/vnd.mozilla.xul+xml  
🌀
http://www.iana.org/assignments/media-types/media-types.xhtml