Skip to content

Instantly share code, notes, and snippets.

View antonydevanchi's full-sized avatar
💭
I may be slow to respond.

Anton Piskunov antonydevanchi

💭
I may be slow to respond.
View GitHub Profile
@antonydevanchi
antonydevanchi / ev-sites.txt
Created November 12, 2020 19:58 — forked from ScottHelme/ev-sites.txt
Sites using EV in the Top 1 Million - 13th Sep 2019
14 apple.com
40 vk.com
44 github.com
49 tumblr.com
55 dropbox.com
85 medium.com
87 paypal.com
92 icloud.com
100 booking.com
112 weebly.com
;
; /etc/resolv.conf
; Compiled by Chris Hills ([email protected])
;
; This list can be obtained from the following locations:-
; - http://www.chaz6.com/files/resolv.conf
; - http://gitorious.org/chaz6/chaz6-dns-caches
; - git://gitorious.org/chaz6/chaz6-dns-caches.git
;
; Note 1: Having many nameservers defined can significantly slow down your
@antonydevanchi
antonydevanchi / provider.md
Created November 1, 2020 12:28
yandex-wut
serverless create \
>   --template-url https://github.com/yandex-cloud/serverless-plugin/tree/master/templates/nodejs

npm i

sls deploy

first blood

@antonydevanchi
antonydevanchi / yarr.js
Created October 20, 2020 03:30
How to get presigned URL for object in Yandex.Cloud Object Storage
const AWS = require('aws-sdk');
AWS.config.update({
region: 'ru-central1',
credentials: new AWS.Credentials({
accessKeyId: 'accessKeyId',
secretAccessKey: 'secretAccessKey'
})
});
@antonydevanchi
antonydevanchi / main.go
Created October 19, 2020 12:01
sls foo for trigger
package main
import (
"context"
"encoding/json"
"fmt"
)
// Входной JSON-документ будет автоматически преобразован в объект данного типа
type Request struct {
@antonydevanchi
antonydevanchi / web-servers.md
Created October 17, 2020 02:55 — forked from willurd/web-servers.md
Big list of http static server one-liners

Each of these commands will run an ad hoc http static server in your current (or specified) directory, available at http://localhost:8000. Use this power wisely.

Discussion on reddit.

Python 2.x

$ python -m SimpleHTTPServer 8000
@antonydevanchi
antonydevanchi / cloud_metadata.txt
Created October 14, 2020 03:12 — forked from jhaddix/cloud_metadata.txt
Cloud Metadata Dictionary useful for SSRF Testing
## AWS
# from http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html#instancedata-data-categories
http://169.254.169.254/latest/user-data
http://169.254.169.254/latest/user-data/iam/security-credentials/[ROLE NAME]
http://169.254.169.254/latest/meta-data/iam/security-credentials/[ROLE NAME]
http://169.254.169.254/latest/meta-data/ami-id
http://169.254.169.254/latest/meta-data/reservation-id
http://169.254.169.254/latest/meta-data/hostname
http://169.254.169.254/latest/meta-data/public-keys/0/openssh-key
@antonydevanchi
antonydevanchi / content_discovery_all.txt
Created October 14, 2020 03:12 — forked from jhaddix/content_discovery_all.txt
a masterlist of content discovery URLs and files (used most commonly with gobuster)
This file has been truncated, but you can view the full file.
`
~/
~
ים
___
__
_
#!/bin/bash
export DEBIAN_FRONTEND=noninteractive;
echo "[*] Starting Install... [*]"
echo "[*] Upgrade installed packages to latest [*]"
echo -e "\nRunning a package upgrade...\n"
apt-get -qq update && apt-get -qq dist-upgrade -y
apt full-upgrade -y
apt-get autoclean
echo "[*] Install stuff I use all the time [*]"
@antonydevanchi
antonydevanchi / wget.sh
Created October 3, 2020 05:27 — forked from Dammmien/wget.sh
wget cheat sheet
# POST a JSON file and redirect output to stdout
wget -q -O - --header="Content-Type:application/json" --post-file=foo.json http://127.0.0.1
# Download a complete website
wget -m -r -linf -k -p -q -E -e robots=off http://127.0.0.1
# But it may be sufficient
wget -mpk http://127.0.0.1
# Download all images of a website